From the journal

Irish Data Protection Commission fines Google €403 million for GDPR violations

The Irish Data Protection Commission has fined Google Ireland Limited €403 million for violating GDPR principles related to location data processing. Google must comply within six months of the decision made on 21 September 2026.

1 min read

The Irish Data Protection Commission (DPC) issued a final decision on 21 September 2026, imposing an administrative fine of €403 million on Google Ireland Limited. The decision requires Google to bring its processing of location data into compliance within six months.

The DPC relied on several provisions of the GDPR, including Article 5 regarding principles of data processing, Article 6 on lawfulness of processing, Article 12 concerning transparency, and Article 13 related to information provided when collecting personal data.

The decision specifically applies to Google Ireland Limited, which was found to have violated GDPR principles in its processing of location data across features like 'Web & App Activity', 'Location History', and 'Location Accuracy'.

Google must comply with the DPC's order by 21 March 2027, ensuring that its data processing practices align with GDPR requirements.

Source: EDPB, official publication, retrieved 2026-09-25