Google Fined €403 Million Over Location Data: What Android Users Should Know

Ireland’s Data Protection Commission (DPC) has fined Google €403 million over how it processed location data in three features: Web & App Activity, Location History and Location Accuracy. The decision, announced on September 21, 2026, concerns processing between May 25, 2018 and February 4, 2020. It does not mean every current Android location feature has been declared unlawful, and it is important to separate the historical findings from today’s controls.

What the DPC actually decided

The DPC said Google infringed GDPR requirements involving lawfulness, fairness and transparency. It also found problems with accountability for Location Accuracy and with retention of location data in Web & App Activity and Location History. The regulator imposed administrative fines totaling €403 million and ordered Google to bring the relevant processing into compliance within six months.

The scope matters: the inquiry examined a defined historical period ending in February 2020. The DPC says its full decision will be published later. Google has said the case concerns historical policies that have since been updated and plans to appeal, according to reporting on the decision.

The three location features are not the same thing

Web & App Activity is a Google Account setting that can store activity from Google sites and apps; the information can include location data. Location History, now surfaced to many users through Google Maps Timeline, records places and routes for users who opt in. Location Accuracy is an Android feature that helps a device estimate location more accurately than GPS alone and can use signals such as Wi-Fi and mobile networks.

That distinction is useful when auditing a phone. Turning off an app’s location permission, changing a Google Account activity setting and changing Android’s Location Accuracy setting affect different layers.

What Android users can check now

You do not need to react to the fine by disabling every location feature. Instead, review the controls that match how you use your phone.

1. Review app-level location access. Open Android’s permission controls and look for apps with location access that no longer need it. Where supported, prefer “while using the app” or approximate location when precise background access is unnecessary.
2. Open Privacy Dashboard. On supported Android versions, it shows recent permission activity and can reveal which apps accessed location. Our Android Privacy Dashboard guide explains how to interpret the timeline.
3. Review Google Account activity controls. Check whether Web & App Activity is enabled and review its deletion controls. Do not assume that changing one Android permission automatically changes account-level history.
4. Review Maps Timeline. Google has moved Timeline toward on-device storage and provides controls for deleting place-related activity and managing backups. Availability and menu wording can vary by account and device.
5. Check Location Accuracy separately. If you change it, understand that positioning quality can be affected, especially indoors or where GPS reception is weak.

What has changed since the period investigated

Google has introduced several location-data controls since 2020. It added automatic deletion options for activity data, made Location History off by default for new users, and later announced changes that store Maps Timeline data on the device by default for many users. Google also provides place-specific deletion controls in Maps.

Those changes are relevant context, but they do not erase the regulator’s findings about the earlier period. Likewise, the DPC decision should not be read as proof that a particular current Android phone is secretly tracking a user. The practical question is which settings are enabled on that user’s device and account today.

Android 2026 adds more visible location controls

Google’s 2026 Android privacy announcements include clearer location-use indicators and temporary location access while an app is open. On supported releases, the location indicator can show when an app accesses location and provide a route to recent app use and permission controls. Manufacturer rollout and Android-version support can differ.

If your phone reports an inaccurate position rather than a privacy concern, use our Android GPS and location troubleshooting guide; permission history and positioning accuracy are related but different problems.

Does the fine change how Google Maps works today?

Not immediately for every Android user. The DPC ordered compliance within six months, while the full decision is still to be published. Google has also said it will appeal. Users should therefore avoid assuming that a specific feature will disappear or that a particular rollout date has been set unless Google announces it.

The practical takeaway

The €403 million decision is significant because it covers transparency, legal basis, accountability and retention around location data—not simply whether Android can determine where a phone is. For users, the useful response is a settings audit: review app permissions, Privacy Dashboard, Web & App Activity, Maps Timeline and Location Accuracy as separate controls.

Sources

• Data Protection Commission — final decision announcement, September 21, 2026
• Google — Maps Timeline and location-control changes
• Google — Android security and privacy features in 2026

Updated September 22, 2026. This article distinguishes the DPC’s findings about 2018–2020 processing from current Android and Google Account controls.

Featured image: “Google – Android Location Scanning (46385497184).jpg” by Tony Webster, via Wikimedia Commons/Flickr, licensed CC BY-SA 2.0. The photograph shows location and scanning settings on a Google Pixel 3 XL.