Photo via BBC News

Google hit with €403m fine by Irish data watchdog over GDPR violations

Read the original at BBC News ↗
Cite

McElhatton, E. (2026, September 21). Google hit with €403m fine by Irish data watchdog over GDPR violations. BBC News. https://www.bbc.co.uk/news/articles/ck1e52v16ngxo?at_medium=RSS&at_campaign=rss

Dated when The Aporia collected the article, usually within hours of publication. Check the original for its exact date and byline.

BBC News · collected 2026-09-21 · by Emmet McElhatton

Quick Summary

Google has been fined €403 million by Ireland's Data Protection Commission for violating the GDPR in its handling of user location data from May 2018 to February 2020. The fine, one of the largest imposed by the Irish watchdog, stems from an investigation launched six years ago following complaints from European consumer groups. Google must now bring its data practices into compliance within six months and has responded by highlighting recent updates to user controls for managing location data and personal information privacy settings.
Written by AI on 2026-09-21, from this article's own text only (the story summary below draws on all the coverage).

AI analysis

Story summary

On September 21, 2026, Ireland’s Data Protection Commission (DPC) fined Google €403 million ($463 million) for violating the EU's General Data Protection Regulation (GDPR). The fine stemmed from an investigation that began in 2020 following complaints about Google's handling of location data. DPC Deputy Commissioner Graham Doyle stated that users may have been unaware their location was being used to influence ads or infer interests, thus losing control over their personal information. The inquiry focused on how Google processed location data through its Web & App Activity, Location History, and Location Accuracy features from May 25, 2018, to February 4, 2020. Ireland serves as the lead EU regulator for many U.S.-based tech firms due to their headquarters being located in Dublin.

Written for “Google Location Data Fine” on 2026-11-03, grounded in this article and the 4 other(s) covering the same event.

Story

📰 Google Location Data Fine
Technology · 5 article(s) covering the same event. Compare every outlet's account →

Compared with similar articles

This article reads unscored and hedges 19% of its claims. Each row says how that neighbour differs.
The Hindu
Hedges 1 of 6 claims Outlet record 60/100
New York Post
Hedges 0 of 12 claims Outlet record 66/100
Global News
Hedges 0 of 12 claims Outlet record 63/100
Toronto Star
Hedges 0 of 2 claims Outlet record 64/100
How this article was measured signals, leaning charts, publisher record, byline, topics and claims

Signals How these are calculated →

Claims extracted
16
sentences that state something as happening or true
Uncertain
19%
3 of 16 hedged ("reportedly", "may", "according to")
Leaning
not political
takes no side on a contested political question
Publisher signals
68/100
BBC News's corrections and hedging, across everything collected from it. Not a measure of accuracy.
Outlets on this story
5
Technology
Same framing elsewhere
1
articles that frame the event the way this one does
Analyzed 2026-09-21 · how these are computed

How this is being covered How these are calculated →

Article leaning vs. publisher reliability
Source leaning vs. consistency

Publisher

BBC News · 4926 article(s) · 6 correction(s) detected
Running correction rate · 6 correction(s)

Who wrote this

Emmet McElhatton
2 article(s) here · 1 carrying a prediction
🔮 The inquiry concerned Google's processing of location data in three specific features - Web & App Activity, Location History and Location Accuracy between 25 May 2018 to 4 February 2020.
Also by Emmet McElhatton
Nothing else under this byline is closely related to this article, so these are simply their most recent.

Topics

DPC Data Protection Commission General Data Protection Regulation Google the Republic of Ireland's

Subjects

Google ORG · 8× DPC ORG · 3× Data Protection Commission ORG · 1× Doyle PERSON · 1× EEA ORG · 1× European NORP · 1× Graham Doyle PERSON · 1× Irish NORP · 1× the European Union ORG · 1× the Republic of Ireland's GPE · 1×

Narrative

Other measures to safeguard personal data have also been introduced, they said, such as "simple ads management", which allows you "to turn off personalized ads entirely", and "increased transparency", including "consolidated detailed information about our location data practices and account settings".
framing: assertive · carried by 1 article(s) · first seen 2026-09-21
🔮 The inquiry concerned Google's processing of location data in three specific features - Web & App Activity, Location History and Location Accuracy between 25 May 2018 to 4 February 2020.

Claims (16 extracted, 3 hedged)

- Published Google has been fined €403m (£345m) by the Republic of Ireland's Data Protection Commission (DPC) over its handling of location data. asserted
Google → publish → data
The penalty - one of the largest of its kind imposed by the Irish watchdog authority - followed an inquiry launched into the tech giant six years ago, following complaints from several European consumer rights organisations. asserted
penalty → impose → organisations
On Monday the DPC said its investigation found Google had processed data in a manner that was not "lawful", "fair" or "transparent". asserted
that → say → manner
The inquiry concerned Google's processing of location data in three specific features - Web & App Activity, Location History and Location Accuracy between 25 May 2018 to 4 February 2020. uncertain
inquiry → concern → February
Location data is any kind of data which can be used to infer a person's location. asserted
which → use → location
It can "reveal a significant amount of information about an individual, including information that is inherently private", said DPC deputy commissioner Graham Doyle in a statement released on Monday. asserted
Doyle → reveal → Monday
The report said Google's practices "infringed" General Data Protection Regulation (GDPR) - legislation that came into effect on 25 May, 2018, creating strict data privacy and security law within the European Union (EU). uncertain
that → say → Union
Doyle added: "The GDPR (General Data Protection Regulation) provides a high level of protection of personal data throughout the EEA (European Economic Area), and requires that the processing of personal data must be carried out in a lawful, fair and transparent manner." asserted
processing → add → manner
He continued: "As a result of Google's failures... individuals could have been unaware that their location was being used to, for example, influence them with ads or to infer their interests, and could lose control over their personal data. uncertain
location → continue → data
"The retention of users' location data for longer than necessary aggravated this loss of control." asserted
retention → aggravate → control
In addition to being fined, Google has also been ordered to bring its data processing into compliance within six months. asserted
Google → fin → months
How have Google responded? asserted
Google → respond → ?
In a statement, Google said: "This case centres around historical policies that have since been updated. asserted
that → say → policies
From 2019 onwards, we've significantly evolved our practices and launched robust tools that make managing location data simple." asserted
managing → evolve → data
They also said they have made data protection improvements in recent years, including "industry-first auto-delete controls", which enables all users to "set your account to automatically delete your data on a rolling three, 18, or 36-month basis". asserted
which → say → basis
Other measures to safeguard personal data have also been introduced, they said, such as "simple ads management", which allows you "to turn off personalized ads entirely", and "increased transparency", including "consolidated detailed information about our location data practices and account settings". asserted
you → safeguard → practices
💬Give feedback
🕘History 🎫Support