Google’s 403 Million Euro Location Fine, in a Bite

Ireland fined Google 403 million euros over location data, and the company that had to answer was not the American parent.

• Google Ireland Limited, the Dublin establishment, is the entity named in the decision. Ireland’s Data Protection Commission acted as Lead Supervisory Authority, so its ruling binds 27 member states.
• Four findings. Lawfulness and fairness, accountability, transparency, and retention, across Web & App Activity, Location History and Location Accuracy.
• The period covered runs from 25 May 2018 to 4 February 2020. The inquiry opened in February 2020 after complaints from European consumer groups.
• Six months to bring processing into compliance. That is a dated product requirement, not advice.
• Alphabet can absorb the money. The accountability finding is the one that reaches engineering, because it asks for evidence that your basis is lawful rather than a statement of intent.

Nothing here ordered Google to store European data inside Europe. The findings are about how location data was processed and how long it was kept. The sovereignty lesson sits in the enforcement path, because the entity a company operates through decides which regulator can name it and which law applies.

Read the full analysis