Uber (UBER) Hit with Nearly $1 Billion GDPR Penalty for Driver Account Deactivations

Quick Summary

Table of Contents

Dutch data protection regulators have imposed a €825 million (~$966 million) penalty on Uber for using automated systems to suspend driver accounts without adequate human oversight.
This represents Europe’s second-largest GDPR fine to date, trailing only Meta’s €1.2 billion penalty from 2023.
Uber has announced its intention to appeal, arguing the fine is excessive and challenging certain factual claims in the ruling.
The enforcement action originated from grievances filed by French drivers spanning 2018 to 2022, with Dutch authorities handling the case due to Uber’s European headquarters location.
Digital rights organization PersonalData.io is coordinating a class action lawsuit on behalf of impacted drivers seeking damages.

The ride-hailing giant Uber is confronting a staggering penalty approaching $1 billion from Dutch data protection authorities concerning its practices for deactivating driver accounts, representing one of the most significant GDPR enforcement actions in history.

The Dutch Data Protection Authority has fined Uber €825 million ($966 million) for deactivating driver accounts through automated systems without adequately informing them — the second-largest fine ever issued under Europe's GDPR, behind only the €1.2 billion penalty imposed on… pic.twitter.com/LkcivsEnq9

— Interesting Engineering (@IntEngineering) August 22, 2026

The Dutch Data Protection Authority has levied a fine totaling €825 million, approximately $966 million, against Uber for implementing automated account deactivation systems that failed to provide drivers with sufficient advance notice or meaningful human assessment of the decisions.

The penalty addresses violations occurring throughout Europe from 2018 through 2022. Dutch regulators handled the enforcement because Uber maintains its European operational headquarters in the Netherlands.

Uber Technologies, Inc., UBER

The investigation began after French Uber driver Brahim Ben Ali filed a complaint following his 2019 account deactivation. Ben Ali subsequently documented experiences from 170 additional drivers before submitting the comprehensive case to Netherlands authorities.

Swiss digital rights organization PersonalData.io provided crucial support to Ben Ali, assisting drivers in obtaining information about the automated systems used to make deactivation determinations.

Monique Verdier, deputy chair of the Dutch regulatory body, stated that Uber had “committed serious infringements.” She emphasized: “From one moment to the next they no longer had any income. A computer should not make decisions on its own that have major consequences.”

European GDPR regulations explicitly prohibit purely algorithmic decisions when such determinations significantly affect an individual’s economic well-being. The framework mandates substantive human involvement and mechanisms for individuals to contest automated decisions.

Uber has challenged multiple aspects of the regulatory finding. The company maintains that most account suspensions were temporary and that no permanent deactivations occurred without human evaluation. Uber also highlighted that merely 126 European drivers faced deactivation due to poor customer ratings throughout 2021.

Uber Challenges Regulatory Decision

Uber has confirmed it will contest the ruling. “We strongly disagree with this decision and disproportionate fine,” a company representative stated. The company emphasized that its procedures incorporate human oversight and drivers maintain the ability to challenge platform suspensions.

Dutch regulators determined the penalty amount based on a percentage of Uber’s projected 2025 annual revenue.

This marks another chapter in Uber’s ongoing regulatory challenges with Dutch authorities. The same regulatory body previously assessed a €290 million fine concerning the management of driver personal information, along with a separate €10 million penalty for related infractions. All three fines originated from complaints submitted by the identical driver coalition.

Collective Legal Action in Development

Paul-Olivier Dehaye, founder of PersonalData.io, has confirmed preparations for a class action lawsuit seeking financial compensation for affected drivers. Dehaye is simultaneously establishing a new venture called StartClaims to facilitate the litigation and broaden efforts to additional gig economy disputes.

The penalty ranks as the second-highest GDPR fine ever issued, exceeded only by the €1.2 billion sanction imposed on Meta by Irish authorities in 2023 for transmitting European Facebook user information to the United States. Meta has similarly filed an appeal against that determination.

Uber stock (UBER) was trading up 0.32% at the time of reporting.

✨ Limited Time Offer