Uber GDPR Fine Reaches €825 Million Over Driver Account Decisions

Dutch Regulator Fines Uber €825 Million

The Dutch Data Protection Authority has fined Uber €825 million ($966 million) for allegedly deactivating driver accounts through automated systems without adequately informing affected drivers. The Uber GDPR fine would rank as the second-largest penalty imposed under Europe’s General Data Protection Regulation. Uber has rejected the decision and said it will appeal, arguing that the penalty is disproportionate and that its account-management policies include human reviews and opportunities for drivers to challenge suspensions. The Dutch authority later confirmed the decision, saying Uber committed serious infringements when automated processes were used in ways that could significantly affect drivers’ livelihoods.

GDPR Rules Require Meaningful Human Involvement

The dispute centers on European GDPR provisions restricting decisions made solely by computer algorithms when those decisions have significant effects on individuals. The rules require meaningful human involvement and provide affected people with an opportunity to challenge decisions. The Dutch regulator said drivers could lose their income from one moment to the next when accounts were deactivated without warning or human involvement, arguing that a computer should not independently make decisions with such serious consequences. The case covers incidents involving European drivers between 2018 and 2022 and initially arose from a complaint in France. It was handled by the Dutch regulator because Uber’s European headquarters are located in the Netherlands.

Automated Systems Used in Driver Account Suspensions

The investigation examined situations in which Uber temporarily suspended drivers suspected of fraudulent activity. The company’s systems could flag drivers when algorithms concluded they had taken unnecessary detours to increase fares or accepted trips without intending to complete them. Uber said those suspensions were generally brief and maintained that it did not permanently deactivate accounts without human review. However, the Dutch agency said drivers with low customer ratings were sometimes permanently deactivated through computer-based decisions. Uber disputed that characterization and stated that it had never automated permanent deactivation decisions. The disagreement over how automated systems were used is central to the regulator’s findings and to the company’s planned appeal.

Uber Challenges the Size of the Penalty

Uber said it strongly disagrees with both the decision and the size of the fine, while emphasizing that it takes drivers’ rights seriously. The company said only a small number of drivers were affected by the disputed process and identified 126 drivers in Europe who had been deactivated because of low customer ratings in 2021. Uber also argued that its policies provide mechanisms for human review and allow drivers to dispute platform suspensions. The Dutch agency said the €825 million penalty was calculated as a fraction of Uber’s 2025 annual turnover. Uber’s appeal will therefore challenge both the regulator’s interpretation of its automated account decisions and the proportionality of the financial penalty.

European Regulators Continue Targeting Big Tech

The Uber case comes amid a broader pattern of large penalties imposed by European regulators on major U.S. technology companies under privacy, competition, and digital-market rules. Meta, Google, Apple, and Amazon have all faced substantial regulatory fines, although headline penalties can later be reduced or overturned following lengthy appeals. The Uber penalty would rank behind only a €1.2 billion GDPR fine imposed on Meta by Ireland in 2023 over the unlawful transfer of European Facebook users’ data to the United States. Meta has appealed that penalty. U.S. President Donald Trump has criticized European technology fines, while a U.S. State Department official said in April that such enforcement had become the “biggest single source of friction” in U.S.-EU economic relations.

Driver Rights Could Become a Wider Issue

The decision could have broader implications for platform companies that rely on algorithms to manage workers, identify suspected fraud, evaluate performance, or restrict access to services. The Dutch regulator’s position emphasizes that automated decision-making can create serious consequences when a driver’s ability to earn income depends on an algorithmic assessment. Swiss digital-rights group PersonalData.io, which helped French Uber drivers seek information about algorithmic decisions affecting their work and ultimately contributed to the Dutch investigation, welcomed the ruling. Its founder, Paul-Olivier Dehaye, said the organization is preparing a class action seeking compensation for drivers. The outcome of Uber’s appeal could therefore influence how European platforms design automated decision systems and provide human review.

Frequently Asked Questions

Why did the Dutch Data Protection Authority fine Uber?
The Dutch Data Protection Authority fined Uber €825 million over alleged GDPR violations involving automated driver account deactivations. The regulator said some drivers were removed from the platform without adequate warning, meaningful human involvement, or sufficient opportunities to challenge decisions affecting their income. Uber disputes those findings and says permanent deactivations were not automated. The company also argues that the penalty is disproportionate because only a limited number of drivers were affected. Uber has said it will appeal the decision, leaving the final outcome subject to further legal and regulatory review.