Uber faces nearly $1B GDPR fine over suspensions
Uber faces fine of nearly $1B over automated driver suspensions
According to TechCrunch, the Dutch Data Protection Authority has imposed a €825 million (roughly $966 million) penalty on Uber — the second-largest GDPR fine ever levied. The regulator determined that Uber deactivated driver accounts using fully automated processes without adequate advance notice or human intervention.
Deputy chair Monique Verdier stated that the company committed serious violations, emphasizing that automated systems should not independently render decisions with such severe consequences.
The case stems from a complaint by former French Uber driver Brahim Ben Ali, whose account was deactivated in 2019. Ben Ali gathered statements from 170 fellow drivers and filed his complaint in the Netherlands, where Uber's European headquarters are based. He was supported by PersonalData.io, a Swiss nonprofit advocating for digital rights.
Uber contends that most account suspensions are short-lived, that permanent deactivations always undergo human review, and that drivers can challenge suspensions. The company disputes claims that some drivers were permanently removed without human oversight and has announced plans to appeal both the ruling and what it calls a disproportionate fine.
This is the third GDPR penalty the Dutch authority has issued against Uber, following a €290 million fine for mishandling driver data and a €10 million penalty for related infractions. All three cases originate from the same group of drivers.