Uber faces a €825 million ($966 million) fine from the Dutch Data Protection Authority (AP) for suspending drivers through automated systems without adequately informing them, in violation of European data protection rules.
The penalty, issued on August 17 and reported on August 21, 2026, stems from a complaint initially filed in France and concerns incidents between 2020 and 2022. The Dutch regulator handled the case due to Uber’s European headquarters being based in the Netherlands.
The AP determined that Uber violated drivers’ rights under the General Data Protection Regulation (GDPR), specifically the right not to face automated decision-making with significant consequences and the right to be informed. The decision noted that some drivers were temporarily suspended for suspected fraud, such as taking unnecessary detours to inflate fares or accepting trips without completing them, while others with low ratings faced permanent deactivation.
Uber has indicated it will appeal the ruling, with a spokesperson stating the company strongly disagrees with the decision and the fine’s proportionality. The company added that it takes drivers’ rights seriously, noting current policies include human reviews and dispute mechanisms for suspensions. Uber also claimed it no longer makes permanent deactivation decisions solely through automated systems.
The fine ranks as the second-largest penalty ever imposed under GDPR, following a €1.2 billion penalty against Meta in 2023 for unlawful data transfers to the U.S., which Meta is currently appealing.
