Uber is fined €825 million (about $966 million) by the Dutch Data Protection Authority for deactivating driver accounts through automated decision-making, without sufficient human involvement or adequate notice to affected drivers. Multiple outlets report the decision comes from an August 17 ruling that the authority confirms publicly, and it is described as the second-largest GDPR penalty issued to date.
Regulators base the action on EU data-protection rules that restrict outcomes determined solely by automated processing when the impact is significant. The Dutch authority says Uber’s system decisions can remove drivers’ income “from one moment to the next,” and that a “computer should not make decisions on its own” in such circumstances. Reuters and other coverage describe cases in which low customer ratings or suspected fraud-related behavior triggered suspensions or deactivations, with Uber disputing whether it performed automated permanent deactivations.
Outlets also note Uber says it will appeal and argues the fine is disproportionate, citing that only a limited number of drivers were affected. NDTV adds that the company previously faced another Dutch penalty in 2024 related to transferring European drivers’ personal data to the United States.
