Google has received a hefty fine of over €400 million (£345 million) due to its handling of users’ location data. This decision comes from the Data Protection Commission (DPC) in Ireland, following allegations that the tech giant misled users into consenting to constant tracking on their mobile devices.
The DPC’s investigation was prompted by complaints from multiple European consumer organizations, asserting that Google had effectively monitored every movement of its users. The fine is the result of findings that suggest users might not have been fully aware of how their location data was being utilized, which includes influencing personalized advertisements and gathering insights into their health and interests.
The investigation began six years ago in response to a 2018 study by the Norwegian Consumer Agency, highlighting how location data could expose sensitive information, such as religious beliefs, political affiliations, health conditions, and sexual orientation based on visit patterns to specific locations.
According to Graham Doyle, deputy commissioner at the DPC, the inquiry revealed that users could believe they were opting out of location tracking when, in fact, they were being tracked to serve targeted ads. “Location data is a type of personal data processed through tracking, and it can reveal deeply personal insights about an individual,” Doyle stated.
In response to the DPC’s ruling, a spokesperson for Google argued that the case pertains to outdated policies that have since been revised. “Since 2019, we have made significant improvements in our practices and developed tools that empower users to manage their location data effectively,” the spokesperson emphasized.
The European Consumer Organisation (BEUC) backed the DPC’s investigation and pointed to research indicating that Google employed manipulative tactics to keep users’ location history and web activities activated. Finn Myrstad, director of digital policy at the Norwegian Consumer Council, remarked, “This ruling is a crucial step toward safeguarding our online rights. Individuals should be able to make informed choices without falling victim to misleading practices.”
Agustín Reyna, director general of BEUC, welcomed the fine but criticized the lengthy process: “The time taken to reach this conclusion is out of proportion to the seriousness of the infraction. Delayed enforcement can be as detrimental as a lack of enforcement.”
The DPC’s inquiry was focused on how Google handled “web and app activity,” “location history,” and “location accuracy” between May 25, 2018, and February 4, 2020. Following the ruling, the DPC ordered Google to align its practices with the EU’s General Data Protection Regulation (GDPR) within a six-month timeframe.
This marks the fourth-largest fine issued by the Irish regulator, which oversees all major tech companies based in Ireland, including prior significant fines against Meta and TikTok.
Doyle further highlighted that the GDPR ensures a high level of personal data protection across the European Economic Area, mandating lawful and transparent data processing. He concluded, “Google’s missteps in this area left individuals unaware of how their location data could be used to manipulate them and eroded their control over their personal information.”
As of now, there are three other substantial inquiries involving Google that are nearing completion.
Editor’s Take
This fine underscores the increasing scrutiny tech companies face regarding data privacy. For users, it signifies a move towards stronger protections, while for businesses and developers, adherence to GDPR will be paramount. Such regulatory actions could foster a more transparent digital ecosystem, compelling companies to prioritize user consent and privacy.
Source: www.theguardian.com
