Dutch Regulator Fines Uber €825 Million Over Automated Driver Suspensions — and the Real Fight Is About Algorithms

The Dutch data protection authority (Autoriteit Persoonsgegevens, or AP) fined Uber €825 million ($966 million) on 17 August for using automated systems to deactivate driver accounts without adequately informing drivers. The decision was publicly reported on 21 August 2026 after Reuters broke the story from Amsterdam (Reuters). The AP confirmed the decision later that Friday.

The fine ranks as the second-largest ever issued under the EU's General Data Protection Regulation (GDPR), the bloc's landmark privacy law. The largest remains the €1.2 billion ($1.4 billion) penalty Ireland's Data Protection Commission levied against Meta in 2023 for unlawful EU-US data transfers of European Facebook users (The Guardian).

The case covers incidents across Europe from 2018 to 2022 and originated from a complaint filed by French Uber drivers. The Dutch regulator took jurisdiction because Uber's European headquarters are in the Netherlands. Swiss digital-rights group PersonalData.IO assisted the French drivers in seeking data about the algorithmic decisions affecting their work, a process that eventually triggered the Dutch investigation. PersonalData.IO founder Paul-Olivier Dehaye has said the group is now preparing a class action suit against Uber seeking compensation for affected drivers.

At the core of the AP's finding is Uber's use of automated systems to suspend or deactivate driver accounts. Uber temporarily suspended accounts of drivers suspected of fraud, including cases where its systems concluded that drivers took unnecessary detours to inflate fares or accepted trips without intending to complete them. The AP's deputy chair, Monique Verdier, said Uber committed serious infringements by deactivating driver accounts without warning or human involvement.

A factual dispute emerges between the regulator and the company on one key point. Uber stated it had never automated permanent deactivation decisions. The AP countered that drivers with low customer ratings were sometimes permanently deactivated by computer. Uber further noted that only 126 drivers were deactivated in Europe as a result of low customer ratings in 2021. The AP's official administrative fine decision (boetebesluit) was published as a PDF and jointly addresses Uber B.V. (UBV) and Uber Technologies, Inc. (UTI) as recipients of the fine (AP). Uber has said it will appeal.

The fine was calculated as a fraction of Uber's 2025 annual turnover, consistent with the GDPR's provision that penalties can reach up to 4% of a company's global annual revenue. The AP had previously fined Uber €10 million in January 2024 for violating privacy rules, a separate enforcement action addressing different violations.

The broader context here is the regulatory terrain where algorithmic management meets GDPR Article 22. That provision grants individuals the right not to be subject to decisions based solely on automated processing that produce legal or similarly significant effects — meaning a computer cannot, on its own, make a decision that meaningfully harms someone without human review. The AP's enforcement places automated account deactivations in the gig economy squarely within that framework. The distinction Uber draws between temporary suspensions and permanent deactivations, and the regulator's rejection of that distinction as a meaningful boundary for GDPR compliance, is the fault line the appeal will likely test.

The case also illustrates the GDPR's one-stop-shop mechanism in action. A complaint originating with French drivers was adjudicated by the Dutch authority because of Uber's EU headquarters in Amsterdam, with the fine decision addressing both the Dutch entity and the US parent. This procedural routing concentrated enforcement in a single lead supervisory authority rather than fragmenting it across national regulators.

Dehaye's announced class action adds a second track. If the regulatory fine addresses the AP's enforcement interest, civil litigation would pursue individual remedies for drivers, a path that depends on the underlying infringement finding surviving Uber's appeal. The class action is still in preparation, and its viability will turn on whether the AP's decision holds.

For Uber, the €825 million figure is substantial but survivable as a financial matter. The strategic question is whether the ruling, if upheld on appeal, forces structural changes to how gig platforms handle driver account decisions across the EU, particularly the requirement for meaningful human involvement and adequate notification before automated actions affect a worker's livelihood.

The AP's headline on its own website states that Uber has been fined nearly €825 million for the automated blocking of drivers, framing the decision in terms that leave little ambiguity about the regulator's view of the violations' severity (AP).