A Dutch regulator fines Uber €825M for deactivating driver accounts through automated systems without informing them, in the second largest fine under GDPR
Regulator says ride-hailing group deactivated driver accounts through automated systems without adequately informing them
Context & Ripple Effects
Uber’s latest Dutch case follows the regulator’s record €290M penalty over transfers of sensitive driver data to the US, extending a pattern of enforcement centered on how the company handles driver information. Earlier Dutch and British action over the 2016 data-breach cover-up underscores that Uber’s data practices have repeatedly drawn regulator scrutiny.
The reported €825M fine shifts the focus from data transfers and breach disclosure to the transparency owed to drivers when automated systems remove their access to the platform. That makes account deactivation a GDPR governance issue, not only an operational enforcement tool.
First-order effects
- Uber faces an €825M GDPR penalty tied to automated driver-account deactivations and the information provided to affected drivers.
- Drivers subject to Uber’s automated deactivation process gain regulatory backing for clearer notice about decisions that can cut off access to work.
Second-order effects
- Uber will need to treat automated account enforcement as a documented, explainable process, raising compliance requirements around driver-facing notices.
- The Dutch Data Protection Authority’s action gives other platform operators a concrete enforcement signal: automation affecting workers’ account access is within GDPR scrutiny.
Third-order effects
- If this enforcement approach holds, European platform governance will increasingly distinguish between using automation to police marketplaces and adequately explaining consequential decisions to the people governed by it.
- GDPR enforcement is moving beyond data storage and transfers toward accountability for automated decisions at the deployment layer.
The trend: European privacy enforcement is increasingly testing whether platforms can use automated controls over workers while meeting transparency and accountability duties.