Irish data regulator fines Google 403 million euros over location data practices

On September 21, 2026, the Irish Data Protection Commission (DPC) imposed a fine of 403 million euros on Alphabet, the parent company of Google, for violating European Union privacy regulations. The penalty follows an investigation into how the company collects and processes sensitive user location data through websites, applications, and historical location tracking.

According to Deputy Commissioner Graham Doyle, Google's practices failed to inform users that their location data was being utilized for targeted advertising and interest profiling. The regulator noted that these failures deprived individuals of control over their personal information. The DPC has issued a strict directive requiring the company to bring its data management practices into full compliance with the General Data Protection Regulation (GDPR) within the next six months.

This ruling stems from complaints filed by European consumer organizations regarding opaque data handling. The fine represents the fourth largest penalty issued by the DPC to date. Google is now mandated to reform its systems to ensure transparency and adherence to European privacy standards to avoid further legal action.