Google’s long-running fight over location tracking just added another massive price tag, with European regulators imposing a $463 million fine over how the company handled users’ location data.
According to Ireland’s Data Protection Commission, Google was fined €403 million, approximately $463 million, after regulators found violations of the European Union’s General Data Protection Regulation involving Web & App Activity, Location History, and Location Accuracy. The investigation covered Google’s practices between May 25, 2018, when the GDPR became applicable, and February 4, 2020.
The problem was not simply that Google possessed location information. The Data Protection Commission found that the company unlawfully and unfairly processed location data through Web & App Activity and Location History. Regulators also found transparency problems across all three features, said Google could not demonstrate compliance with key privacy requirements for Location Accuracy, and found violations involving how long location information was retained. The commission ordered Google to bring the affected processing practices into compliance within six months.
That distinction matters because location data can reveal far more than whether someone visited a particular restaurant, store, or neighborhood. According to the Data Protection Commission, information collected through these systems can be used by itself or with other data to determine where someone has been. Regulators said users could have been unaware that location information was influencing advertisements or being used to infer their interests.
“Location data can bring both benefits and harms to individuals,” Deputy Commissioner Graham Doyle said. “It can greatly enhance the utility of online services, but it can also reveal a significant amount of information about an individual, including information that is inherently private.”
Google has stressed that the investigation focused on older practices rather than the company’s current location controls.
“This case centers around historical policies that have since been updated,” Google said in a statement. “From 2019 onwards, we’ve significantly evolved our practices and launched robust tools that make managing location data simple.”
The company’s location privacy issues, however, stretch well beyond Europe. The latest fine joins a series of major U.S. settlements in which state officials accused Google of misleading consumers about when their location information was being collected. While the cases were brought under different laws and did not involve identical allegations, they repeatedly focused on what users were told about location settings and what Google continued collecting behind those settings.
In 2022, a coalition of 40 state attorneys general reached a $391.5 million settlement with Google over its location tracking practices. According to the New York Attorney General’s Office, investigators said Google led users to believe that turning off Location History would stop location tracking while failing to adequately explain that Web & App Activity could continue collecting location information. The settlement required Google to make its location controls and disclosures more transparent.
That multistate case echoed one of the central issues in the European investigation: users could encounter different Google settings that affected location information in different ways.
Arizona had already pursued its own case. In October 2022, the Arizona Attorney General’s Office announced an $85 million settlement resolving a lawsuit alleging Google deceptively collected users’ location information even after they disabled Location History. Arizona officials alleged that location information could still be gathered through other settings, including Web & App Activity, and used as part of Google’s advertising business.
California followed with another major payout in 2023. According to the California Department of Justice, Google agreed to a $93 million settlement resolving allegations that it collected, stored, and used location data for consumer profiling and advertising without sufficient informed consent. California alleged that users could turn off Location History while Google continued collecting location information through other sources.
The California agreement also required changes aimed at making location tracking easier to understand. State officials said Google had to provide additional information when users enabled location-related settings, explain how location data could be used for personalized advertising, and provide more detailed disclosures about the location information it collected.
Then came an even larger privacy settlement in Texas. In October 2025, the Texas Attorney General’s Office said Google finalized a $1.375 billion agreement resolving two state privacy enforcement actions. The Texas cases were broader than the current European location ruling because they involved allegations related to geolocation data, Incognito browsing activity, and biometric identifiers. Still, geolocation tracking was one of the central categories of information challenged by the state.
Taken together, the cases show why Google location data has remained a regulatory issue for years. The legal arguments vary by jurisdiction, but regulators have repeatedly focused on whether consumers understood which settings actually controlled location collection, whether Google clearly explained how the information was being used, and whether users could meaningfully stop certain types of tracking.
The European case itself began after complaints from consumer organizations prompted Ireland’s Data Protection Commission to open an investigation in February 2020. Because Google’s European headquarters are in Dublin, Ireland serves as the company’s lead privacy regulator for many GDPR matters in the European Union.
The investigation ultimately took more than six years to reach its €403 million penalty. According to the Associated Press, the fine became the fourth-largest privacy penalty issued by Ireland’s Data Protection Commission, which has also imposed major sanctions against other large technology companies. The regulator said three additional large-scale inquiries involving Google remain open.
Google has changed several location-related features over the years, including offering automatic deletion controls and changing how some Maps Timeline information is stored. According to the company’s response reported by multiple outlets, Google maintains that the policies examined by regulators are historical and that its privacy tools have significantly evolved since 2019.
Still, the $463 million European fine lands against a much larger backdrop. From Arizona’s $85 million agreement to the $391.5 million multistate settlement, California’s $93 million deal and Texas’ broader $1.375 billion privacy settlement, disputes over what Google collects and what users understand about that collection have repeatedly turned into expensive legal consequences.
For consumers, the recurring question behind those cases has remained largely the same: when a location setting appears to be turned off, how much information is actually no longer being collected, and how clearly does a company have to explain the difference?