PrivacySignal
Enforcement

Google’s location data privacy failures draw a €403 million fine

Malwarebytes · · International · Enforcement

Google has been fined €403 million over failures related to how it handled user location data privacy. The penalty reflects regulatory action against one of the world's largest data collectors for not meeting required privacy standards.

Why this matters: Google's entire business runs on knowing where you are and what you do. A €403 million fine sounds large, but for Google it is closer to a rounding error than a deterrent. The real issue is that location data is among the most sensitive information a company can hold. It can reveal your doctor, your religion, your relationships, your politics. When a company that size mishandles it, the harm is not abstract. The fine matters less than whether anything about the underlying practice actually changes.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

The Attacker Did Not Need to Sleep

Spain received its first reported personal-data breach carried out by an AI agent. The techniques were familiar. The speed and autonomy were not.

· 4 min read Read →

Related stories

Enforcement
Information Commissioner's Office · · UK

TikTok withdraws two appeals in children’s privacy action and accepts £12.7m fine

TikTok has dropped two appeals against the UK Information Commissioner's Office and agreed to pay a £12.7 million fine related to a children's privacy enforcement action. The company is no longer contesting the ICO's findings in those proceedings.

Who should care: Lawyers · Privacy officers · Compliance · General readers · Policy

#enforcement#privacy Read original →
Enforcement
EDPB · · EU

The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data

Ireland's Data Protection Commission fined Google €403 million on September 21, 2026, following an inquiry into how the company handled location data. The decision included a compliance order and found violations of GDPR rules on lawful processing, data principles, and transparency obligations.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy

#enforcement#gdpr#regulation#privacy Read original →
Enforcement
The Guardian — Tech · · International

New UK agency to fight ‘information warfare’ from likes of Russia, Burnham tells UN

The UK government is establishing a National Centre for Information Defence to detect and counter foreign disinformation and AI-generated deepfakes, particularly from hostile states such as Russia. The centre will bring together intelligence agencies, law enforcement, and social media companies.

Who should care: Lawyers · Privacy officers · Compliance · General readers · AI governance · Policy

#enforcement#ai Read original →
Enforcement
BBC — Tech · · International

US criticises Australia's proposed algorithm opt-out laws as 'censorship'

Australia is considering laws that would require tech companies to give users the ability to opt out of algorithmic content ranking, with fines for firms that fail to comply. The United States has pushed back on the proposal, framing it as censorship.

Who should care: Lawyers · Privacy officers · Compliance · AI governance · Administrators · General readers · Policy

#enforcement#ai-governance#ai#privacy Read original →