DUBLIN, Sept 21 - The lead European Union (EU) data privacy regulator for most of the biggest internet companies fined Alphabet's Google search engine €403 million (RM1.88 billion) after an inquiry into its processing of location data, according to Ireland's Data Protection Commission (DPC).
The Irish watchdog found that Google infringed EU privacy rules known as the General Data Protection Regulation (GDPR) through three of its specific features - 'Web & App Activity', 'Location History' and 'Location Accuracy' - from 2018 to 2020.
It was the fourth largest fine of the more than €4 billion (RM18.74 billion) in total levied by the DPC since it became the lead EU regulator for most big United States tech firms under the strict 2018 GDPR due to the location of companies' EU operations in Ireland.
Google was also ordered by the DPC to bring its processing into compliance within six months. The company did not immediately respond to a Reuters request for comment.
"As a result of Google's failures, individuals could have been unaware that their location was being used to, for example, influence them with ads or to infer their interests, and could lose control over their personal data.
"The retention of users' location data for longer than necessary aggravated this loss of control," DPC Deputy Commissioner Graham Doyle said in a statement.
The DPC opened the inquiry in 2020 following complaints from several European consumer rights organisations, including the pan-European consumers' organisation BEUC, regarding Google's processing of location data.
The infringements included the lawfulness and fairness of Google's processing of location data in 'Web & App Activity', an account setting that processes information related to users’ activity on Google services, and 'Location History', which keeps track of users' location through mobile devices.
It added that Google is subject to three other ongoing statutory inquiries, all of which are at an advanced stage.
