Uber faces $966M GDPR fine for automated driver suspensions

Uber hit with second-largest GDPR penalty on record

The Dutch Data Protection Authority has issued an €825 million ($966 million) fine against Uber for violating European data protection rules through its automated driver suspension systems, according to an August 17 decision obtained by Reuters.

The penalty stems from incidents between 2020 and 2022 when Uber temporarily suspended driver accounts through algorithmic systems that flagged suspected fraud—including unnecessary detours to inflate fares or accepting trips without completing them—without providing adequate information to affected drivers or meaningful human review.

The fine represents the second-largest ever levied under the EU's General Data Protection Regulation, trailing only the €1.2 billion penalty Ireland imposed on Meta in 2023 for unlawfully transferring European user data to the United States.

Why it matters

This enforcement action establishes a significant precedent for how platform companies must balance operational automation with worker rights. As AI-driven decision systems become standard across gig economy platforms, regulators are drawing clear boundaries: algorithmic decisions that materially affect people's livelihoods require human oversight and transparent appeal processes. The substantial penalty signals that compliance costs for automated workforce management systems may be far higher than many technology companies have budgeted.

GDPR's automated decision-making restrictions

European data protection law prohibits decisions made solely by computer algorithms when they significantly impact individuals' lives. The regulation requires meaningful human review and mechanisms for people to challenge automated determinations.

"The AP has determined that Uber violated drivers' rights, specifically the right not to be subject to automated decision-making that has...significant consequences," the decision stated. The regulator also found Uber violated drivers' right to be informed about how decisions affecting them were made.

The case originated from a French complaint but was handled by Dutch authorities because Uber's European headquarters are located in the Netherlands.

Uber disputes findings and penalty size

Uber announced it will appeal both the decision and the fine amount. "We strongly disagree with this decision and disproportionate fine," a company spokesperson said, emphasizing that Uber takes driver rights seriously.

The company noted its current policies include human reviews and provide drivers opportunities to dispute platform suspensions. Uber also stated it no longer makes permanent deactivation decisions solely through automated systems, though the spokesperson confirmed the company did temporarily suspend some accounts based on algorithmic fraud detection during the period in question.

Drivers with consistently low customer ratings were sometimes permanently suspended during the 2020-2022 timeframe. According to Uber, the company did not permanently deactivate accounts without human review, even during the period covered by the investigation.

The Dutch Data Protection Authority confirmed the decision but declined immediate further comment.

These details were first reported by Reuters correspondent Toby Sterling.