The Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location data
Ireland's Data Protection Commission fined Google €403 million on September 21, 2026, following an inquiry into how the company handled location data. The decision included a compliance order and found violations of GDPR rules on lawful processing, data principles, and transparency obligations.
Why this matters: Google collected location data from people who thought they had turned it off. That was the core of earlier investigations into this issue, and regulators found the company broke basic rules about being honest with users and having a legal basis to collect that data in the first place. A €403 million fine sounds large. For Google it is closer to a rounding error. The compliance order matters more, because that forces a change in behavior rather than just writing a check. The real issue is how long it took to get here, and what that says about how well privacy law actually keeps pace with how these companies operate.
Who should care: Lawyers · Privacy officers · Compliance · AI governance · General readers · Policy
This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.