The Irish Data Protection Commission (DPC) issued a final decision on 21 September 2026, imposing an administrative fine of €403 million on Google Ireland Limited. The decision requires Google to bring its processing of location data into compliance within six months.
The DPC relied on several provisions of the GDPR, including Article 5 regarding principles of data processing, Article 6 on lawfulness of processing, Article 12 concerning transparency, and Article 13 related to information provided when collecting personal data.
The decision specifically applies to Google Ireland Limited, which was found to have violated GDPR principles in its processing of location data across features like 'Web & App Activity', 'Location History', and 'Location Accuracy'.
Google must comply with the DPC's order by 21 March 2027, ensuring that its data processing practices align with GDPR requirements.