Uber Hit With Record €825M GDPR Fine Over Driver Data Handling

Uber is facing a massive financial penalty in the Netherlands after the country’s data protection authority ruled that the ride-hailing giant mishandled driver data. The Dutch regulator has imposed a fine of €825 million, marking the second-largest GDPR-related penalty ever issued in Europe. The decision stems from Uber’s practice of automatically suspending drivers based on data that was transferred to the US without proper safeguards.

The case centers on the company’s use of automated systems to evaluate driver performance and flag potential issues. According to the Dutch authority, these systems relied on personal data that was sent to servers in the United States, a transfer that violated EU data protection rules. The regulator argued that Uber failed to implement adequate measures to protect the data during these cross-border transfers, leaving drivers vulnerable to privacy breaches.

Uber has responded by stating its intention to appeal the ruling, arguing that its data-handling processes were compliant and that the fine is disproportionate. The company maintains that the suspensions were based on legitimate operational concerns, not discriminatory practices. However, the Dutch authority’s decision underscores a growing regulatory scrutiny of how tech companies manage user data across borders.

This penalty is part of a broader trend in Europe, where regulators are increasingly holding tech giants accountable for data governance. For Uber, the fine adds to a series of legal and regulatory challenges in recent years, though the company’s overall business continues to expand globally. The case also highlights the ongoing friction between US-based tech firms and EU privacy standards, a tension that is likely to shape future policy debates.