The Irish Data Protection Commission (DPC) has imposed a fine of €403 million (approximately $460 million) on Google, finding that it violated the EU's General Data Protection Regulation (GDPR) regarding transparency and data retention principles in location data processing. This is another significant penalty issued by the DPC against a tech giant in recent years.

The DPC's investigation revealed that Google failed to clearly disclose to users how their location data was used for targeted advertising and interest inference, resulting in users losing actual control over their personal information. Additionally, Google retained user location data beyond necessary periods, exacerbating this loss of control. The data involved includes location tracking collected from Android devices and other Google services, which could theoretically infer sensitive information such as users' religious beliefs, political views, and health status.

The investigation began in February 2018 following a preliminary complaint from consumer organizations, and the DPC officially launched a statutory investigation in February 2020. After more than six and a half years, a penalty decision was made on September 21, requiring Google to complete compliance rectification within six months (by March 21, 2027).

Google responded that the violations were "historical issues," stating that "significant improvements have been made since 2019, and tools have been introduced to help users manage their location data," implying that the current products do not have the issues pointed out in the investigation.

As the regulatory authority for most American tech giants' European headquarters, the Irish DPC has issued fines totaling approximately €4.04 billion since the GDPR came into effect in May 2018, nearly four times the total fines from French regulators. Eight of the ten highest fines in GDPR history have originated from Dublin, with the €1.2 billion fine against Meta in May 2023 still being the record for the highest single penalty.

From a market mechanism perspective, although Google's advertising business heavily relies on location and behavioral data to build precise targeting capabilities, the €403 million fine has a limited impact relative to its annual revenue in the hundreds of billions. More importantly, EU regulators are continuously tightening compliance requirements for tech giants' data monetization models through "transparency + data retention" enforcement paths. Similar investigations and penalties are expected to continue, pressuring the ad tech industry to accelerate adjustments to data processing architectures.

Source: Public Information