Our takeGoogle has been fined €403M by Ireland's DPC for GDPR violations in how three location features processed user data from 2018-2020; it must now bring processing into compliance within six months.Cyber Resilience desk
Sources (4)
- helpnet · helpnet
- bleeping · bleeping
- hackernews · hackernews
- securityweek · securityweek
What this means for you — Security leader:Review and update how your organization obtains and documents consent for any location or tracking features, especially if you use Google Workspace or similar services.
What this means for you — Lean IT orgs:If your team uses Google services that collect location data, check the new consent settings the company must roll out in the next six months and adjust your own usage accordingly.
What this means for you — MSP:Audit client environments for Google services handling location data; prepare to advise on updated consent flows once Google implements the DPC's six-month compliance order.
What this means for you — Researcher:The fine covers Google's location features from 2018–2020; track how the mandated changes affect data-processing transparency and user controls going forward.