Uber Fined Nearly $1 Billion by Dutch Regulators Over Automated Suspensions of Driver Accounts
Dutch data protection authorities have slapped a massive fine on Uber, worth nearly $1 billion, for using automated software to suspend driver accounts without human review. The ride-hailing company is accused of violating the EU’s General Data Protection Regulation (GDPR), which prohibits fully automated decision-making.
The Dutch Data Protection Authority announced that it would be imposing a fine of 825 million euros ($964 million) on Uber for its role in automatically suspending driver accounts from 2018 to 2022. According to the authority, Uber failed to inform drivers about the automatic decision-making process and did not provide adequate safeguards to prevent mistakes. This is the fourth time Dutch regulators have fined Uber for data protection violations, with a previous fine of 290 million euros ($324 million) imposed in 2024.
The automated suspension system was used by Uber to terminate driver accounts without human review, often permanently. The authority’s investigation revealed that drivers were not given an opportunity to appeal the decisions or seek human review. This lack of transparency and oversight has raised concerns about the fairness and accuracy of the decision-making process.
The use of fully automated decision-making in data processing is a complex issue under GDPR. While it can help speed up processes and increase efficiency, it also raises concerns about accountability and transparency. In this case, Uber’s reliance on automated software to suspend driver accounts without human review has led to significant fines and reputational damage.
Uber has released a statement expressing its disagreement with the decision and fine, stating that it takes decisions affecting drivers’ ability to earn seriously and is committed to fair treatment. However, the company acknowledges that its policies have changed since 2018 and now include human reviews and robust safeguards.
The fine imposed on Uber highlights the importance of data protection regulations in maintaining trust and accountability in digital services. As companies increasingly rely on automation and artificial intelligence to make decisions, it’s essential to ensure that these systems are transparent, fair, and subject to human oversight.
In practical terms, this ruling serves as a reminder for organizations to prioritize transparency and fairness when implementing automated decision-making processes. Companies should provide clear information about their policies and procedures, offer opportunities for appeal and review, and ensure that automated decisions are regularly audited and monitored. By doing so, they can minimize the risk of fines and reputational damage while promoting trust and accountability in digital services.
Source: SecurityWeek — 2026-08-24