FuriaHubDutch DPA fines Uber €824.99 million for automated driver blocking
The Autoriteit Persoonsgegevens fined Uber €824.99 million for fully automated account deactivations from 2018 to 2022, with no human review of fraud flags or low ratings. The Dutch authority led the GDPR case because Uber’s EU headquarters is in the Netherlands.
On August 21 the Dutch data-protection authority, the Autoriteit Persoonsgegevens, announced an €824.99 million fine against Uber. The AP said the company fully automated account deactivations between 2018 and 2022, without a human reviewing fraud suspicions or low ratings.
What we know
- The AP fined Uber €824.99 million for fully automated account deactivations from 2018 to 2022.
- There was no human review when the system flagged fraud suspicions or low ratings; the case applies GDPR rules on automated decisions.
- 171 French drivers, represented by LDH, complained through the CNIL; the Dutch DPA led because Uber’s EU headquarters is in the Netherlands.
- Uber’s 2025 global turnover was about €44.5 billion; the company appealed.
- This is the AP’s fourth Uber fine, after penalties in 2018, 2023, and 2024.
Takeaways
- GDPR automated-decision rules can support a nine-figure fine when account blocking has no human review.
- EU lead-authority rules put the Dutch DPA in charge because Uber’s EU HQ is in the Netherlands.
- Uber has appealed the fourth AP fine issued against it.
Source: Dutch DPA
