In plain words
Imagine you told a friend you'd keep their address secret, but then you shared it with others without asking. That's kind of what happened here with Google and people's location data. Google is like a friend who knows where you are because you use their services on your phone.
What's broken
The problem is that Google was tracking users' locations even when they thought they had turned off location services. This is a big deal because it's about people's right to control their own data. The fine is for breaking the General Data Protection Regulation¹ rules.
How it actually works
Here's how it actually works: when you use Google services on your phone, like Google Maps, it can see where you are. Even if you turn off location services, some Google services might still collect data about where you are. This is because of how the services are designed to work together. The General Data Protection Regulation¹, or GDPR, says that companies like Google need to be clear and honest with users about what data they collect and why. Google didn't do that, so they got fined.
Proof of concept
It's not clear from the source if there's a public proof-of-concept that shows exactly how Google was tracking locations. A proof-of-concept would be like a demonstration that shows the problem is real and can be exploited. But in this case, the issue is more about Google following the rules than about a specific technical flaw.
Is it real
The regulator found that Google was indeed breaking the rules, and that's why they got fined. The fine is for activities that happened from May 25, 2018, to February 4, 2020. Google now has to fix the problem and make sure they're following the rules within six months.
What to do
To fix this, Google needs to change how they handle location data and make sure they're being clear and honest with users. Users can also take steps to control their own data, like checking their settings and being careful about what they agree to.
Terms
- ¹ General Data Protection Regulation
- , a law that protects people's personal data in the European Union