The Dutch Data Protection Authority has decided to impose an €825 million administrative fine on Uber over automated decision-making involving driver accounts, according to reports published on August 21, 2026. Reuters, which reviewed a decision dated August 17, said the regulator found that the company used automated systems in some account deactivations without adequately informing drivers and breached rights protected by the European Union’s General Data Protection Regulation. Uber said it would appeal.
What practice is at the center of the decision?
The reported decision focuses on the role of automation in suspending or deactivating accounts in ways that could affect a driver’s ability to work. The Dutch authority said drivers’ rights were violated, including protections against being subject solely to automated decisions with legal or similarly significant effects and the right to receive sufficient information about such processes. Reuters, The Next Web and NL Times reported the €825 million figure.
Uber disputes the regulator’s assessment. The company said the examination concerned historical policies that were discontinued years ago and called the penalty disproportionate. It maintains that decisions affecting drivers’ ability to earn are treated seriously and that its systems include human reviews, safeguards and routes for drivers to challenge mistakes. Those statements show a direct disagreement between the regulator’s findings and the company’s description of its procedures.
Why did the Dutch authority handle the case?
Uber’s European headquarters are in Amsterdam, giving the Dutch authority a central role in the cross-border privacy investigation. Reports said the case also followed a complaint originating in France. The practices examined were described as affecting drivers in Europe between 2020 and 2022. The exact scope of the impact and how individual decisions were made may be revisited during the appeal.
The GDPR provides protections concerning decisions based solely on automated processing when they produce legal effects or similarly significant consequences. It does not prohibit every use of automation. Instead, the legal framework raises questions about information, lawful grounds, safeguards and, in relevant circumstances, access to human intervention. The Uber case turns those general principles into a dispute about account decisions that may affect a person’s access to platform work.
Is the penalty final?
Uber’s announced appeal means the decision may pass through further administrative or judicial review. The €825 million amount should therefore be described as the regulator’s reported decision as of August 21, not as an unchangeable final payment after all legal avenues have been exhausted. Enforcement, payment timing and any later adjustment will depend on the course of that challenge.
Reuters described the amount as one of the largest penalties announced under the GDPR. Rankings can change as other cases move through appeals or are revised, so the broader significance is not limited to the size of the fine. The decision treats automated account actions affecting platform workers as an issue of data rights and procedural safeguards, rather than only a technical matter.
What questions does the case raise for platforms?
The case highlights questions about what data automated systems use, how a decision is explained to the affected person, when a human reviewer becomes involved and whether an appeal mechanism can meaningfully change an outcome. Those issues extend beyond ride-hailing and may be relevant to other online services that use software to support account suspensions, access restrictions or work-allocation decisions.
Another important issue is how companies document the line between an automated recommendation and a human decision. Even if a person confirms a result, investigators may ask how influential the system was, what explanation the user received and how quickly an error could be corrected. Effective safeguards require more than displaying an appeal option; they must be understandable and practically accessible.
The regulator and Uber present different accounts of the company’s practices. Coverage should therefore keep the authority’s findings, Uber’s response and the future outcome of the appeal separate. The verified position at this stage is that the €825 million decision has been reported, Uber rejects the infringement findings and the scale of the fine, and the company plans to challenge it.
