A PYMNTS Company

Google Faces €403 Million EU Privacy Penalty Over Location Tracking

 |  September 21, 2026
Google AI pointer

Google has been ordered to change how it handles certain location information in Europe after Ireland’s privacy watchdog imposed a €403 million ($463 million) penalty, extending a series of regulatory actions against major technology companies under the European Union’s data-protection regime.

    Get the Full Story

    Complete the form to unlock this article and enjoy unlimited free access to all PYMNTS content — no additional logins required.

    Subscribe to our daily newsletter, PYMNTS Today.

    By completing this form, you agree to receive marketing communications from PYMNTS and to the sharing of your information with our sponsor, if applicable, in accordance with our Privacy Policy and Terms and Conditions.

    The decision concerns the way Google processed location information associated with several of its services. Reuters reported that Ireland’s Data Protection Commission identified violations involving Web & App Activity, Location History and Location Accuracy.

    The case puts the focus not simply on whether Google collected location information, but on the degree of control and understanding users had over that collection.

    Graham Doyle, a deputy commissioner at the Irish regulator, said deficiencies identified in the case could leave people without sufficient understanding of how their location information was being processed, including its potential use in advertising and inferences about their interests, according to Reuters. The regulator also raised concerns about retaining such information longer than necessary.

    Google must address the practices covered by the decision within six months, Reuters reported. The company had not immediately provided Reuters with a response to the ruling.

    The financial sanction is significant, though it is not the largest imposed by Ireland’s privacy authority. Reuters reported that the €403 million penalty ranks as the regulator’s fourth biggest. The commission has levied more than €4 billion in fines since taking on its prominent enforcement role under the EU’s General Data Protection Regulation.

    Ireland occupies an important position in European technology oversight because a number of large U.S. technology companies base their regional operations there. Under the GDPR system, that can make the Irish commission the principal privacy regulator for companies operating across multiple EU countries.

    We’d love to be your preferred source for news.

    Please add us to your preferred sources list so our news, data and interviews show up in your feed. Thanks!

    Read more: Google Dodges Ad-Tech Breakup as Judge Imposes Six-Year Oversight

    The Google inquiry dates to 2020 and followed complaints from European consumer groups, including BEUC, the European Consumer Organisation, according to Reuters. Regulators examined Google’s handling of location information over an earlier period, including practices between 2018 and 2020.

    The dispute is part of a broader question confronting digital platforms in Europe: how much information users receive about data collection and whether the choices presented to them satisfy the GDPR’s standards for lawful and transparent processing.

    Location information can be particularly valuable to online platforms because it may help personalize services and advertising. That commercial usefulness has also made the collection and retention of such information an important area of regulatory scrutiny.

    The Irish decision does not end Google’s dealings with the regulator. Three other statutory investigations involving the company are at advanced stages, Reuters reported, leaving the possibility of further regulatory action.

    The penalty therefore adds another compliance obligation for Google in Europe while reinforcing the potential financial consequences for technology companies when regulators conclude that the mechanisms surrounding personal-data collection fall short of EU requirements.

    Reporting in this article concerning the Irish Data Protection Commission’s decision, the size and ranking of the fine, the investigation, Google’s response status and the additional inquiries is attributed to Reuters’ Sept. 21, 2026 report.

    Source: Reuters