Dutch regulator fines Uber €825m over driver account bans

The Netherlands has fined ride-hailing company Uber €825 million for deactivating drivers' accounts without notifying them, marking another major regulatory action against the tech giant in the EU. The decision, announced by the Dutch Data Protection Authority (AP), follows a ruling reached earlier this week. The fine is based on violations of European data protection laws, specifically the General Data Protection Regulation (GDPR), which requires individuals to be informed before decisions affecting their rights are made through automated systems. The case stems from incidents that occurred in Europe between 2020 and 2022. It originated from a complaint initially filed in France, which was later processed in the Netherlands due to Uber’s European headquarters being located in Amsterdam. The regulator found that Uber had used automated systems to suspend driver accounts without providing adequate notice or explanation, violating GDPR provisions that require transparency and user consent. According to the AP, the fine represents one of the largest ever issued under the GDPR, second only to a €1.2 billion penalty handed down to Meta by Irish authorities in 2023 for transferring European user data to the U.S. While Uber has previously faced significant fines, most notably a €290 million penalty in 2024 for sharing driver data with the U.S., this new ruling adds to a growing list of regulatory challenges the company faces in the region. In response, Uber stated it plans to appeal the decision, calling the fine “disproportionate.” A spokesperson emphasized that the company takes drivers’ rights seriously and has implemented procedures that include human review and opportunities for drivers to contest account suspensions. This aligns with previous statements made following the 2024 fine, where Uber’s representative, Caspar Nixon, described the earlier ruling as “flawed” and “unjustified.” This latest fine reflects a broader trend of increased scrutiny of tech firms operating within the EU. Over the past several years, European regulators have imposed substantial penalties on major American companies, including Meta, Google, Apple, and Amazon, for breaches related to data privacy, antitrust, and digital market dominance. These actions underscore the EU’s commitment to enforcing strict compliance standards for multinational corporations. Despite the high stakes, many of these fines have been challenged in lengthy legal battles. Some cases have resulted in reductions or even reversals after extended appeals. However, the scale of the fines highlights the seriousness with which regulators view corporate misconduct, particularly when it involves the misuse of personal data or the erosion of consumer rights. As Uber prepares to challenge the ruling, the case could set a precedent for how automated decision-making is regulated in the context of gig economy platforms. The outcome may influence future enforcement actions against other companies using similar practices. Meanwhile, the ongoing legal battle underscores the complex relationship between global tech giants and national regulatory bodies, where compliance and accountability remain central points of contention.