Dutch Regulator Slaps Uber With Record Fine Over Automated Account Bans
Uber is facing a staggering bill after Dutch data protection authorities slapped the ride-hailing company with a fine of 825 million euros ($964 million). The penalty stems from the company’s use of automated software to suspend driver accounts — sometimes permanently — without any human review to catch errors.
The Dutch Data Protection Authority announced the fine on Friday, saying Uber violated the European Union’s General Data Protection Regulation. The GDPR explicitly prohibits fully automated decision-making that significantly affects individuals, and the regulator claims Uber crossed that line repeatedly.
This is the fourth time the Dutch authority has fined Uber. The previous record was set in 2024, when the company was hit with a 290 million euro ($324 million) penalty for transferring personal details of European drivers to the United States without adequate protection.
What Did Uber Actually Do Wrong?
According to the regulator, the violations took place between 2018 and 2022. During that period, Uber’s automated systems could suspend or deactivate driver accounts based on algorithmic assessments. The problem? No human was checking whether those automated decisions were correct.
The authority also said Uber failed to properly inform drivers about how its automatic decision-making worked. Drivers were left in the dark about the very systems that could end their ability to earn a living.
The GDPR’s Stance on Automation
Article 22 of the GDPR gives individuals the right not to be subject to decisions based solely on automated processing when those decisions produce legal or similarly significant effects. In plain terms: if a machine is going to make a call that could cost someone their livelihood, a human needs to be in the loop.
Uber’s system, as described by the regulator, appears to have skipped that step entirely.
Uber’s Response: We Disagree, We’ll Appeal
Uber didn’t take the news quietly. The company said it disagrees with both the decision and the fine, and confirmed it will file an appeal.
“The (Data Protection Authority) examined historic policies that were discontinued years ago,” the company said in a written statement. “We take decisions that affect drivers’ ability to earn extremely seriously and we’re fully committed to fair treatment. This includes human reviews, robust safeguards, and the opportunity for drivers to appeal our decisions if they believe we made a mistake.”
The company’s argument hinges on timing — it claims the practices in question were old and already scrapped. The regulator, however, maintains that the violations happened on its watch and that the fine is justified.
What This Means for the Gig Economy
This ruling sends a clear signal to every platform that relies on algorithmic management. If you’re using automated systems to make decisions about workers — whether they’re drivers, couriers, or freelancers — you need human oversight and transparent communication.
The fine is a reminder that GDPR isn’t just about data breaches and consent pop-ups. It’s also about protecting individuals from the whims of opaque algorithms. For companies like Uber, Lyft, and DoorDash that have built their business models on algorithmic matching and rating, this is a warning shot.
Related: Personal Information Exposed in Apollo Global Data Breach
Related: TikTok Reaches $400 Million Settlement With US Justice Department Over Children’s Privacy
The Bigger Picture: A Growing Regulatory Crackdown
Uber has been in the crosshairs of European regulators for years. The 2024 fine over US data transfers was itself a landmark penalty. Now this new fine nearly triples that amount.
The pattern is clear: European authorities are getting serious about enforcing data protection rules against Big Tech. And they’re not afraid to use their calculators.
For Uber, the appeal process could drag on for years. But even if the fine is reduced or overturned, the reputational damage is done. The message to the industry is simple: algorithmic decisions need human accountability.
Related: Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal
What Drivers Should Know
If you’re a driver for any ride-hailing platform, this case highlights your rights. Under GDPR, you have the right to:
- Know when automated decision-making is being used on you
- Request human intervention in automated decisions
- Express your point of view and contest automated decisions
- Receive meaningful information about how the algorithm works
If a platform isn’t providing these protections, it may be in violation of the law. The Dutch regulator just proved that with a nearly billion-dollar exclamation point.
The Dutch Data Protection Authority has set a precedent that other European regulators may follow. For Uber, the fight is just beginning. For the rest of the gig economy, the lesson is already written.
