R7.5 Billion, Unfair Processing, and Ad Profiling — Inside the EU's Decision Against Google

The decision marks the conclusion of a regulatory inquiry opened in February 2020 into Google’s compliance with the General Data Protection Regulation (GDPR). The investigation examined how the tech giant processed location data collected through web and app activity alongside location history features between May 2018 and February 2020.

KEY NUMBERS AT A GLANCE: THE REGULATORY RULING
Core figures behind the European Union's penalty:

€403 Million (R7.5 Billion): Total fine levied by Ireland's DPC against Google.

21 Months Under Scrutiny: The violation period spanning May 2018 to February 2020.

6-Month Window: The mandated timeframe given to Google to bring location processing into compliance.

2 Core Transparency Failures: Failure to clearly inform users of ad targeting uses and excessive data retention timelines.

[[images:
https://pswiwopzqzlbhhrbtoxv.supabase.co/storage/v1/object/public/article%20images/goooogle.jpg | EU GDPR Privacy Enforcement. Source: 3D_generator / Getty Images]]

UNPACKING THE DYNAMICS: WHERE GOOGLE ERRED ON PRIVACY
To understand the mechanics of this landmark GDPR ruling, the DPC focused on how location permissions were presented and operationalized:

Lack of Processing Transparency: DPC Deputy Commissioner Graham Doyle noted that individuals were frequently unaware their location metrics were actively used to infer personal interests and serve targeted advertising.

Aggravated Data Retention: The regulator highlighted that Google retained location data for longer than necessary, worsening the "loss of control" experienced by users trying to manage their personal footprint.

Scope of GDPR Jurisdiction: Because Google's European headquarters are situated in Dublin, the Irish DPC acts as the primary lead supervisory authority enforcing EU-wide data protections for millions of users.

Remediation Order: In addition to the monetary penalty, the DPC issued a binding directive giving Google six months to align its location data collection, storage, and notification systems with EU standards.

WHAT THIS MEANS FOR CONSUMERS AND THE DIGITAL ECONOMY
Strengthened Consumer Control: Regulators continue to signal that opting into basic location services for navigation cannot be conflated with consent for background ad profiling.

Heightened Pressure on Tech Giants: The penalty adds to European precedents holding multi-national tech platforms accountable for historical data collection practices.