Full Breakdown
Dutch Regulator Fines Uber €825 Million for Automated Driver Suspensions
8/21/2026, 8:20:46 PM
Core Decision and Penalty
On August 21, the Dutch Data Protection Authority (AP) announced a €825 million fine against Uber under the EU’s General Data Protection Regulation (GDPR). The penalty, the second-largest ever issued under the GDPR, stems from the regulator’s finding that Uber deactivated driver accounts through automated systems without adequate notification or human review, violating drivers’ rights to be informed and to avoid solely automated decision-making with significant consequences. The AP’s decision, dated August 17, references incidents that occurred between 2020 and 2022, initially triggered by complaints from French drivers who were suspended on suspicion of fraud.
Background and Prior Enforcement Actions
The case follows earlier privacy-related enforcement against Uber in the Netherlands. In early 2024, the AP fined the company €10 million for privacy breaches, and in 2018 it imposed a €600,000 fine for similar issues. A €290 million fine was levied last year for the unlawful transfer of drivers’ data to the United States; that fine is also being appealed by Uber. All of these actions are linked to the same set of driver complaints that originated in France.
Data and Scope of the Violations
The regulator’s investigation identified two primary automated practices: (1) temporary suspension of accounts suspected of fraud, such as taking unnecessary detours to inflate fares, and permanent deactivation of drivers with low customer ratings performed solely by computer algorithms. Uber maintains that permanent deactivations were never fully automated and that any suspensions were brief and subject to human review.
Official Statements and Responses
Uber indicated it will appeal the fine.
Implications for Tech Companies in Europe
The fine underscores the EU’s tightening enforcement of GDPR provisions that require human oversight of algorithmic decisions affecting individuals. It signals heightened regulatory scrutiny for platform-based firms operating across Europe and may prompt other companies to reassess automated enforcement mechanisms to avoid similar penalties.
