Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts

Summary

Uber has been fined €825 million (approximately $964 million) by the Dutch Data Protection Authority for violating the EU's General Data Protection Regulation. The company used automated software to suspend driver accounts without human review, failing to inform drivers about this automated decision-making process. These violations occurred between 2018 and 2022, and Uber plans to appeal the decision, stating they have since updated their policies.

Full text

Dutch data protection authorities have fined Uber nearly $1 billion, saying the ride-hailing company used automated software to suspend driver accounts, sometimes permanently, with no human review to check for mistakes. The Dutch Data Protection Authority said Friday it is imposing a fine of 825 million euros ($964 million) because Uber violated the EU’s General Data Protection Regulation. The EU’s data privacy rules prohibit fully automated decision-making. The authority also said Uber failed inform drivers about its automatic decision-making. The violations took place from 2018 to 2022, the agency said. Uber said it disagreed with the decision and the fine and will file an appeal. “The (Data Protection Authority) examined historic policies that were discontinued years ago. We take decisions that affect drivers’ ability to earn extremely seriously and we’re fully committed to fair treatment. This includes human reviews, robust safeguards, and the opportunity for drivers to appeal our decisions if they believe we made a mistake,” the company said in a written statement. This is the fourth time the authority has imposed a fine on Uber. The largest was in 2024, when Uber was hit with a 290 million euro ($324 million) fine for allegedly transferring personal details of European drivers to the United States without adequate protection.Advertisement. Scroll to continue reading. Related: Personal Information Exposed in Apollo Global Data Breach Related: TikTok Reaches $400 Million Settlement With US Justice Department Over Children’s Privacy Related: Google Cloud Sets Out Post-Quantum Roadmap With 2029 Readiness Goal Written By Associated Press Daily Briefing Newsletter Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights. More from Associated Press AI-Assisted Tool Helped Secure Satellite Communication System After 2022 Russian HackingCyberattack Hits Liechtenstein’s Register of People Behind Companies and FoundationsCyberattacks on Minnesota Water Systems Investigated as Officials Warn About Iranian HackersEU to Crack Down on AI Deepfakes, Illicit Imagery and Hacking With New Team in BrusselsUS Bans Foreign-Made Humanoid Robots, Targeting China Over National SecurityFor Some, So-Called ‘Skynet Day’ Came too Close to Sci-Fi After a Rogue Agent Hacked Into a StartupEU Targets Russian Intelligence Officers Accused of Running a Yearslong Cyber Spying CampaignTrump Administration Lifts Restrictions on Anthropic’s Claude Models After Cybersecurity Alarm Latest News Hired for One Job, Judged on Another: The CISO’s Real Problem91 Vulnerabilities Patched in Spring Application FrameworkVenezuelan Gets Record Federal Prison Term for ATM JackpottingPersonal Information Exposed in Apollo Global Data BreachRethinking Application Security for the AI EraIran-Linked Hackers Shut Down UK Power Plant for Four DaysTikTok Reaches $400 Million Settlement With US Justice Department Over Children’s PrivacyAnthropic Expands Mythos 5 Access to More Defenders, Unveils $35M Open Source Fund Trending Daily Briefing NewsletterSubscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts. Webinar: Scaling AI Security August 26, 2026 Join this live webinar for a practical framework for evolving your AI security program from a single application to an enterprise AI ecosystem and autonomous agents. Register Virtual Event: CodeSecCon 2026 August 19, 2026 CodeSecCon bridges the gap between dev and security. Discover best practices for secure coding, innovative risk-reduction tools, and safe AI integration to cultivate a true DevSecOps culture. Safely secure your apps! Register People on the MoveVensure Employer Solutions appointed Michael Lockhart as Chief Information Security Officer.WISeKey has appointed Alexander Hirsch as Group Chief Marketing Officer.UltraViolet Cyber has named Andrew Park Chief Information Security Officer.More People On The MoveExpert Insights Hired for One Job, Judged on Another: The CISO’s Real Problem The skills that get a CISO hired are rarely the skills they are judged on later. Most security leaders are stuck in that gap. Closing it is the real job. (Sravish Sridhar) Rethinking Application Security for the AI Era As AI dramatically shortens the time from vulnerability disclosure to exploitation, enterprises must look beyond patching to reduce application risk. (Joshua Goldfarb) The AI Governance Gap Is a Leadership Problem: Waiting Won’t Close It Organizations are rushing to implement AI without fully grasping where its legal protections begin and end. (Steve Durbin) Rethinking AI Security: Why CASB and DLP Need an Interaction-Aware Layer Build your strategy around answering these questions to ensure employees use AI productively while keeping sensitive data, IP, and agent behavior within the boundaries set for safe AI use. (Etay Maor) Timeless Compliance: Why Better Questions Beat Bigger Frameworks The best compliance programs aren't the biggest ones. They're the ones built on a short list of questions that can actually be answered, and that still hold true when the models change. (Matt Honea) Flipboard Reddit Whatsapp Whatsapp Email

Entities