Google Hit with Staggering Location Data Fine
The Irish Data Protection Commission recently announced a staggering fine of 403 million euros, approximately 463 million dollars, against Google for its improper handling of user location data. Prior to this landmark ruling, numerous European consumer advocacy groups had lodged formal complaints with regulatory authorities regarding these severe infractions, primarily involving geographical data derived from web and application activities alongside location history records.
Harvesting User Geography for Targeted Advertising
An exhaustive audit conducted by the regulatory body scrutinized the preservation of location data between May 2018 and February 2020. This meticulous review revealed that Google’s processing of geographical information through its web and application activity, as well as its location history, blatantly violated fundamental principles of legality and fairness. Astonishingly, even after users explicitly deactivated their location history, the corporation continued to covertly harvest their whereabouts through alternative products. Furthermore, the location accuracy feature within Google Search suffered from a profound lack of transparency. This opacity directly breached Google’s accountability obligations and violated established regulations concerning data retention periods.
Users can locate the settings for web and application activity, alongside location history, within their Google Account Center. Upon navigating to this centralized hub, individuals can review their recent digital footprint, as the company aggregates the vast majority of activity logs from its myriad products here, intrinsically including sensitive location details. Conversely, the location accuracy configuration resides directly within Google Search. When utilizing this search engine, individuals frequently encounter pervasive prompts requesting access to their geographical coordinates. While the technology giant insists that precise positioning facilitates highly personalized search results, the harsh reality remains that this intimate information actively fuels their lucrative advertising enterprise.
Financial Penalties and Mandated Remediation
Guided by these alarming investigative findings and the stringent framework of the General Data Protection Regulation (GDPR), the regulatory authority finalized its decision. Detailed in the official announcement regarding how the Data Protection Commission fines Google 403 million euros, the company must now pay this monumental penalty. Furthermore, regulators have mandated that the tech behemoth completely overhaul its location data processing workflows within a strict six-month window. Should the corporation fail to complete these comprehensive rectifications within the designated timeframe, the commission holds the authority to inflict additional punitive measures.
In response, an official spokesperson for the company stated that this specific case revolves around archaic historical policies that have since undergone significant revisions. The representative emphasized that the organization proactively implemented automated deletion controls starting in 2019. Consequently, users currently possess the capability to configure data retention intervals directly within their account center, allowing them to systematically purge their activity logs across the digital ecosystem.
Support Our Threat Intelligence
If you find our technology report and cybersecurity news helpful, consider supporting our work.
Buy Me a Coffee
PayPal
