[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fytJ6Uxk2gSplRMn2PbP16jDn_XpdyFM_eSuwsMyu-Hg":3},{"article":4,"iocs":47,"watch_terms":48,"solutions":49,"lesson":52},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":23,"category":24,"article_tags":26},"3e6a6c16-b11d-4fb5-9837-9222e854e4cd","Dutch DPA fines Uber EUR 824 990 000 for unlawful automated decision-making and insufficient information on profiling","dutch-dpa-fines-uber-eur-824-990-000-for-unlawful-automated-decision-making-and--8e7891","Dutch DPA fines Uber EUR 824 990 000 for unlawful automated decision-making and insufficient information on profiling ikerinar Thu, 08\u002F10\u002F2026 - 15:03","The Dutch Data Protection Authority (AP) has fined Uber EUR 824,990,000 for violating GDPR rules on automated decision-making and profiling. Uber automatically deactivated drivers' accounts based on fraud suspicions or low customer reviews, impacting their income. The AP found Uber failed to adequately inform drivers about this automated process, leading to the substantial fine.","Dutch DPA fines Uber EUR 824,990,000 for unlawful automated decision-making and insufficient profiling information.","https:\u002F\u002Fwww.edpb.europa.eu\u002Fnews\u002Fdutch-dpa-fines-uber-eur-824-990-000-for-unlawful-automated-decision-making-and-insufficient_en",null,"2026-10-08T13:03:24+00:00","2026-10-08T14:00:14.053126+00:00",9,[17,20],{"name":18,"type":19},"Uber","vendor",{"name":21,"type":22},"GDPR","product","3f0f8451-91df-4b6c-9a73-ef3b2509b7f1",{"id":23,"icon":12,"name":21,"slug":25},"gdpr",[27,32,37,42],{"category":28},{"id":29,"icon":12,"name":30,"slug":31},"2e06f76c-d5b9-4f54-9eef-4d3447b10730","Breaches","breaches",{"category":33},{"id":34,"icon":12,"name":35,"slug":36},"53f9c4b6-8bc6-4964-9169-d09e5cd41d72","Compliance","compliance",{"category":38},{"id":39,"icon":12,"name":40,"slug":41},"c5c77cdb-f7d7-4990-9436-c81dcbff1163","Policy","policy",{"category":43},{"id":44,"icon":12,"name":45,"slug":46},"d95477d7-eb04-4fad-a2dc-be1428040ce7","Privacy Fines","privacy-fines",[],[18,21],{"controls":50,"vendors":51},[],[],{"slug":53,"title":54,"body":55,"framework_refs":56,"framework_notes":66},"uber-fined-825m-for-opaque-automated-driver-deactivations","Uber Fined €825M for Opaque Automated Driver Deactivations","Uber's automated systems deactivated driver accounts based on fraud scores and customer ratings without providing drivers adequate information about how these decisions were made, violating GDPR Articles 13, 14, and 22. This case highlights that automated decision-making that significantly impacts individuals' livelihoods requires explicit transparency, meaningful human oversight, and the right to contest outcomes. Organizations leveraging AI or algorithmic systems for consequential decisions must treat these as regulated data processing activities, not merely operational tools. Failure to document and communicate profiling logic is not just an ethical shortfall — it carries massive financial and reputational consequences.",[57,58,59,60,61,62,63,64,65],"GDPR Article 13 – Information to be provided where personal data are collected from the data subject","GDPR Article 14 – Information to be provided where personal data have not been obtained from the data subject","GDPR Article 22 – Automated individual decision-making, including profiling","GDPR Article 35 – Data Protection Impact Assessment (DPIA)","NIST Privacy Framework PR.PO-P1 – Policies and procedures for processing data","NIST SP 800-53 PT-7 – Specific categories of personally identifiable information","CIS Control 3 – Data Protection","ISO\u002FIEC 27701:2019 – Privacy Information Management","ITIL Service Design – Risk and compliance management",{}]