The Cost of Delay: EU’s Timid Response to Google’s Location Data Misuse

The European Union fined Google €403 million for improperly using location data between May 2018 and February 2020. However, the delay in enforcement – eight years – has left many questioning whether this punishment is truly effective.

The European Consumer Organisation (BEUC) argues that late enforcement can be as damaging as no enforcement at all. Director General Agustin Reyna noted that “consumers’ fundamental rights need to be upheld faster and better.” This criticism is particularly relevant given the invasive nature of geolocation data, which can reveal sensitive information about individuals.

Google’s handling of location data has been a persistent concern for consumer groups and regulators alike. The company claims its policies have since been updated, but this argument is undermined by the fact that these practices were in place between 2018 and 2020. Geolocation data is one of the most invasive forms of commercial surveillance, as the BEUC astutely observed.

The fine against Google serves as a reminder of the EU’s limitations in holding tech giants accountable for their actions. The case against Google has been open since February 2020, and it’s only now that we see some action. This delay undermines the efficacy of regulation and emboldens companies like Google to push the boundaries of what is acceptable.

In comparison to other significant regulatory actions taken against tech giants in recent years, this fine pales. The largest DPC fine was €1.2 billion for Facebook owner Meta’s transfer of data to the United States. This disparity highlights the EU’s inconsistent approach to regulation and its inability to mete out meaningful punishments.

The case also raises questions about the role of regulators in overseeing these tech behemoths. With Google’s European headquarters located in Ireland, the DPC has a unique responsibility in policing the company’s activities. However, the regulator’s actions seem reactive rather than proactive, often responding only after consumer groups have lodged complaints.

Regulators must take a more robust stance against companies like Google, implementing meaningful reforms that protect consumers’ fundamental rights. The EU must demonstrate its commitment to holding these tech giants accountable and ensuring their practices align with values of fairness and transparency.

The €403 million fine may be seen as a victory for consumer groups, but it’s only a small step towards addressing the systemic issues at play. As we move forward, it will be essential to monitor how regulators respond to future complaints and whether they can mete out more timely and effective punishments. The ongoing investigations against Google, including proceedings regarding the use of Europeans’ personal data to train AI, will be crucial in determining whether the company’s actions truly respect consumers’ rights.

Regulators must take a more active role in policing these tech giants and ensuring their practices respect consumers’ fundamental rights. Anything less would be unacceptable in today’s digital age, where consumer data is being used to influence our daily lives in ways both subtle and profound.