Uber Fined €825 Million for Letting Computers Fire Drivers
The Hague, Tuesday, 1 September 2026.
The Dutch privacy regulator fined Uber €825 million for using fully automated algorithms to block drivers, marking the second-largest penalty in European data protection history.
Algorithmic Automation in Practice
To manage its vast network of drivers, ride-hailing giant Uber—which has its European headquarters located in Amsterdam, Netherlands [1][2][3]—implemented an algorithmic management innovation designed to streamline platform operations [GPT]. This software worked by continuously tracking driver behavior and customer reviews [1]. If the software flagged specific anomalies—such as concluding that a driver was taking unnecessary detours, accepting trips they did not intend to complete, or showing signs of fraud—it automatically triggered an account deactivation [1][3]. These deactivations were temporary in cases of suspected fraud and permanent when customer ratings fell too low [1]. While this automated system allowed the platform to scale rapidly and maintain quality control [GPT], it operated entirely without human intervention before a driver’s account was blocked [1].
The Operational Benefits and Regulatory Pitfalls
From a technical perspective, algorithmic management systems offer significant benefits, including real-time fraud detection, automated performance monitoring, and the ability to coordinate millions of independent contractors without the administrative overhead of human supervisors [GPT]. However, under the European Union’s General Data Protection Regulation (GDPR), fully automated decision-making that carries significant consequences for individuals is strictly regulated [1][3]. The Dutch Data Protection Authority (Autoriteit Persoonsgegevens, or AP) found that Uber’s system breached these rules because drivers lost their primary source of income instantly and without any prior human assessment [1]. Monique Verdier, deputy chair of the AP, emphasized that computers should not make high-impact decisions alone, stating that a human review must always take place first [1].
A Historic Financial Penalty
On August 21, 2026, the AP officially imposed a historic €824,990,000 fine on Uber for these automated deactivations, which occurred between 2018 and 2022 [1]. To illustrate the scale of this penalty, the fine represents approximately 1.854 percent of Uber’s global annual turnover, which reached approximately €44.5 billion in 2025 [1]. This penalty marks the second-largest GDPR fine in European history, surpassed only by the €1.2 billion fine levied against Meta by Irish regulators [2]. If the fine is upheld through the appeals process, the entire €825 million payment will flow directly into the Dutch national treasury, a sum equivalent to roughly €45 for every resident of the Netherlands [2].
Cross-Border Collaboration and Previous Penalties
The regulatory action originated from a complaint filed by 171 French drivers through the human rights organization Ligue des droits de l’Homme to the French data protection authority, the CNIL [1]. Because Uber’s European headquarters are based in Amsterdam, the case was forwarded to the Dutch AP under the GDPR’s “one-stop-shop” mechanism, leading to a coordinated investigation with European regulators [1][2]. This is the fourth time the Dutch regulator has penalized Uber, following a €600,000 fine in 2018, a €10 million fine in 2023, and a €290 million fine in 2024, the latter two of which the company is still actively contesting in court [1].
The Appeal and Future Guardrails
Uber has strongly rejected the AP’s decision, announcing that it will formally appeal the penalty [2][3][5]. A spokesperson for the company stated that they fundamentally disagree with the ruling, calling the fine amount highly disproportionate [2][3]. Furthermore, Uber clarified that the investigation targeted historical policies from 2018 to 2022 that have since been discontinued [1][3]. Today, Uber asserts that any decision capable of impacting a driver’s ability to earn an income is reviewed by human staff, with robust safeguards and clear objection procedures established to allow drivers to appeal automated flags [2][3]. This landmark ruling serves as a vital precedent for AI developers and platform operators, underscoring that human-in-the-loop oversight is a legal necessity when deploying automated systems in Europe [1][GPT].