Ireland Fines Google €403 Million for Illegal Location Tracking

• Ireland's Data Protection Commission (DPC) has fined Google €403 million for violating the General Data Protection Regulation (GDPR).
• Google unlawfully collected and processed user location data, including web and app activity, between 2018 and 2020.
• The company failed to prove lawful processing and neglected transparency obligations, resulting in users losing control over their data.
• Google is now required to bring its data processing practices into compliance within six months.

Context and Criticism

• The investigation stemmed from a 2018 complaint filed by several consumer protection agencies, including the Norwegian Forbrukerrådet and the European Consumer Organisation (BEUC).
• BEUC leader Agustín Reyna criticized the length of the proceedings, stating that such delays undermine the protection of fundamental consumer rights.
• Experts highlight that location data is highly sensitive, as it can reveal private details such as visits to schools, hospitals, or religious sites.

Regulatory Concerns in Ireland

• Ireland acts as the primary regulator for many tech giants due to their EU headquarters being based there.
• Critics, including Max Schrems of the organization noyb, have long accused Irish authorities of stalling cases and favoring big tech companies.
• There is ongoing concern regarding Ireland's current push for the "Digital Omnibus" program, which could allow tech firms to use personal data for AI training, a move critics describe as "digital expropriation."