The Dutch data protection authority has imposed an €825 million ($966 million) fine on Uber, citing the company’s use of automated systems to deactivate driver accounts without sufficient notification or human intervention. The decision, finalized on August 17, marks one of the most significant penalties issued under Europe’s General Data Protection Regulation (GDPR).
This fine currently stands as the second-largest ever under the GDPR, trailing only the €1.2 billion ($1.4 billion) penalty Ireland issued to Meta in 2023 for the unlawful transfer of European user data to the United States. While Meta is currently challenging that ruling, the Dutch regulator’s move reflects a broader trend of European authorities cracking down on large US technology firms over digital market, competition, and privacy concerns.
Monique Verdier, the deputy chair of the Dutch agency, stated that Uber committed “serious infringements” by failing to provide warnings or human involvement before suspending drivers. She emphasized the severity of the impact, noting that drivers were left without income overnight, and asserted that computers should not be permitted to make such consequential decisions independently.
The investigation, which covered incidents across Europe between 2018 and 2022, originated from a complaint filed in France. Because Uber maintains its European headquarters in the Netherlands, the Dutch regulator assumed jurisdiction. The fine was calculated based on a portion of the company’s 2025 annual turnover.
Uber has formally contested the ruling. A company spokesperson stated, “We strongly disagree with this decision and disproportionate fine,” while maintaining that its policies prioritize drivers’ rights through human reviews and dispute mechanisms. The company argued that the penalty is excessive, noting that only 126 drivers in Europe were permanently deactivated due to low customer ratings in 2021.
Regarding the automated systems, Uber explained that temporary suspensions were often used to address suspected fraud, such as instances where systems flagged drivers for taking unnecessary detours to inflate fares or accepting trips they did not intend to complete. The company insisted that these suspensions were typically brief and that it has never utilized fully automated processes for permanent deactivation, despite the regulator’s claims to the contrary.
GDPR regulations strictly limit the use of algorithms for decisions that significantly affect individuals, such as employment status, requiring meaningful human oversight and clear avenues for appeal. The Dutch decision has been welcomed by the Swiss digital-rights group PersonalData.IO, which previously assisted French drivers in obtaining data regarding the algorithmic decisions that impacted their livelihoods.
Paul-Olivier Dehaye, founder of PersonalData.IO, confirmed that the group is now preparing a class-action lawsuit against Uber to seek further compensation for affected drivers. This case follows a series of multi-billion euro penalties against major tech companies, including a €890 million ($1.04 billion) fine levied against Google last month for anti-competitive behavior, highlighting ongoing friction in US-EU economic relations. The report also notes that it is behind only a €1.2bn ($1.4bn) fine imposed on Meta by Ireland in 2023 for unlawfully transferring European Facebook users’ data to the United States. The report also notes that the EU fined Google €890m ($1.04bn) for anti-competitive actions last month. The report also notes that meta, Google, Apple and Amazon all face multiple fines, though headline fines are often reduced or reversed after years-long appeals processes. The report also notes that donald Trump has criticized such fines.
Comments