Uber Hit With $963 Million GDPR Fine Over Automated Driver Account Suspensions
Key Takeaways
- •Dutch regulators fined Uber $963 million over its handling of driver accounts between 2020 and 2022, when automated systems suspended drivers suspected of fraud or rated poorly without individual human review.
- •The penalty is the second-largest GDPR fine on record, behind only Meta's $1.2 billion penalty imposed by Ireland's Data Protection Commission in 2023.
- •The regulatory action relates to GDPR Article 22, which protects individuals from decisions based solely on automated processing that have legal or similarly significant effects and calls for safeguards such as human intervention.
- •Uber has said it will appeal the fine, and challenges to Dutch data protection decisions are ultimately reviewed by the courts rather than the regulator.
- •The fine arrives amid broader EU regulation of algorithmic management, including the Platform Work Directive adopted in 2024 covering automated systems that monitor and evaluate platform workers.

Uber has been fined $963 million by Dutch regulators over its use of automated systems to suspend driver accounts without human review, in a case that spotlights growing regulatory scrutiny of algorithmic decision-making.
The penalty covers Uber's handling of driver accounts between 2020 and 2022. According to information shared on X and attributed to Reuters, Dutch regulators determined that Uber allowed automated systems to suspend drivers suspected of fraud as well as those with low ratings — potentially cutting them off from their source of income without an individual human review.
Uber has said it will appeal the decision.
Dutch Regulators Target Automated Account Decisions
The case centers on how Uber used automated systems to make decisions affecting drivers on its platform.
Between 2020 and 2022, drivers suspected of fraudulent activity or those who received low ratings could have their accounts suspended through automated processes. The regulatory action questioned whether such decisions could be taken without adequate human involvement.
For drivers working through digital platforms, an account suspension can carry direct financial consequences, because access to the platform is closely tied to their ability to earn income.
The Dutch regulators' decision therefore places particular emphasis on how automated decision-making systems are applied to individuals, and on whether people affected by those decisions have meaningful opportunities for human review. That emphasis aligns with GDPR's Article 22, the provision that gives individuals the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects, and that calls for safeguards such as the ability to obtain human intervention.
GDPR enforcement in the Netherlands falls to the Autoriteit Persoonsgegevens, the Dutch data protection authority, which investigates potential violations of the European privacy rules and can impose penalties.
The case was reported in a post shared by @coinbureau on X, citing Reuters.
$963 Million Penalty Becomes Second-Largest GDPR Fine
The $963 million penalty is described as the second-largest GDPR fine ever imposed, ranking behind only Meta's $1.2 billion penalty in 2023, which Ireland's Data Protection Commission levied over transfers of European user data to the United States.
The General Data Protection Regulation, commonly known as GDPR, is the European Union's comprehensive data protection framework. It governs how organizations collect, process and protect personal data, and includes requirements concerning the rights of individuals affected by data-processing decisions. In force since May 2018, it allows regulators to impose fines of up to €20 million or 4 percent of a company's global annual turnover, whichever is higher, for the most serious violations.
The scale of the Uber penalty underlines the potential financial consequences companies can face when regulators determine that their data-processing practices violate European privacy rules.
The fine also arrives amid broader scrutiny of automated decision-making systems used by technology companies and digital platforms.
Algorithmic Decisions Face Greater Scrutiny
Automated decision-making has become increasingly common across digital services, where companies use algorithms to process large volumes of information and reach decisions faster than manual systems.
For platforms such as Uber, automated tools can be used to identify potentially fraudulent behavior, evaluate account activity and assess other factors associated with users and drivers.
However, decisions affecting individuals can raise regulatory questions when algorithms operate without meaningful human oversight. EU lawmakers have also moved to regulate this territory directly: the Platform Work Directive adopted in 2024 establishes rules on algorithmic management for digital labor platforms, addressing how automated systems monitor and evaluate people performing platform work.
In Uber's case, the Dutch regulators' action focused specifically on automated account suspensions involving drivers. The concern was that drivers could lose access to the platform on the basis of algorithmic decisions, without human review.
The issue illustrates a broader challenge facing companies that rely on automated systems: balancing operational efficiency with legal requirements governing individual rights and data processing.
Uber Plans to Appeal
Uber has said it will appeal the fine.
The appeal gives the company an opportunity to challenge the regulators' findings and the size of the penalty. The outcome will determine whether the $963 million fine is ultimately upheld, modified or overturned. In the Netherlands, challenges to data protection decisions are ultimately reviewed by the courts rather than by the regulator itself.
The case places Uber among the companies facing substantial regulatory penalties over their use of personal data and automated systems. The comparison with Meta's $1.2 billion GDPR penalty in 2023 underscores the scale of the action against Uber. If upheld, the $963 million penalty would stand as one of the largest sanctions imposed under the European privacy framework.
Implications for Automated Decision-Making
The Uber case highlights the regulatory risks of using algorithms to make decisions that can have significant consequences for individuals. For drivers, an account suspension can directly affect their ability to access work through the platform.
Regulators have therefore examined not only how automated systems process information, but also how companies provide safeguards for the people affected by those decisions.
The dispute now moves toward the appeal process as Uber challenges the Dutch regulators' decision. The case could also draw continued attention to how companies deploy automated systems in areas involving employment, income and access to digital platforms.
For now, the Dutch regulators' $963 million penalty represents one of the largest GDPR fines on record, while Uber maintains that it will contest the decision.
Source: Hokanews