The **Data Protection Commission (DPC)**, acting as the lead supervisory authority for **Google** within the European Union, has announced a substantial penalty against the tech behemoth. The fine, exceeding €403 million (approximately $462 million), stems from an extensive inquiry into **Google**'s processing of location data, which allegedly violated **GDPR** provisions. The DPC's investigation, which began in February 2020 following complaints from several European consumer rights groups, focused on three key services and features: web and app activity, location history, and location accuracy. The inquiry scrutinized **Google**'s data processing norms from May 2018, when **GDPR** came into effect, through February 2020. ### GDPR Violations and Lack of Transparency The core of the DPC's findings revolves around **Google**'s alleged failures in processing location data legally, fairly, and with adequate transparency and accountability. Deputy Commissioner **Graham Doyle** highlighted the highly sensitive nature of location data, stating, “It can also reveal a significant amount of information about an individual, including information that is inherently private.” The DPC's press release emphasized that **Google**'s shortcomings in this area could have left individuals unaware that their location data was being used, for instance, to influence them with advertisements or infer their interests. This lack of awareness led to a perceived loss of control over personal data, further compounded by the retention of user location data for longer than necessary. ### Google's Response and Future Compliance In response to the DPC's decision, a spokesperson for **Google** stated that the case primarily addresses “historical policies that have since been updated.” The company claims to have significantly evolved its practices and introduced robust tools for managing location data since 2019. Beyond the financial penalty, **Google** has been ordered to implement necessary changes to its data processing practices within six months. This marks the first time the DPC has fined **Google**, though other major tech companies like **TikTok** and **Meta** have faced similar multi-million Euro penalties on previous occasions under **GDPR** enforcement.