Dutch DPA fine: Uber, automated driver deactivation privacy case
Regulator
Autoriteit Persoonsgegevens
acted against
Against
The Dutch DPA, working with the CNIL on a French drivers' complaint, found Uber used fully automated decisions to temporarily or permanently deactivate drivers over suspected fraud or low ratings and did not properly inform them.
The case
- Regulator
- Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
- Decided
- Aug 21, 2026
- Status
- Decided
- Outcome
- The Dutch DPA fined Uber EUR 824,990,000; Uber has stopped the violations.
- Amount
- EUR 824,990,000
- Law tested
- GDPR on Regulations
History
2 dated entriesRelated cases
United States sued v.
Cerebral (health data for ads)The FTC alleged the telehealth firm shared sensitive health data with third parties for advertising, failed to secure it and made cancellation difficult.$7 millionJury trialS.D. Fla.filed Apr 2024
Irish Data Protection Commission: GoogleThe Irish Data Protection Commission fines Google 403 000 000 EUR following Inquiry into Google’s processing of location dataIrish DPCIsbell sued v.
SunoRecording artists including Jason Isbell and David Lowery allege Suno's generator reproduces their voices, names and likenesses without consent, pleading BIPA and state right-of-publicity claims.D. Mass.Texas AG acted against v.
Meta and WhatsApp: encryption claimsTexas sued Meta and WhatsApp alleging they misled users about end-to-end encryption and the privacy of WhatsApp messages.Texas Attorney GeneralFlowers sued v.
MicrosoftAlleges Microsoft's Copilot and other voice products captured users' biometric voiceprints without BIPA consent.N.D. Ill.Amer sued v.
ElevenLabsIllinois plaintiffs allege ElevenLabs captured biometric voiceprints from real voices to build its voice AI without BIPA consent.N.D. Ill.
Dutch DPA fine: Yango (MLU B.V.), transfers to RussiaJoint investigation with the Norwegian and Finnish authorities found the company behind the European Yango taxi app transferred driver and customer data to Russia without adequate protection.EUR 100 millionDutch Data Protection Authority (Autoriteit Persoonsgegevens)
FTC: OkCupid and Match, sharing user photos with a third partyThe FTC alleged OkCupid gave a third party unauthorized access to users' personal data, contrary to its privacy promises.US Federal Trade Commission
Caption and links
Uber B.V. and Uber Technologies, Inc.
Also onQuarterly·Mainstage·Leaders·Paydays·Predictions