Google has to be transparent in its action. If a person does not want to share the location, then Google should not continue to track the person. Even with GDPR or other protection bills/laws, they will still find ways to get your information, since it is the price we have to pay if we want their services. But it should never be on the sly/without specific consent.