Dutch Regulator Fines Uber $966M Over Automated Driver Suspensions

Dutch Authority Issues Near-Record GDPR Fine

The Dutch Data Protection Authority has levied an €825 million ($966 million) fine against Uber for deactivating driver accounts through automated systems without adequately informing drivers or providing meaningful human review, according to an August 17 decision obtained by Reuters.

The penalty represents the second-largest fine ever imposed under the European Union's General Data Protection Regulation. Only Meta's €1.2 billion fine from Ireland in 2023 for unlawfully transferring Facebook user data to the United States exceeds it.

The Core Violations

The Dutch regulator determined that Uber violated GDPR provisions that prohibit decisions made solely by computer algorithms when those decisions significantly impact people's lives. The regulation requires meaningful human oversight and mechanisms for individuals to challenge automated decisions.

The case centers on incidents between 2020 and 2022 involving European drivers. Uber's systems temporarily suspended accounts when algorithms detected suspected fraud, including unnecessary route detours to inflate fares or accepting trips drivers didn't intend to complete. The authority also found that drivers with low customer ratings were sometimes permanently deactivated by automated systems, though Uber disputes this characterization.

The regulator concluded that Uber "violated drivers' rights, specifically the right not to be subject to automated decision-making that has...significant consequences," and also violated drivers' right to be informed about how their data was being used.

Uber's Response and Appeal Plans

Uber strongly contested both the finding and the fine amount. A company spokesperson said Uber takes drivers' rights seriously and noted that current policies include human reviews and dispute mechanisms for platform suspensions. The company argues the penalty is disproportionate, pointing out that only 126 drivers were deactivated in Europe due to low customer ratings in 2021.

Uber said it never permanently deactivated accounts without human review and that temporary suspensions were typically brief. The company is expected to appeal the decision, following a pattern where major U.S. technology firms routinely challenge European regulatory penalties through lengthy court processes.

Why It Matters

This case establishes clearer boundaries for how platform companies can use automation in employment decisions. As gig economy platforms increasingly rely on algorithmic management systems to monitor and discipline workers at scale, regulators are asserting that certain decisions require human judgment—particularly when they affect people's livelihoods. The substantial fine signals that European authorities view automated workforce management as a serious data protection issue, not merely an operational concern. For companies operating platform-based business models, the ruling suggests that efficiency gains from automation must be balanced against procedural rights and transparency obligations.

Broader Regulatory Context

The fine adds to billions of euros in penalties European regulators have imposed on major U.S. technology companies under privacy, competition, and digital market rules. Meta, Google, Apple, and Amazon have all faced multiple enforcement actions, though many headline fines are reduced or reversed after years of appeals.

The Dutch authority handled this case because Uber's European headquarters are located in the Netherlands, though the initial complaint originated in France. The decision reflects growing transatlantic tension over technology regulation—U.S. officials have characterized such fines as the "biggest single source of friction" in U.S.-EU economic relations.

Details of the fine and Uber's violations were first reported by Reuters.