Data Protection Commission fines Google €403M over processing of location data

The Data Protection Commission has fined Google €403 million for violating GDPR regulations in its processing of location data across three features: "Web & App Activity," "Location History," and "Location Accuracy" between May 2018 and February 2020. Google breached transparency, lawfulness, fairness, and accountability obligations, and unlawfully retained location data longer than necessary, potentially leaving users unaware their data was being used for targeted advertising and profiling. The company has been ordered to bring its processing into compliance within six months.