Dutch DPA fines Uber EUR 824 990 000 for unlawful automated decision-making and insufficient information on profiling
Dutch DPA fines Uber EUR 824,990,000 for unlawful automated decision-making and insufficient profiling information.
The Dutch Data Protection Authority (AP) has fined Uber EUR 824,990,000 for violating GDPR rules on automated decision-making and profiling. Uber automatically deactivated drivers' accounts based on fraud suspicions or low customer reviews, impacting their income. The AP found Uber failed to adequately inform drivers about this automated process, leading to the substantial fine.
AI summary of the linked source. Not reviewed by an editor. How this works
Run Uber?
Get an email when a new story names Uber, usually within the hour.
Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch worksPrivacy
The lesson from this incident
Full lessonUber's automated systems deactivated driver accounts based on fraud scores and customer ratings without providing drivers adequate information about how these decisions were made, violating GDPR Articles 13, 14, and 22. This case highlights that automated decision-making that significantly impacts individuals' livelihoods requires explicit transparency, meaningful human oversight, and the right to contest outcomes. Organizations leveraging AI or algorithmic systems for consequential decisions must treat these as regulated data processing activities, not merely operational tools. Failure to document and communicate profiling logic is not just an ethical shortfall — it carries massive financial and reputational consequences.