Skip to main content
Praxikon

Enforcement

Dutch DPA fines Uber 824.99 million euros for automated driver deactivation

Date
Status
under appeal
Body
Autoriteit Persoonsgegevens
Reference
AP-persbericht 21 augustus 2026
Amount
€824,990,000

What it is about

The Dutch DPA found that between 2018 and 2022 Uber deactivated driver accounts fully automatically on suspected fraud or low customer ratings: temporarily, or permanently with persistently low ratings, without any human review, cutting off drivers' income via Uber. The DPA holds this breached the GDPR ban on solely automated decision making, and that Uber did not inform drivers adequately about it. Uber has since ended the breaches. The investigation followed a complaint by the French Ligue des droits de l'Homme on behalf of 171 drivers to the French regulator, with the DPA as lead authority under the one-stop-shop mechanism. The fine of 824,990,000 euros is set against a 2025 global turnover of about 44.5 billion euros. Uber has announced it will object. It is the fourth DPA fine on Uber, after 600,000 euros (2018), 10 million euros (2023) and 290 million euros (2024).

What this means in practice

If your software takes decisions with major effects on people, such as blocking an account or cutting off income, a human must genuinely review the decision before it takes effect. You must also clearly inform people that automated decision making is used and how it works. This is the largest fine the Dutch DPA has imposed so far, so automated decisions about people are high on its enforcement agenda.

The GDPR articles concerned

Source: Autoriteit Persoonsgegevens, persberichtchecked on 15 September 2026

Summary and practical reading by Praxikon. Not legal advice; the source prevails.

Connections

What connects to this development

Case law

Guidelines

Legislation in motion