Ireland’s data regulator found linked failures in lawfulness, transparency, accountability and retention across three Google location-data features, imposing €403 million in fines and a six-month compliance order.
What changed
The Irish Data Protection Commission announced a final decision against Google Ireland Limited over historical processing of location data in Web & App Activity, Location History and Location Accuracy. The regulator imposed administrative fines totalling €403 million and ordered compliance within六?
Public record through 2026-09-22. Source references count citations across published briefings, including repeated sources. Explore the record and its limits →
What We Publish / What We Sell
D
Free · Public
The Daily
Five evidence-backed selections for security leaders, every weekday.
Google location-data decision: Security.io executive score
Scores are Security.io editorial assessments, not regulator metrics. Exposure reflects transferability across data-intensive operating models; urgency reflects the six-month compliance order; consequence reflects financial, legal and governance impact. Enterprise exposure: 84. Decision urgency: 82. Business consequence: 91. Focus the chart and use the up and down arrow keys for detail. Source: Security.io editorial scoring based on the selected source ledger, using a 0–100 assessment of enterprise exposure, decision urgency and business consequence.