Go to Wolters Kluwer VitalLaw.comGo to Wolters Kluwer VitalLaw.com
VitalLaw®
  • Find answers to your questions
  • Log in to access your subscriptions
In depth. On point.
In depth. On point.
  • Home
  • Legal Directory
  • Home
  • Legal Directory
In depth. On point.
  • Articles
    • Articles
  • Organizations
    • Organizations
    • DoJ, Fired Privacy Board Members Debate Impact of Supreme Court’s Slaughter Ruling
    • GSA Eyes Ways to Protect Federal Networks, Buildings From Quantum Cyber Threats
    • Recommendations for Mitigating AI Cyber Attacks Offered by Danish Financial Regulator
    • Tax Preparer Settles With Connecticut AG in Data-Sharing Case
    • Timing for Exemptions, Conditional Approvals Updated on ‘Covered List’
    • U.K.’s Cyber Center Offers Guidance on Agentic AI Cyber Risks
    • Uber Faces Fine Over Deactivation of Driver Accounts in Netherlands
  • Articles
    • Articles
  • Organizations
    • Organizations

    Cybersecurity Policy Report, Uber Faces Fine Over Deactivation of Driver Accounts in Netherlands, (Aug 24, 2026)

    By Tony Foley

    Rideshare company Uber Technologies, Inc., has been fined 825 million euros ($962 million) by the Dutch data protection authority, Autoriteit Persoonsgegevens (AP), based on the agency’s finding that the company made fully automated decisions ...

    By Tony Foley

    Rideshare company Uber Technologies, Inc., has been fined 825 million euros ($962 million) by the Dutch data protection authority, Autoriteit Persoonsgegevens (AP), based on the agency’s finding that the company made fully automated decisions about drivers in violation of the European Union’s General Data Protection Regulation (GDPR).

    In a Friday news release, AP said its investigation was launched following a report submitted by more than 170 French drivers to Ligue des droits de l’Homme (LDH), a French human rights organization. The LDH then filed a complaint with the French data protection authority, the Commission nationale de l’informatique et des libertés (CNIL). Eventually, the complaint was referred for investigation to the AP as Uber’s primary regulator under the GDPR “one-stop-shop” enforcement mechanism.

    In is investigation, which was conducted with input from CNIL and other EU DPAs, AP found that, between 2018 and 2022, Uber used software to track drivers’ behavior, as well as customer reviews. If the software detected suspected fraudulent activity or if customer reviews were too low, accounts of the drivers concerned were automatically deactivated, with no human assessment. The agency concluded that Uber’s activities violated the prohibition against fully automated decision-making under GDPR article 22 and added that Uber also failed to sufficiently inform drivers about its automated decision-making process.

    "Uber has committed serious violations. Drivers were unceremoniously suspended. So from one moment to the next, they no longer had any income through Uber,” said Monique Verdier, vice president of AP. “That is prohibited. A computer is not allowed to make decisions independently that have major consequences for you. A person should have looked at this first."

    The fine was calculated based on Uber’s worldwide annual revenue and imposed at the GDPR’s maximum 4% rate. Uber has appealed the decision.

    News: InternationalLegislation LitigationEnforcement DataPrivacy GDPR

    © 2026 CCH Incorporated and its affiliates and licensors. All rights reserved.

    • Manage Cookie Preferences
    • Privacy Statement
    • Terms of Use