Uber fined €825 million by Dutch regulator over automated driver bans

The Dutch Data Protection Authority (AP) has fined Uber €825 million (approximately $966 million) for violating the European Union's General Data Protection Regulation (GDPR). The penalty marks the second-largest GDPR fine ever issued, trailing only a €1.2 billion penalty against Meta.

The fine centers on Uber's use of automated systems to suspend or deactivate driver accounts between 2020 and 2022. According to the AP, the company failed to provide drivers with proper notification or meaningful human review before taking actions that significantly impacted their ability to work. The regulator found that Uber violated two core GDPR principles: the right to be informed and the right not to be subject to automated decision-making that produces significant legal or similarly consequential effects.

The battle over algorithmic management

This case highlights the growing tension between the "gig economy" business model and EU labor and data protections. The investigation originated from complaints filed by drivers in France, but jurisdiction fell to the Dutch regulator because Uber maintains its European headquarters in Amsterdam. The core of the dispute is "algorithmic management," where software is used to make high-stakes employment decisions—such as termination—without human oversight.

Uber has a long and contentious history with the Dutch AP. Prior to this ruling, the company was fined €600,000 in 2018 and €10 million in early 2024. Additionally, Uber faced a separate €290 million fine concerning the transfer of driver data to the United States. In response to the latest ruling, an Uber spokesperson stated, "We strongly disagree with this decision and disproportionate fine."

Implications for the tech industry

This decision reinforces the EU's strict stance against management by algorithm. By issuing such a massive penalty, the AP is asserting that automated systems cannot unilaterally terminate a person's livelihood without a transparent process and a viable path for human appeal. It sends a clear signal to other platform-based companies that efficiency cannot override the fundamental data rights of workers.

Furthermore, the ruling underscores the strategic role of the Dutch regulator as a primary enforcer for U.S. tech giants that choose the Netherlands as their European base. As more companies rely on AI and automated workflows to manage global workforces, the AP's decision sets a high bar for the level of human intervention required in disciplinary actions.

What to watch

Industry observers are now watching to see if Uber will appeal the decision in court, which could delay the payment of the fine and potentially refine the legal definition of "meaningful human review." Additionally, the ruling may prompt other EU member states to launch similar investigations into how other ride-sharing and delivery platforms handle automated account suspensions.