The Netherlands

Uber Technologies Inc.

824,990,000 €

GDPR enforcement action by Dutch Supervisory Authority for Data Protection (AP) on 2026-08-21.

Rank · Sector

of 174 in Transportation and Energy

Rank · The Netherlands

of 44

Rank · All fines

of 3,106

Case details

Authority: Dutch Supervisory Authority for Data Protection (AP)
Date: 2026-08-21
Controller / Processor: Uber Technologies Inc.
Sector: Transportation and Energy
Quoted Articles: Art. 22 GDPR, Art. 13 GDPR, Art. 14 GDPR
Type of violation: Non-compliance with general data processing principles

Summary

The Dutch DPA has imposed a fine of EUR 824,990,000 on Uber. As part of the controller's ride hauling service and subsequent customer reviews the controller used software to monitor data subjects' driving behaviour. The software then automatically disabled data subjects' accounts if fraud was suspected or customer reviews were deemed too low. No human involvement was needed to disable these accounts. Because data subjects often relied on the controller's software for income the software's decision therefore had significant implications for their lives.

Open original source Links to the regulator's original publication or another source.