Truth that Matters. Stories that Impact

Truth that Matters. Stories that Impact

Technology

Dutch Privacy Regulator Fines Uber €825 Million Over Automated Driver Deactivations

The Dutch Data Protection Authority has imposed an €825 million (approximately $966 million) fine on ride-hailing platform Uber for using automated processes to deactivate driver accounts without adequate warning or human oversight. This penalty represents the second-largest fine ever issued under the European Union’s General Data Protection Regulation (GDPR).

What Happened

The regulatory action follows an inquiry into complaints regarding how Uber suspends and removes drivers from its service. According to the Dutch data watchdog, the company carried out driver account deactivations through automated systems without sufficient advance warning or meaningful human involvement. Monique Verdier, the deputy chair of the Dutch Data Protection Authority, stated that the company committed serious infringements, emphasizing that automated systems should not independently make determinations carrying significant repercussions for individuals.

The regulatory inquiry originated from actions initiated by Brahim Ben Ali, a former Uber driver in France whose account was suspended in 2019. Ben Ali gathered testimonies from 171 fellow drivers and lodged formal complaints in the Netherlands, where Uber maintains its European headquarters. Ben Ali worked alongside PersonalData.io, a Swiss digital rights non-profit organization led by founder Paul-Olivier Dehaye, to compile information on how the company’s suspension mechanisms operated.

Uber has contested the regulatory findings and announced its intention to appeal the penalty. The company stated that the vast majority of driver suspensions are short-term, that permanent deactivations do not occur without human intervention, and that affected drivers retain the ability to appeal actions taken against their accounts. In contrast, Dutch regulators found that certain drivers had their accounts permanently deactivated solely by automated systems without human evaluation.

Key Highlights

  • Significant Financial Penalty: The Dutch Data Protection Authority issued an €825 million ($966 million) fine against Uber, marking the second-highest penalty under GDPR enforcement history.
  • Automated Decision-Making at Issue: Regulators determined that Uber deactivated driver accounts via automated algorithms without adequate warnings or human supervision, which Uber disputes.
  • Repeated Enforcement: According to PersonalData.io founder Paul-Olivier Dehaye, this marks the third Dutch regulatory fine imposed on Uber, following earlier penalties of €290 million and €10 million concerning driver personal data handling.
  • Driver Mobilization: The case stems from evidence compiled by former driver Brahim Ben Ali and 171 other drivers, supported by digital rights group PersonalData.io.
  • Formal Appeal Planned: An Uber spokesperson labeled the decision and penalty disproportionate, confirming that the company will challenge the ruling through legal appeals.

Why This Matters

The ruling directly addresses the legal limits of algorithmic management and automated workplace disciplinary systems within the European Union. Under GDPR frameworks, relying on automated decisions that produce major consequences for individuals without sufficient human oversight is deemed an infringement. Paul-Olivier Dehaye noted that under automated review systems, a driver could execute thousands of successful trips, yet face severe disruption from a single severe customer complaint. Furthermore, Dehaye pointed out that shifting from fully automated penalties to human-directed management bears on whether platform companies operate strictly as technology marketplaces or assume the responsibilities associated with traditional employers.

What to Watch Next

Following the regulatory announcement, Uber plans to pursue an official appeal against the Dutch Data Protection Authority’s decision and the associated financial penalty. Simultaneously, Paul-Olivier Dehaye revealed plans to launch a class-action lawsuit to pursue financial compensation for impacted drivers. Dehaye is establishing an entity named StartClaims to assist in organizing this litigation and pursuing future regulatory challenges across the wider gig economy and digital advertising sectors.

Frequently Asked Questions

Why did Dutch authorities fine Uber?

The Dutch Data Protection Authority determined that Uber violated GDPR by deactivating driver accounts using automated systems without adequate notice or sufficient human oversight.

How much is the fine issued against Uber?

The penalty is set at €825 million, which translates to roughly $966 million.

What is Uber’s response to the ruling?

Uber disputed the findings, stating that permanent deactivations involve human review, that suspensions are mostly brief, and that drivers can appeal decisions. The company confirmed it will appeal the fine.

Have Dutch regulators penalized Uber previously?

Yes. Uber was previously subject to a €290 million fine regarding its management of driver data and an earlier €10 million penalty over related data compliance matters.

Source: Reporting based on documentation and statements from the Dutch Data Protection Authority, Reuters, and TechCrunch.