Uber Hit With $963 Million GDPR Fine Over Automated Driver Account Suspensions

Uber has been fined $963 million by Dutch regulators over the use of automated systems to suspend driver accounts without human review, in a case that highlights growing regulatory scrutiny of algorithmic decision-making.

The penalty concerns Uber’s handling of driver accounts between 2020 and 2022. According to information shared on X and attributed to Reuters, Dutch regulators determined that Uber allowed automated systems to suspend drivers suspected of fraud or those with low ratings, potentially cutting them off from their source of income without an individual human review.

Uber has said it will appeal the decision.

Dutch Regulators Target Automated Account Decisions

The case centers on how Uber used automated systems to make decisions affecting drivers on its platform.

Between 2020 and 2022, drivers who were suspected of fraudulent activity or who received low ratings could have their accounts suspended through automated processes. The regulatory action questioned whether such decisions could be made without adequate human involvement.

For drivers working through digital platforms, account suspension can have direct financial consequences because access to the platform is closely linked to their ability to earn income.

The Dutch regulators’ decision therefore places particular emphasis on the way automated decision-making systems are applied to individuals and whether people affected by those decisions have meaningful opportunities for human review.

The case was reported in information shared by @coinbureau on X, citing Reuters.

$963 Million Penalty Becomes Second-Largest GDPR Fine

The $963 million penalty is described as the second-largest GDPR fine ever imposed, ranking behind only Meta’s $1.2 billion penalty in 2023.

The General Data Protection Regulation, commonly known as GDPR, is the European Union’s comprehensive data protection framework. It governs how organizations collect, process and protect personal data and includes markets requirements concerning the rights of individuals affected by data-processing decisions.

The scale of the Uber penalty demonstrates the potential financial consequences companies can face when regulators determine that their data-processing practices violate European privacy rules.

The fine also comes amid broader scrutiny of automated decision-making systems used by technology companies and digital platforms.

Algorithmic Decisions Face Greater Scrutiny

Automated decision-making has become increasingly common across digital services, where companies use algorithms to process large volumes of information and make decisions more quickly than manual systems.

For platforms such as Uber, automated tools can be used to identify potentially fraudulent behavior, evaluate account activity and assess other factors associated with users and drivers.

However, decisions affecting individuals can raise regulatory questions when algorithms operate without meaningful human oversight.

In Uber’s case, the Dutch regulators’ action focused specifically on automated account suspensions involving drivers. The concern was cryptocurreny that drivers could lose access to the platform based on algorithmic decisions without human review.

The issue illustrates a broader challenge facing companies that rely on automated systems: balancing operational efficiency with legal requirements governing individual rights and data processing.

Uber Plans to Appeal

Uber has said it will appeal the fine.

The appeal could give the company an opportunity to challenge the regulators’ findings and the size of the penalty. The outcome will determine whether the $963 million fine is ultimately upheld, modified or overturned.

The case also places Uber among companies facing substantial regulatory penalties over the use of personal data and automated systems.

The comparison with Meta’s $1.2 billion GDPR penalty in 2023 underscores the scale of the action against Uber. If upheld, the $963 million penalty would remain one of the largest sanctions imposed under the European privacy framework.

Implications for Automated Decision-Making

The Uber case highlights the regulatory risks associated with using algorithms to markets decisions that can have significant consequences for individuals.

For drivers, an account suspension can directly affect their ability to access work through the platform. Regulators have therefore examined not only how automated systems process information but also how companies provide safeguards for people affected by those decisions.

The dispute will now move toward the appeal process as Uber challenges the Dutch regulators’ decision.

The case could also draw continued attention to how companies deploy automated systems in areas involving employment, income and access to digital platforms.

For now, the Dutch regulators’ $963 million penalty represents one of the largest GDPR fines on record, while Uber maintains that it will contest the decision.

Writer: Victoria Hale
Technology & Blockchain Writer

Victoria Hale writes about blockchain technology, digital infrastructure, and the intersection of emerging technologies with finance. Her articles explore how new protocols and systems are shaping the evolving digital economy.

She prioritises clarity and accuracy when explaining technical developments to a general audience.