Ride-hailing giant Uber has been fined $966 million (€825 million) by the Dutch Data Protection Authority over the automated suspension and deactivation of drivers’ accounts without adequate human review.
The Dutch regulator said Uber used automated systems between 2018 and 2022 to suspend some European drivers without properly informing them or giving them sufficient access to human review, according to Reuters.
The case followed complaints from French drivers and was handled by the Dutch authority because Uber’s European headquarters are based in the Netherlands.
According to the regulator, some drivers had their accounts suspended over suspected fraudulent activities, including allegedly taking unnecessary detours to increase fares or accepting trips without intending to complete journeys.
The authority also said Uber used automated systems to deactivate drivers whose customer ratings fell below certain thresholds.
Dutch Data Protection Authority Deputy Chair Monique Verdier criticised the company’s approach, particularly because account suspensions and deactivations could have serious financial consequences for drivers.
“Uber has committed serious infringements,” Verdier said, stressing that some drivers suddenly lost their source of income and arguing that decisions with such significant consequences should not be left solely to computer systems.
The fine was calculated based on Uber’s 2025 turnover.
Uber has rejected the regulator’s findings and said it would appeal the decision, describing the penalty as disproportionate. The company argued that only a small number of drivers were affected and said 126 European drivers were deactivated because of low customer ratings in 2021.
The company also disputed the claim that its account decisions were made without human involvement, saying drivers could challenge decisions through its platform.
An Uber spokesperson said suspensions were generally brief and that permanent deactivations were not carried out without human involvement.
The penalty is reportedly the second-largest fine imposed under Europe’s General Data Protection Regulation (GDPR). The largest was a €1.2 billion penalty imposed on Meta by Ireland in 2023 over the transfer of European Facebook users’ data to the United States, a decision Meta is appealing.
The GDPR restricts solely automated decisions that significantly affect individuals and requires safeguards, including human involvement in certain circumstances.
The Uber case highlights growing regulatory scrutiny of how major technology platforms use automated decision-making systems, particularly where such decisions can affect people’s livelihoods.
European regulators have increasingly taken enforcement action against major technology companies, including Meta, Google, Apple and Amazon, over data protection, competition and digital market concerns.
