TL;DR: Uber faces a €825M GDPR fine from Dutch regulators over automated driver account suspensions lacking human oversight — the second-largest penalty under Europe’s data privacy regime to date.
The Details
The Dutch Data Protection Authority (Autoriteit Persoonsgegevens) has proposed a €825 million fine against Uber, citing serious infringements of the General Data Protection Regulation. The core issue centers on Uber’s use of automated decision-making to deactivate driver accounts without adequate warning or human review. Deputy chair Monique Verdier emphasized that “a computer should not make decisions on its own that have such major consequences.” This marks the third regulatory penalty levied by Dutch authorities against Uber, following a €290M fine in 2022 over driver data handling and a €10M fine on related grounds. Uber disputes the findings, asserting that most suspensions are temporary, permanent deactivations undergo human review, and an appeals process exists. The company has announced it will appeal the decision.
Watch For
- Uber’s appeal outcome and potential precedent-setting implications for GDPR enforcement on algorithmic decision-making
- Whether this triggers broader regulatory scrutiny of automated employment/account decisions across the gig economy
- Potential financial impact on Uber’s European operations and driver-partner retention metrics