GDPR23 Sep 2026GDPR Art. 5, GDPR Art. 6, GDPR Art. 12, GDPR Art. 13
The Irish Data Protection Commission, as lead supervisory authority, issued a final decision on 21 September 2026 finding that Google Ireland Limited infringed the GDPR in its processing of location data in 'Web & App Activity', 'Location History' and 'Location Accuracy' between 25 May 2018 and 4 February 2020. The infringements concern lawfulness and fairness, accountability, transparency and retention; the DPC imposed fines totalling EUR 403 000 000 and ordered Google to bring its processing into compliance within 6 months.
What to do: If you process location data, check that you can demonstrate a lawful basis, give transparent information under Articles 12 and 13 GDPR and apply defined retention periods for it.
Legal status: National guidance or authority · Jurisdiction: IE
Official source: Data Protection Commission (Ireland) ↗