Ireland Fines Google €403 Million for Location Data Violations

Qna.Qa

Ireland Fines Google €403 Million for Location Data Violations

First seen 22 Sep 2026, 02:08 UTC • •27.8

Article Content

1 / 3

Browse articles

ThreatCluster •September 22, 2026 at 02:10 UTC

•Google fined €403 million for GDPR violations related to location data processing.
•The inquiry revealed users were unaware of how their location data was used.
•Google must comply with GDPR regulations within six months.

On September 21, 2026, Ireland's Data Protection Commission (DPC) fined Google €403 million (approximately $463 million) for breaching the EU's General Data Protection Regulation (GDPR) regarding user location data. The violations occurred between May 2018 and February 2020, involving features like 'Web & App Activity' and 'Location History.' The DPC's inquiry, initiated in February 2020, revealed that Google failed to ensure the lawfulness and fairness of its data processing practices. Users were potentially unaware that their location data was being used for targeted advertising and interest inference. The DPC mandated Google to comply with GDPR regulations within six months. This fine marks the fourth-largest penalty imposed by the DPC on major tech firms, contributing to over €4 billion in total fines since GDPR's implementation.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated just now How this analysis works

Timeline

2020-02-01

DPC opens inquiry into Google

The inquiry was initiated after complaints from European consumer rights organizations regarding Google's location data practices.

2026-09-21

DPC fines Google €403 million

The fine was imposed for violating GDPR rules on location data processing between May 2018 and February 2020.

More articles in this cluster (2)

Threat Graph

2 entities, 1 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (1)

Data Breach

Organization (1)

Google

Relationships

Data Breach related to Google

Following this threat?

Track Google in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical WSO2 API Manager Vulnerability Under Active Exploitation A critical vulnerability (CVE-2026-5430) in WSO2 API Manager is being actively exploited, allowing unauthenticated attackers to forge admin tokens via JWT authentication bypass. This flaw, which has a CVSS score of 10.0, affects multiple WSO2 products including API Manager, Universal Gateway, Traffic Manager, and API…

Critical Linux Kernel Vulnerability CVE-2025-39682 Under Active Exploitation A critical vulnerability (CVE-2025-39682) in the Linux kernel allows remote code execution through mishandling of zero-length TLS records. This flaw affects kTLS-enabled hosts running vulnerable kernel versions, exposing them to attackers without authentication. CISA added this vulnerability to its Known Exploited…