Uber Hit With $966 Million Fine—Regulator Says Algorithms Suspended Drivers Without Proper Notice
Uber is facing a €825 million ($966 million) privacy fine after a Dutch regulator concluded that automated systems suspended European drivers without giving them enough information or meaningful human oversight.
The penalty—announced in a decision dated August 17 and reported on August 21—could become the second-largest fine ever imposed under the European Union’s General Data Protection Regulation, or GDPR. Uber disputes the ruling and says it will appeal, so the legal fight is not over.
Why the Dutch regulator imposed the fine
According to a decision reviewed by Reuters, the Dutch Data Protection Authority found that Uber violated drivers’ rights by relying on automated decision-making when suspending accounts and by failing to adequately explain what was happening.
The case concerns incidents from 2020 through 2022 and originated with a complaint in France. Dutch authorities handled it because Uber’s European headquarters are in the Netherlands.
Some temporary suspensions involved suspected fraud. Reuters reported examples in which Uber’s systems concluded that a driver had taken an unnecessary detour to raise a fare or had accepted a trip without intending to complete it. Drivers with low customer ratings could also face permanent suspension.
The regulator’s central concern was not simply that software helped flag accounts. It was whether a consequential decision was made through automation without sufficient explanation, genuine human review and an effective way for a driver to challenge the result.
What European privacy law says about automated decisions
The GDPR gives people protections against decisions based solely on automated processing when those decisions produce legal effects or otherwise significantly affect them. The European Data Protection Board says meaningful safeguards may include human intervention, information about the logic and consequences of the decision, and a way to contest it.
For a ride-share driver, losing access to an account can mean an immediate loss of income. That makes the Uber decision a major test of how privacy law applies when algorithms help manage people’s work rather than merely recommend music, videos or products.
The regulator also found that Uber failed to properly inform affected drivers. Under European rules, companies using automated decision-making must provide meaningful information about how the process works and what it may mean for the person involved.
Uber says the fine is disproportionate
Uber said it “strongly disagree[s]” with the decision and called the fine disproportionate. The company told Reuters that its current policies include human review and opportunities for drivers to dispute platform suspensions.
Uber also maintains that it did not permanently deactivate accounts without human review. The company said it no longer makes permanent deactivation decisions solely through automated systems.
Those arguments will now move into an appeals process. Until that process is complete, the fine should not be treated as a final, uncontested outcome.
Why the $966 million figure matters
If upheld, the €825 million penalty would rank behind only the €1.2 billion GDPR fine imposed on Meta in 2023 over transfers of European Facebook users’ data to the United States. Meta has appealed that penalty.
The scale of the Uber fine sends a warning well beyond ride-sharing. Delivery platforms, marketplaces and other gig-economy companies increasingly use automated tools to evaluate performance, detect suspected fraud and control access to work. European regulators are signaling that companies cannot hide a life-changing decision inside a black box simply because software made it faster.
What happens next
Uber’s appeal will determine whether the regulator’s reasoning—and the size of the penalty—survive judicial review. The case will also be closely watched by workers and technology companies because it addresses a basic question of the algorithmic workplace: when software can switch off a person’s income, how much explanation and human judgment must the platform provide?
For now, the answer from the Dutch privacy watchdog is clear: automation does not erase accountability.
Sources: Reuters, August 21, 2026; European Data Protection Board guidance on automated decision-making; EDPB overview of individual GDPR rights.
