Uber Faces $966 Million Fine over Automated Driver Suspensions, Dutch Regulator's Record GDPR Penalty

The Dutch Data Protection Authority has fined Uber approximately $966 million (€825 million) for using automated systems to deactivate driver accounts without proper human review, violating EU data privacy rules.

Uber is facing a nearly $1 billion fine from the Dutch Data Protection Authority for using automated systems to suspend driver accounts without adequate human oversight, according to a decision reviewed by Reuters . The penalty, one of the largest ever issued under Europe's General Data Protection Regulation, comes after an investigation triggered by complaints from 171 French drivers.

"Uber has committed serious infringements," said Monique Verdier, Deputy Chair of the Dutch Data Protection Authority. "Drivers were deactivated without warning. From one moment to the next they no longer had any income. A computer should not make decisions on its own that have major consequences for you."

The violations occurred between 2018 and 2022. Under Uber's system, drivers suspected of fraud, such as taking unnecessary detours to inflate fares or accepting trips without intending to complete them could have their accounts automatically suspended. Drivers with persistently low customer ratings could also face permanent deactivation by the algorithm.

"The AP has determined that Uber violated drivers' rights, specifically the right not to be subject to automated decision-making that has significant consequences," the regulator's decision stated. "Uber has also violated the right to be informed."

The Dutch regulator handled the case because Uber's European headquarters are located in the Netherlands. The French drivers were represented by Swiss digital-rights group PersonalData.IO, which helped them seek data about the algorithmic decisions affecting their work.

Uber's Response and Appeal

Uber has confirmed it will appeal the decision and the fine, calling it "disproportionate."

"We strongly disagree with this decision and disproportionate fine," an Uber spokesperson said. "We take decisions that affect drivers' ability to earn extremely seriously and we're fully committed to fair treatment. This includes human reviews, robust safeguards, and the opportunity for drivers to appeal our decisions if they believe we made a mistake."

The company also noted that the policies under review were discontinued years ago, and that only 126 drivers were permanently deactivated in Europe in 2021 due to low customer ratings. This marks the fourth time the Dutch regulator has fined Uber, following a €290 million penalty in 2024 over data transfers to the United States.

Here is the question this fine raises. A nearly $1 billion GDPR penalty has been imposed on Uber for automated driver suspensions without human review. When algorithmic decisions can have life-altering consequences for workers, what safeguards should be mandatory to ensure fairness and accountability?

FAQ:

Q: What is the $966 million Uber fine for?
A: The Dutch Data Protection Authority fined Uber $966 million (€825 million) for using automated software to suspend driver accounts without adequate human review, violating EU data privacy rules.

Q: Why did the Dutch regulator fine Uber nearly $1 billion?
A: Uber violated GDPR by making automated decisions that had significant consequences for drivers, including account suspensions and permanent deactivations, without proper human oversight or informing drivers about the automated decision-making.

Q: How many drivers were affected by Uber's automated suspensions?
A: Uber said 126 drivers in Europe were permanently deactivated in 2021 due to low customer ratings, though the regulator's investigation covered a broader range of automated decisions between 2018 and 2022.

Q: Will Uber pay the $966 million fine?
A: Uber has said it will appeal the decision and the fine, calling it "disproportionate."

Q: What is the GDPR?
A: The General Data Protection Regulation is an EU law that protects individuals' data and privacy. It prohibits fully automated decision-making that has significant effects on people without meaningful human review.