Irish DPC fines Google EUR 403 million over location data processing
The Irish Data Protection Commission fined Google EUR 403,000,000 for GDPR violations in processing location data, including lawfulness, fairness, transparency, accountability, and retention. Google must bring processing into compliance within 6 months.
- Framework
- GDPR
- Who it concerns
- Google Ireland Limited
What changed?
Each point with the sentence from the source that says it.
Google infringed the GDPR in respect of the lawfulness and fairness of its processing of location data in Web & App Activity and Location History.
Google infringed the GDPR in respect of: the lawfulness and fairness of its processing of location data in Web & App Activity and Location History;
Google infringed its accountability obligations by failing to demonstrate compliance with the lawfulness, fairness and transparency principle regarding Location Accuracy.
its accountability obligations under the GDPR by failing to be able to demonstrate compliance with the lawfulness, fairness and transparency principle regarding its processing of personal data in Location Accuracy;
Google infringed its transparency obligations in respect of all three features: Web & App Activity, Location History, and Location Accuracy.
its transparency obligations in respect of all three features referred to above;
Google infringed the GDPR in respect of its retention of location data in Web & App Activity and Location History.
its retention of location data in Web & App Activity and Location History.
The DPC imposed administrative fines totalling EUR 403,000,000 and ordered Google to bring its processing into compliance within 6 months.
The DPC has imposed administrative fines totalling EUR 403 000 000 and has ordered Google to bring its processing into compliance within 6 months.
Which policies should you review?
Suggested from the change above. Check the source before you edit.
- Data Protection Policy
Review the Data Protection Policy to ensure lawfulness and fairness of location data processing, especially for features similar to Web & App Activity and Location History.
- Privacy Notice
Review the Privacy Notice to ensure transparency about location data processing for all relevant features.
- Data Retention and Erasure Policy
Review the Data Retention and Erasure Policy to ensure retention periods for location data are compliant.
- Records of Processing Activities
Review Records of Processing Activities to ensure accountability for location data processing, including demonstrating compliance with lawfulness, fairness, and transparency.