Massive GDPR Driver Fine
Dutch Regulators Fine Uber €825 Million For Improper Automated Driver Suspensions
Key Points
Origin of the probe: Uber’s European headquarters are in Amsterdam, so the Dutch Data Protection Authority led the investigation, which began after complaints from French drivers.
The €825 million penalty would add to ongoing GDPR scrutiny, following a previous Dutch fine of about €290 million in 2023 for transferring European drivers’ personal data to the United States.
Regulators described the automated flags as identifying drivers for possible fraud through signals such as unnecessary detours or trips that drivers did not intend to complete.
The decision highlighted that Uber violated drivers' rights under GDPR by allowing automated decision-making with significant consequences and by failing to inform drivers about these decisions.
The Dutch Data Protection Authority fined Uber €825 million ($966 million) for using automated systems to suspend driver accounts without proper notice The Next Web. The penalty ranks as the second-largest GDPR fine ever — behind only Meta's €1.2 billion fine in 2023 — and targets Uber's use of automated decision-making that harmed drivers between 2020 and 2022 Yahoo Finance. The violations centered on how Uber flagged and deactivated drivers for suspected fraud without adequately informing them or giving them a meaningful way to challenge the decision.
Uber said it would appeal and argued that its current policies include human review and driver recourse Yahoo Finance. The company stated it no longer relies on automated-only permanent deactivations. Regulators stressed that GDPR requires significant human involvement when making decisions with serious consequences for people, potentially raising compliance costs across Europe's platform economy.
How Uber's Automated Flags Worked
Uber used automated systems to identify drivers flagged for fraud through signals like unnecessary detours or incomplete trips Yahoo Finance. When these flags triggered, the system would suspend or deactivate driver accounts with minimal human review. Some drivers faced permanent deactivation based solely on low ratings or fraud suspicion, losing their ability to earn income without clear explanation.
The GDPR Violation: Secrecy and No Appeal
The Dutch Data Protection Authority found that Uber violated GDPR Articles 13 and 22, which protect people from purely automated decisions with significant consequences The Next Web. Drivers did not receive adequate notice that algorithms were deciding their fate. Uber failed to tell drivers why they were suspended or how to challenge the decision — a core GDPR requirement for fairness and transparency.
A Pattern of European Fines Against Uber
This penalty follows a previous Dutch fine of approximately €290 million in 2023, when regulators penalized Uber for transferring European drivers' personal data to the United States Yahoo Finance. The company's European headquarters sit in Amsterdam, making the Dutch authority the lead regulator for Uber investigations. Together, the two fines total over €1.1 billion in less than two years, signaling intensifying EU scrutiny of platform companies' data and automation practices.
What This Means for Platforms Across Europe
The ruling sets a precedent for how European regulators will judge automated decision-making by ride-sharing, delivery, and labor platforms Yahoo Finance. Companies must now embed human review into systems that can suspend or deactivate workers. They must also inform users clearly before and after automated decisions, and provide meaningful ways to appeal — requirements that could reshape how platforms manage fraud and safety at scale across the continent.
Sentiment
Mostly NegativePublishers
22
Articles
126
Reach
148
