Uber—Dutch DPA fined Uber €825M for automated driver account deactivation without human review, GDPR violation
On August 21, 2026, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) fined Uber €824,990,000 for violating GDPR's prohibition on fully automated decision-making. Between 2018 and 2022, Uber used software to automatically deactivate driver accounts based on suspected fraud or low customer ratings without human review, and failed to adequately inform drivers that automated decision-making was in operation, causing immediate loss of platform income for affected drivers. The investigation stemmed from a complaint by 171 French drivers via human rights group Ligue des droits de l'Homme to French regulator CNIL, coordinated with the Dutch AP under GDPR's one-stop-shop mechanism since Uber's EU headquarters are in the Netherlands. It is the AP's fourth fine against Uber (following fines in 2018, 2023, and 2024); Uber has appealed the decision.
Scoring Impact
| Topic | Direction | Relevance | Contribution |
|---|---|---|---|
| Algorithmic Fairness | -against | primary | -1.00 |
| Gig Worker Rights | -against | secondary | -0.50 |
| Overall incident score = | -0.221 | ||
Score = avg(topic contributions) × significance (critical ×2) × confidence (0.59)× agency (compelled ×0.25)
Evidence (1 signal)
Dutch AP fines Uber €824.99M for automated driver deactivation without human review
The Dutch Data Protection Authority fined Uber almost €825 million for using fully automated decision-making to deactivate driver accounts between 2018-2022 without human review and without adequately informing drivers, following a complaint from 171 French drivers via Ligue des droits de l'Homme.