🕒 Created · Updated

The Dutch Data Protection Authority fines Uber €825 million for automated driver account deactivations lacking human oversight.

The Dutch Data Protection Authority has issued a €825 million fine against Uber for failing to provide sufficient human oversight during the automated deactivation of driver accounts. The penalty, which amounts to approximately $966 million, is the second-largest fine ever issued under Europe’s General Data Protection Regulation (GDPR). Regulators found that between 2018 and 2022, Uber's systems deactivated drivers without adequate warning or human review, potentially depriving them of income without sufficient due process. Deputy chair Monique Verdier stated that a computer should not make decisions with such major consequences on its own. The investigation was initiated following complaints from a group of French drivers who sought assistance from the nonprofit PersonalData.io. Uber has already filed an appeal against the decision, arguing that most suspensions are brief and that permanent deactivations rarely occur without human review. The company maintains that drivers have the ability to appeal decisions. This fine marks the third time the Dutch regulator has penalized Uber, following previous fines for personal data handling and related issues.

Sources