Dutch Regulator Fines Uber €825M Over Automated Driver Account Suspensions

Dutch authority issues massive GDPR penalty

The Dutch Data Protection Authority has imposed an €825 million ($966 million) fine on Uber for deactivating driver accounts through automated systems without sufficient human oversight or advance notice to affected drivers. The decision, dated August 17 and first reported by Reuters, represents the second-largest penalty issued under Europe's General Data Protection Regulation since the law took effect.

The fine trails only the €1.2 billion penalty Ireland levied against Meta in 2023 for unlawfully transferring European Facebook users' data to the United States. Meta is currently appealing that decision.

Uber announced it would also challenge the ruling. A company spokesperson said Uber "strongly disagrees with this decision and disproportionate fine," emphasizing that the company's policies include human reviews and mechanisms for drivers to dispute suspensions.

Why it matters

This case establishes a significant precedent for how automated decision-making systems must operate when they affect workers' livelihoods. As companies increasingly deploy AI and algorithmic systems to manage workforces, regulators are drawing clear lines around when human oversight becomes mandatory—particularly for decisions that can instantly eliminate someone's income. The ruling signals that efficiency gains from automation cannot override fundamental rights to transparency and due process.

The core violation

The Dutch authority confirmed the decision Friday, with deputy chair Monique Verdier stating that Uber committed "serious infringements" by deactivating driver accounts without warning or human involvement. "From one moment to the next they no longer had any income," Verdier said. "A computer should not make decisions on its own that have major consequences."

GDPR rules explicitly prohibit decisions made solely by computer algorithms when those decisions significantly impact people's lives. The regulation requires meaningful human review and a clear process for individuals to challenge automated decisions.

The case covers European incidents from 2018 to 2022, originating from a French complaint. The Dutch regulator handled the matter because Uber maintains its European headquarters in the Netherlands.

The disputed suspensions

Uber's systems temporarily suspended accounts of drivers suspected of fraud, including cases where algorithms determined drivers had taken unnecessary detours to inflate fares or accepted trips without intending to complete them. Uber maintains these suspensions were typically brief and that the company did not permanently deactivate accounts without human review.

Broader regulatory context

European regulators have imposed billions of euros in penalties on major U.S. technology companies in recent years under privacy, competition, and digital market regulations. Meta, Google, Apple, and Amazon all face multiple fines, though headline penalties are often reduced or reversed after lengthy appeals processes.

U.S. President Donald Trump has criticized such fines. In April, a U.S. State Department official characterized them as the "biggest single source of friction" in U.S.-EU economic relations.

Details of the fine and the underlying violations were first reported by Reuters.