Filed here are the firms whose record of you did not begin with a sign-up. What holds the file together is the device rather than an account, so there may be nothing to log into and no delete button. The right to ask does not depend on having an account.
Reported incidents
Fined 403 million euros over location data it kept too long
2026-09-21Affected Web & App Activity, Location History and Location Accuracy
Ireland's Data Protection Commission fined Google Ireland 403 million euros after a six-year inquiry into how three account settings handled location data between May 2018 and February 2020. It found the processing unlawful and unfair, the explanations to users inadequate, and the location data in Web & App Activity and Location History kept for longer than necessary. Deputy Commissioner Graham Doyle said that retaining users' location data for longer than necessary "aggravated this loss of control". Google has six months to bring its processing into line.
Abuse victims' takedown requests, names included, posted on a partner's site
2026-09-08Affected Search content removal requests
The Hankyoreh reported on 8 September 2026 that Google had passed removal requests from victims of image-based sexual abuse, as submitted, to an affiliated research project whose website published them. Korean victims' names, ages, workplaces, schools and phone numbers were visible. Two days later the paper found requests from victims in Japan, Vietnam, Colombia, Brazil, Argentina and Bolivia on the same site. South Korea's gender equality ministry lodged a complaint with Google. Google called it an unintended disclosure caused by human error, said it had permanently deleted the exposed data on Korean victims and stopped sending new legal takedown requests to the project.
Danish municipalities told to limit what pupils' data goes to Google
2026-01-29Denmark's data protection authority closed its Chromebook case with serious criticism of 51 municipalities over how they checked Google's sub-processors and transfers abroad. In 2024 it had ordered 53 municipalities to stop passing pupils' data to Google for improving and developing its products. The regulator says schools may use Google if the products are set up as the municipalities' association recommends.
People affected typically ask Google to confirm whether their information was included, and which categories.
The verified route
Self-serve privacy tools are available on their site.
DÆTRAX is a personal data accountability ledger: a dated record of which companies hold your personal data, what you asked them to do about it, and what they claimed in reply.