Bottom line: Google must strengthen its location data protection practices to avoid similar fines.
What's happening: The European Commission fined Google 403 million euros ($463 million) for breaching the EU's General Data Protection Regulation (GDPR) due to mishandling of user location data in 2019. This affected approximately 5 million users in the European Economic Area (EEA). Google's Android operating system and Google Maps app were found to have collected and processed users' location data without consent.
What to do: Security leaders must review their location data handling practices and ensure compliance with GDPR requirements to avoid similar fines and data breaches.