Google is facing one of the largest privacy penalties of its history after Ireland's Data Protection Commission (DPC) hit the company with a €403 million ($459 million) fine tied to how it processed users' location data. The catch: the tracking feature at the center of the case is reportedly still operating in more than 30 countries, meaning the penalty alone hasn't stopped the underlying practice. For everyday users, that means the responsibility to limit this kind of tracking currently falls on individual account settings rather than regulatory enforcement.

What the Irish DPC Fine Actually Covers

The DPC, which regulates Google under the EU's General Data Protection Regulation (GDPR) because the company's European headquarters is based in Ireland, found that Google violated privacy law through the way it collected and used location information tied to user accounts. Because the DPC acts as Google's lead regulator across the European Union, its rulings carry weight well beyond Ireland's borders and often set the tone for how other data protection authorities respond. We've covered the legal and regulatory background of this case in more detail, including how the fine came together, in our earlier report on the Irish DPC's €403 million fine against Google over location data.

What makes this fine notable isn't just the size. It's the fact that a penalty of this scale hasn't immediately forced Google to shut off the practice everywhere. According to reporting on the case, the feature responsible for the violation remains active in dozens of countries outside the EU's direct jurisdiction, which raises the obvious question of who else might be affected and what those users can do about it right now.

How the Hidden Tracking Feature Works and Who It Affects

At the core of the case is location data collection tied to Google accounts and Android devices, the kind of tracking that can quietly build a detailed picture of where a person goes, how often, and when. This kind of data is valuable for advertising because it lets companies infer habits, routines, and even sensitive details like visits to medical facilities or places of worship, all without a user necessarily realizing the tracking was ever switched on or fully understanding what it captures.

The people most affected are typically everyday Android and Google account users who never explicitly reviewed their location and activity settings, since many of these tools ship with defaults that favor data collection. Unless someone goes looking for it, it's easy to assume location tracking is either off or limited to when an app is actively in use, when in practice broader account-level settings may still be logging activity in the background.

Which Countries Remain Exposed and Why Enforcement Lags

The EU's GDPR gives regulators like Ireland's DPC real enforcement power, including the ability to levy fines in the hundreds of millions of euros. But that authority stops at the EU's borders. In the more than 30 countries reportedly still running the tracking feature, there may be no equivalent regulator with the same enforcement teeth, or existing privacy laws may be narrower, more slowly enforced, or simply untested against a company the size of Google.

That gap matters because it means legal consequences in one region don't automatically translate into changed behavior everywhere the same product is used. Until local regulators catch up, or until Google chooses to apply a single global standard voluntarily, users outside the EU are largely on their own when it comes to limiting this kind of data collection.

How to Check Your Google Account and Disable Location Tracking Now

Waiting on regulators isn't a realistic strategy for most people, so it's worth taking a few minutes to review your own settings directly:

  • Open your Google Account settings and look under the Data & Privacy section for Location History and Web & App Activity controls.
  • Check whether location tracking is enabled and, if you don't need it, turn it off or set it to auto-delete after a short period.
  • Review which apps have permission to access your location in the background versus only while in use, and revoke access for anything that doesn't need it.
  • Periodically check your activity controls, since updates to apps or account settings can sometimes reset preferences.

What This Means For You

This fine is a reminder that regulatory action, even a substantial one, doesn't always translate into an immediate global fix. If you live outside the EU, the feature at the heart of this case may still be running exactly as it was before the ruling. That doesn't mean you're powerless. Reviewing your Google account's location and activity settings takes only a few minutes and gives you direct control that regulation alone can't yet guarantee everywhere. Pairing those account-level changes with a reputable VPN can further reduce how much of your location and browsing activity is exposed through your IP address, adding another layer of protection while enforcement catches up.

The broader lesson from the Google hidden tracking feature fine is that privacy protections are often uneven across borders, and users who want consistent control need to check their own settings rather than assume the law has already handled it for them. Take a few minutes today to review your Google account's location settings, tighten app permissions, and consider using a VPN as an added safeguard while regulators work through the rest of the world.