The complaint, originally submitted to the Swedish Data Protection Authority, was transferred to Ireland where Google has its European headquarters. The underlying review focused on how the company collected and used location data from users of the Android operating system. Features such as location history, as well as web and app activity, were deemed to have been used to collect data without users being given sufficient information or genuine options to opt out of tracking.
The DPC’s investigation has now resulted in Google being found guilty on five counts. The company is given six months to adapt its systems to ensure they comply with the regulations.
Criticism: Eight Years is Unreasonable
Sveriges Konsumenter (Swedish Consumers) welcomes the news, but at the same time directs criticism at the protracted process. Yasemin Bayramoglu, Communications Manager at the organization, emphasizes that the ruling is an important signal from the EU to the tech sector. At the same time, she believes that the long processing time is problematic.
It is completely unreasonable that it should take this long from complaint to decision, says Bayramoglu, adding that it weakens trust in the EU’s supervisory authorities and European data legislation.
The eight-year-long investigation process has meant that data collection has been able to continue in the meantime.
Location data in particular is extremely sensitive. It can show if I visit a specific company, a church or mosque, if I attend political meetings, go to the doctor, show how we move around in our homes – yes, map large parts of our lives. Then the authorities must act faster to protect us consumers.
In light of the case, Sveriges Konsumenter now advocates for a tightening of current legislation. A central requirement is that the default setting in apps should be that tracking, location services, microphones and cameras are turned off, unless they are absolutely necessary for the basic function of the service.