Dutch regulator fines Uber €825 million for automated driver deactivations

The Dutch data protection authority has fined Uber 825 million euros, equivalent to approximately $966 million, for deactivating driver accounts through automated systems without providing adequate information or human review. The decision, dated August 17 and confirmed on August 21, marks the second-largest penalty ever issued under the European Union's General Data Protection Regulation (GDPR).

The Dutch regulator, known as the AP, determined that Uber violated GDPR rules that prohibit decisions made solely by algorithms when they significantly impact a person's life, such as affecting their employment. The authority stated that Uber failed to provide meaningful human involvement or a clear path for drivers to challenge the decisions. The case stems from incidents across Europe between 2020 and 2022, originating from a complaint filed by drivers in France. The AP handled the case because Uber's European headquarters are located in Amsterdam.

According to the regulator, Uber's systems temporarily suspended drivers flagged for suspected fraud, such as taking unnecessary detours to inflate fares or accepting trips without intending to complete them. The AP also asserted that...