Uber is contesting three fines totaling about €1.1B that the Dutch Data Protection Authority (AP) imposed under the General Data Protection Regulation (GDPR). They concern drivers’ data rights (€10M), transfers of drivers’ data to the United States (€290M), and automated deactivations of drivers (€824.99M). Uber challenged the first two fines and has said it will appeal the third.
Latest development Aug 21, 2026
On August 21, 2026, the Dutch Data Protection Authority (AP) fined Uber €824,990,000 for fully automated deactivations of drivers between 2018 and 2022 and for not informing drivers adequately. Uber said it would appeal and called the amount disproportionate. If the fine stands, the money goes to the Dutch treasury.
Why it matters
The three fines total about €1.1B. NOS reported that only Meta’s €1.2B penalty in Ireland has exceeded the €824.99M fine under the General Data Protection Regulation (GDPR). The challenges test how its rules on automated decisions and U.S. data transfers apply to platform work.
Background
Uber’s European headquarters is in Amsterdam, so the Dutch Data Protection Authority (AP) is Uber’s lead supervisory authority under the General Data Protection Regulation (GDPR). All three fines followed complaints by more than 170 French drivers to the Ligue des droits de l’Homme, which took them to the French data protection authority (CNIL).
On January 31, 2024, the AP announced a €10M fine. It found that Uber did not tell drivers how long it kept their data or to which countries outside Europe it sent it. It also found that Uber made access requests unnecessarily hard. On August 26, 2024, the AP announced a €290M fine. It found that Uber had sent European drivers’ data to its U.S. headquarters for more than two years without adequate safeguards. The data included identity documents, location data, and in some cases criminal and medical data. Uber challenged both decisions.
On August 21, 2026, the AP fined Uber €824,990,000. It found that from 2018 to 2022 Uber deactivated drivers’ accounts automatically, without human review, over suspected fraud or low customer ratings, and did not inform drivers adequately. Uber says it fundamentally disagrees, calls the amount disproportionate, and says people are now involved in such decisions.
In September 2026, the central register of collective actions listed a related collective action by Stichting WIE International against Uber under the Dutch Act on Collective Damages Claims (WAMCA). In a November 2025 letter before action, the foundation had challenged Uber’s automated pay-setting and its 2021 to 2023 transfers of drivers’ data to the United States.
Timeline 4 events
-
OtherDrivers’ foundation brings collective action against Uber over pay and data
The central register lists a 2026 action by Stichting WIE International against Uber B.V. and Uber Technologies. Its November 2025 letter before action challenged Uber’s automated pay-setting and 2021 to 2023 transfers of drivers’ data to the United States.
Rechtspraak register: summons extract, WIE International v. UberLitigation Finance Insider
-
JudgmentDutch Data Protection Authority fines Uber €824.99M over deactivations
The authority found that Uber deactivated drivers automatically, without human review, from 2018 to 2022. Uber said it would appeal and called the fine disproportionate.
Autoriteit Persoonsgegevens: Uber fined nearly 825 million eurosNOS
-
JudgmentDutch Data Protection Authority fines Uber €290M over U.S. transfers
The authority found that Uber had sent European drivers’ data to its U.S. headquarters for more than two years without adequate safeguards. Uber said it would challenge the fine.
Autoriteit Persoonsgegevens: fine of 290 million euro on UberAutoriteit Persoonsgegevens: Boete Uber doorgifte naar VS
-
JudgmentDutch Data Protection Authority fines Uber €10M
The authority found that Uber did not tell drivers how long it kept their data or where outside Europe it sent it, and hindered access requests. Uber lodged an objection.