European Data Protection BoardEnforcement

Dutch DPA fines Uber EUR 824 990 000 for unlawful automated decision-making

The Dutch DPA fined Uber EUR 824,990,000 for making fully automated decisions about drivers without sufficient information, violating GDPR Articles 22 and 13.

Framework
GDPR
Who it concerns
Uber B.V.

What changed?

Each point with the sentence from the source that says it.

  1. Uber made fully automated decisions about drivers, including temporary or permanent deactivation of accounts based on fraud suspicions or low customer reviews.

    The AP has ruled that Uber made fully automated decisions about drivers.

  2. Uber did not sufficiently inform drivers about automatic decision-making.

    The AP also found that Uber did not sufficiently inform drivers about automatic decision-making.

  3. The Dutch DPA imposed an administrative fine of EUR 824,990,000 on Uber.

    The Autoriteit Persoonsgegevens (AP) imposed an administrative fine of EUR 824 990 000 on Uber for unlawful automated decision-making and insufficient information about profiling.

Which policies should you review?

Suggested from the change above. Check the source before you edit.

  • Data Protection Policy

    Review the policy to ensure it addresses the prohibition on fully automated decision-making without a lawful basis and requires informing data subjects about such decisions.

  • Privacy Notice

    Review the privacy notice to ensure it clearly informs individuals about any automated decision-making, including profiling, and its consequences.

Bring your Data Protection Policy up to date

PoliWriter writes your policies from a short questionnaire about your company. Your first policy is free.

Written by an AI model from the source above and checked against it: every point is quoted from the source. Not legal advice. First seen 16 Oct 2026.