Uber fined €825 million by Dutch regulator over automated driver account suspensions, report says

Uber Technologies has been hit with an €825 million fine from the Dutch Data Protection Authority, the report says, after finding Uber’s automated driver account suspension practices violated the European Union’s General Data Protection Regulation (GDPR). The penalty centers on past suspensions that were carried out through Uber’s systems rather than solely through manual review.

Under the GDPR, companies that process personal data must meet strict standards for transparency, lawful processing, and safeguards, especially when decisions affecting individuals are made with automated processing. The Dutch regulator’s finding, as described in the report, indicates that Uber’s systems did not provide sufficient safeguards in the context of suspending drivers’ accounts.

The report characterizes the case as specifically relating to “automated driver account suspensions,” suggesting the regulator focused on how Uber used its technology to restrict access to the platform. In that framing, the concern is not just the outcome for individual drivers, but the adequacy of the data protection measures around automated decision-making.

Uber is listed as the defendant in the matter, and the fine is presented as a significant figure, large enough to draw attention from investors and regulators across the broader market. For Uber, the practical impact of such penalties can include higher compliance costs, changes to internal systems, and potential knock-on effects to customer and driver operations, even if the company challenges or appeals outcomes where available.

The report does not provide additional detail in the text provided here, such as the time period covered by the suspensions, how many driver accounts were affected, or whether the decision is final or subject to appeal. It also does not spell out what specific technical or procedural controls the regulator said were missing, beyond concluding that Uber’s systems lacked sufficient safeguards under the GDPR.

From a sector standpoint, the case underlines how transportation and platform companies that rely on large-scale automation face heightened scrutiny under EU privacy rules. Ride-hailing and delivery platforms often use automated tools for safety screening, fraud detection, and account integrity, and regulators increasingly expect those systems to be built with GDPR-aligned governance.

For Uber, the immediate question is whether it will adjust its driver-suspension workflows and data-handling practices in response to the regulator’s conclusions. Another key watch item is what Uber says about its compliance posture, including whether it plans to appeal and how it will communicate changes to drivers who may be affected by any revised processes.