Ireland's Data Protection Commission fines Google €403 million over processing of location data
21 September 2026
Ireland's Data Protection Commission (DPC) announced fines totalling €403 million on Google Ireland Limited on 21 September 2026.
It found that Google infringed the EU's General Data Protection Regulation (GDPR) in processing location data.
The inquiry covered three features: 'Web & App Activity', 'Location History' and 'Location Accuracy', from 25 May 2018 to 4 February 2020.
The DPC, Google's Lead Supervisory Authority in the EU, opened the inquiry in February 2020 after complaints from consumer groups including BEUC.
Google has been ordered to bring its processing into compliance within 6 months.
The Irish Times reported it is the fourth-largest DPC fine under the GDPR; the largest remains Meta's €1.2 billion fine of 2023.
In plain words
GDPR General Data Protection Regulation — EU law on personal data protection, applicable from 25 May 2018.
DPC Data Protection Commission — Ireland's national data-protection regulator.
Lead Supervisory Authority Lead Supervisory Authority under the GDPR — The regulator in the EU country of a firm's main establishment that leads cross-border GDPR cases.
BEUC European Consumer Organisation (Bureau Européen des Unions de Consommateurs) — Umbrella body of European consumer groups.