The European Union’s data privacy watchdog has imposed a fine of 403 million euros ($463 million) on Google for violating strict privacy regulations concerning users’ location data. This penalty comes from the Irish Data Protection Commission, highlighting Google’s improper processing of location data in the Web & App Activity setting and Location History service.

Google’s setting, Web & App Activity, tracks browsing and search history, while Location History maps users’ visited places via mobile phones. Investigations revealed that Google’s handling of personal data lacked legality, fairness, and transparency, especially in the Location Accuracy feature on Android devices.

The inquiry commenced six years ago, focusing on Google’s application of the General Data Protection Regulation (GDPR) from its implementation in 2018 until February 2020. As Google’s European headquarters resides in Dublin, Ireland acts as the primary regulator for the tech giant within the EU’s 27 nations.

Google responded, stating that the case involved historical policies that have since been revised. Starting from 2019, they claim to have enhanced their practices by introducing effective tools for managing location data.

The regulator emphasized that location data, a personal data type collected by Google, is capable of deducing someone’s real-time location. Deputy Commissioner Graham Doyle noted the dual nature of location data, acknowledging its potential to improve online service utility while also uncovering intimate details about individuals.

This ruling marks the fourth-largest privacy fine levied by Ireland against Google, following earlier penalties imposed on Meta and TikTok. Notably, Meta faced a 1.2 billion euro fine. The commission stated its engagement in three additional privacy inquiries involving Google.