Google has been fined 403 million euros ($463 million) for breaching the European Union’s strict privacy rules because it mishandled users’ location data, the bloc’s data privacy watchdog said Monday.
Ireland’s Data Protection Commission said its investigation found Google did not lawfully or fairly process location data in users’ Web & App Activity, a Google setting that tracks browsing and search history, and in their Location History, a service that maps places they’ve been with their mobile phones.
Regulators also found the company failed to be lawful, fair and transparent when it processed personal data in its Location Accuracy feature in the Android mobile operating system.
Ireland is the lead regulator for Google in the 27-nation EU because the U.S. tech giant’s European headquarters is based in Dublin.
The investigation, which opened six years ago, examined how Google applied the EU privacy rule book, known as the General Data Protection Regulation, from the time it took effect in 2018 until February 2020.
“This case centers around historical policies that have since been updated,” Google said in a statement. “From 2019 onwards, we’ve significantly evolved our practices and launched robust tools that make managing location data simple.”