Google restricts personal information posted without consent when disclosure could create a risk of harm or misuse. Move quickly, preserve the evidence, and identify the exact information at issue without repeating it publicly.
Policy-based guidance, updated September 2026.
A Google review may qualify for removal when it posts personal information about a living, identifiable person without consent and the disclosure could create a risk of harm or misuse. Capture the review, identify the sensitive material precisely, report it, and keep the information out of your public reply.
Google’s Maps policy covers information that applies to a living, identifiable person when disclosure could create risk if the information is compromised or misused. Its examples include a full name or last name, a person’s face, financial information, medical information, and personal identification information.
There are exceptions. Google may allow a name that is part of a commonly advertised business entity or belongs to a public-facing professional conducting business under that name. A privacy report should address these distinctions honestly.
Take a complete screenshot that includes the review, reviewer, date, rating, and surrounding context. Save the direct link. Create a second redacted copy for internal discussion, but preserve the unedited original for the report.
Do not paste the sensitive information into emails, public replies, team chats, or social posts unless it is necessary and secure. The goal is removal, not an accidental encore.
Report the review from your Business Profile and choose the most accurate reason available. Google’s policy page includes a route for reporting personal information posted without consent. State what category of information appears, who it identifies, that consent was not given, and the risk created by disclosure.
If the initial decision says the review does not violate policy, check the Reviews Management Tool for the one-time appeal option. Submit the evidence in an organized form and do not include unrelated complaints about the reviewer.
Limit internal access to the evidence. If the content exposes medical, financial, identity, home-address, or other sensitive details, follow your organization’s incident procedures as well as Google’s reporting process. Notify the affected person when appropriate and document the steps taken.
This article is general platform guidance, not legal advice. Threats, stalking, identity theft, or immediate safety concerns may require assistance from law enforcement or qualified counsel.
Do not quote or paraphrase the private information. A neutral response can state that the post appears to contain personal data and has been reported for review. If a legitimate service issue remains underneath the policy violation, invite the reviewer to a private support channel.
No. Google allows some names connected to commonly advertised businesses or public-facing professionals. Context matters.
No. A public reply can call attention to the issue without reproducing the sensitive material.
Google Search has separate personal-information removal tools. Removing a Search result does not necessarily remove the underlying Maps review, so use the Business Profile review-reporting path as well.
Preserve evidence and contact the appropriate local authorities or qualified counsel. Platform reporting should not delay urgent safety steps.
Send us the review link and the evidence you already have. We will tell you whether the case appears worth pursuing before you spend more time on it.
Primary sources: Google Maps personal-information policy and Google’s review reporting instructions.