Uber Faces €825 Million Fine Over Automated Driver Suspensions

Washington DC, United States Aug 24, 2026 ALN: The Dutch Data Protection Authority has recently imposed a significant fine of €825 million (approximately $966 million) on Uber, marking it as the second largest penalty issued under the General Data Protection Regulation (GDPR) in Europe. This ruling highlights the ongoing scrutiny that large tech companies face regarding their data handling practices and the implications of automated decision-making systems.

The investigation into Uber's practices was initiated following complaints that the company had deactivated driver accounts through an automated process, which lacked adequate warning and human oversight. Monique Verdier, the deputy chair of the Dutch Data Protection Authority, stated that Uber had "committed serious infringements" of data privacy regulations. The authority's findings raise critical questions about the use of algorithms and automated systems in making decisions that can significantly impact individuals' livelihoods.

Verdier emphasized the need for human involvement in decisions that carry substantial consequences, asserting that "a computer should not make decisions on its own that have [such] major consequences." This statement underscores a growing concern among regulators about the potential for automated systems to operate without sufficient accountability or transparency, especially in sectors that directly affect people's jobs and income.

In response to the ruling, Uber has contested the findings, arguing that the majority of driver suspensions are temporary and that no permanent deactivations occur without a human review process. The company maintains that drivers have the right to appeal their suspensions. However, the Dutch regulators have indicated that there were instances where drivers were permanently deactivated without any human intervention, a claim that Uber disputes. The company has announced its intention to appeal the decision, asserting that the fine is disproportionate.

One of the key figures in bringing this issue to light is Brahim Ben Ali, a former Uber driver from France. After his account was deactivated in 2019, he took it upon himself to gather testimonies from 170 other Uber drivers, which ultimately led him to file a complaint in the Netherlands, where Uber's European headquarters are located. Ben Ali’s efforts illustrate the grassroots activism that can emerge in response to perceived injustices within the gig economy.

Ben Ali received support from PersonalData.io, a Swiss nonprofit organization focused on digital rights. The organization assisted drivers in collecting data about how Uber made its deactivation decisions. Paul-Olivier Dehaye, the founder of PersonalData.io, highlighted the vulnerability of drivers in the gig economy, stating that a driver could complete numerous successful rides but face severe consequences due to a single complaint. This situation raises concerns about the fairness and transparency of automated decision-making systems employed by companies like Uber.

Dehaye noted that this recent fine is not an isolated incident; it is the third time the Dutch regulator has penalized Uber for similar issues. The previous fines included a €290 million penalty related to Uber's handling of drivers' personal data and a €10 million fine for related concerns. Dehaye's involvement in these cases reflects a broader movement advocating for the rights of gig economy workers, as he plans to initiate a class action lawsuit that would enable drivers to seek compensation for their grievances.

Interestingly, Dehaye mentioned that all these fines stem from complaints made by the same group of drivers, indicating a coordinated effort to address systemic issues within Uber's operational practices. Furthermore, he is in the process of launching a new company called StartClaims, aimed at supporting litigation and regulatory actions against Uber, with plans to extend its focus to other gig economy cases and areas such as adtech.

The implications of this ruling extend beyond Uber itself, as it raises critical questions about the broader gig economy and the responsibilities of companies that rely on automated systems. Critics, including technology commentator John Gruber, have expressed concerns that such a fine could hinder Uber's ability to monitor its drivers effectively, potentially allowing fraudulent activities to go unchecked. Gruber argued that equating automated decision-making to a lack of accountability oversimplifies the issue, suggesting that company policies and managerial oversight play crucial roles in enforcing compliance.

Dehaye countered this perspective, asserting that while Uber is free to utilize human judgment in addressing driver misconduct, it must also accept the responsibility that comes with such decisions. This distinction between being an employer versus merely a marketplace operator is central to the ongoing debate about the rights and protections afforded to gig workers.

The fine imposed on Uber serves as a stark reminder of the challenges that companies face in navigating the complexities of data protection regulations. As regulators become increasingly vigilant in enforcing compliance with GDPR, businesses must reevaluate their practices to ensure they align with the principles of transparency, accountability, and fairness. The outcome of Uber's appeal and the potential class action suit initiated by drivers will likely have significant ramifications not only for the company but also for the gig economy as a whole, as it could set precedents for how automated decision-making is regulated in the future.