The Dutch Data Protection Authority is imposing a fine of 825 million euros on Uber for violations related to its automated driver suspension system. The penalty represents the second largest enforcement action issued under the European Union's General Data Protection Regulation.
The fine addresses concerns about how Uber processed personal data through its automated systems for suspending drivers. The Dutch authority concluded that the company's practices violated GDPR requirements, which mandate strict protections for personal data and impose limits on fully automated decision-making that significantly affects individuals.
Uber operates across Europe with a network of drivers who work through its app-based platform. The company's automated suspension system has been a point of contention, as drivers can lose access to the platform and their income through decisions made without direct human review. The GDPR requires companies to provide meaningful information about automated decision-making and give individuals the right to contest such decisions.
The 825 million euro penalty places this enforcement action behind only a previous fine issued to a major technology company. GDPR allows regulators to fine companies up to four percent of their annual global revenue for serious violations. European data protection authorities have increasingly scrutinized how companies use automated systems to make consequential decisions about individuals.
Uber has faced regulatory challenges across multiple European jurisdictions over its employment practices and data handling. The company must now address the Dutch authority's findings or potentially appeal the decision through European courts. The penalty adds to mounting pressure on technology platforms to provide greater transparency and human oversight in automated systems that affect workers and users.