The 825 million euro lesson: an automated suspension that stops earnings needs a human and an appeal
The Dutch regulator's fine against Uber turns the rules on automated decisions into a build order: meaningful review before the action lands, and a contest route the driver can actually find.
The Product Desk
What happened
- The Dutch data protection authority fined Uber 825 million euros for closing driver accounts with automated systems without properly informing the drivers.
- It is the second-largest penalty ever issued under GDPR.
- The case covers incidents in Europe between 2020 and 2022 and started with a complaint from drivers in France suspended on suspicion of fraud.
- Uber says it strongly disagrees, calls the fine disproportionate, and will appeal.
Why it matters
- What it limits constraint The obligation attaches per affected person, so a small headcount of harmed drivers does not shrink the review each of them was owed, and volume arguments will not defend a design.
- Who has to decide decision Teams now have to classify, before shipping, which automated actions can stop someone earning, because those are the ones that need a reviewer with authority and a visible appeal in the flow...
- What doesn't add up contradiction The regulator says software sometimes removed low-rated drivers permanently and Uber says it never automated a permanent ban; which version survives decides whether this is a notice failure or an...
- What it sets up precedent Since long appeals often cut headline fines, the durable output of this case is the reading of what counts as a significant effect, and that reading applies to any suspension queue built on the...
Next story · Invest · Oct 2
KKR-owned Hans Anders pulls Meta's camera glasses in the two countries where it sold themConfirmed4 publishers
The rule the AP applied does not ask how good the model is. It asks what the output does to the person on the other end. GDPR bars decisions taken by algorithm alone where they significantly affect someone, and requires both meaningful human involvement and a route for the person to challenge the outcome [3]. For a driver, losing account access means losing the ability to work, which is why the regulator treated a suspension as something other than a change of account status [4]. The AP found Uber breached that right, and separately breached the right to be informed [7][8].
None of that turns on model quality. The flags described in the reporting are ordinary anti-fraud heuristics: journeys that looked like padded detours to inflate fares, and accepted trips the systems judged the driver never meant to complete [11]. The defect sits in what the system was allowed to do with a flag on its own, and in how little the driver was told when it acted.
Uber's own proportionality argument shows where that bites. The company said low customer ratings cost 126 drivers their accounts across Europe in 2021 [12], while the AP has published no total for how many drivers the automated suspensions touched [13]. Take Uber's figure at face value and the penalty works out to roughly 6.5 million euros per driver [17]. As compensation that is nonsense. As a signal it is precise: the duty runs per affected person, so a queue that can end 126 livelihoods carries the same review requirement as one that can end 126,000.
The duration defence runs into the same wall. Uber said the suspensions were usually brief and that it did not permanently deactivate accounts without human review [18]. Brief and unpaid is still unpaid, and the statutory test is the effect on the person, not the length of the outage [3]. Uber now says its policies include human review and a way for drivers to contest a suspension, and that it no longer permanently deactivates accounts through automation alone [9]. That is roughly the design the regulator wanted, arriving after the conduct window that closed in 2022 [20].
Then the price. The AP has now penalised Uber four times, at 600,000 euros in 2018, 10 million in early 2024, and 290 million for transfers of driver data to the United States [21]. This decision is close to three times that record and grew out of the same French complaints [10]; set against 2018, it is about 1,375 times larger [15]. The only bigger GDPR fine, Ireland's 1.2 billion euros against Meta, also came from a regulator in a small member state that hosts an American company's European headquarters [14], which is the same mechanism that put a complaint from French drivers in front of a Dutch authority [6].
What to watch
- Whether Uber's appeal turns on the AP's finding that software permanently removed low-rated drivers, since the record on that point drives how much of the 825 million euros survives.
- Whether the AP ever publishes a total count of drivers hit by automated suspensions, which would test the proportionality case Uber is building on its figure of 126.
- Whether other lead authorities apply the same significant-effect reading to account bans and payout freezes on other platforms.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence68
- Adoption
- Not scored
- Hype gap+15
- Incentives55
- Confidence65
Perspective Coverage
3 publishers- Builder
- Builder 28%
- Operator
- Operator 45%
- Investor
- Investor 27%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
The Dutch data protection authority (AP) decided to fine Uber 825 million euros, about 966 million dollars, for shutting down driver accounts by automated systems without telling the drivers properly.
- [2]
Uber said it will appeal; a spokesperson said "We strongly disagree with this decision and disproportionate fine."
- [3]
GDPR bars decisions taken by algorithm alone where they significantly affect someone; those decisions require meaningful human involvement and a route for the person to challenge them.
- [4]
For a driver, losing account access means losing the ability to work; that is the significant effect the rule is written around, and it is why the regulator treated a suspension as more than an account status change.
- [5]
The penalty is the second-largest ever issued under the General Data Protection Regulation.
- [6]
The Dutch regulator took the case because Uber's European headquarters are in Amsterdam, which makes the AP the lead authority for Uber across the EU.
- [7]
The decision said: "The AP has determined that Uber violated drivers' rights, specifically the right not to be subject to automated decision-making that has significant consequences."
- [8]
The decision added that "Uber has also violated the right to be informed".
- [9]
Uber said its current policies include human review and a way for drivers to contest suspensions, and told DutchNews that it no longer permanently deactivates accounts through automated systems alone.
- [10]
The 290 million euro case grew out of the same French complaints as this one, and the new decision is close to three times its size.
- [11]
Uber temporarily suspended accounts of drivers its systems flagged for suspected fraud; the systems concluded some drivers had taken unnecessary detours to inflate fares, and flagged others for accepting trips they did not intend to complete.
- [12]
Uber said low customer ratings cost 126 drivers their accounts across Europe in 2021, offered as support for its argument that the penalty is out of proportion.
- [13]
The AP has not published a figure for how many drivers the automated suspensions touched in total.
- [14]
Ireland's regulator fined Meta 1.2 billion euros in 2023 for unlawfully transferring European Facebook users' data to the United States, and both of the two largest GDPR penalties on record sit with regulators in small member states that host the European headquarters of large American companies.
- [15]
The 825 million euro fine is about 1,375 times the size of the AP's 600,000 euro fine against Uber in 2018.
- [16]
Reuters noted that appeals running for years often shrink or overturn headline fines against large technology companies.
- [17]
Measured against Uber's own count of 126 drivers who lost accounts to low ratings in Europe in 2021, the 825 million euro fine works out to roughly 6.5 million euros per driver.
- [18]
Uber said the suspensions were usually brief, and that it did not permanently deactivate accounts without human review.
- [19]
The AP said Uber's software sometimes removed drivers with low customer ratings permanently; Uber disputed that, saying it has never automated a permanent deactivation.
- [20]
The decision covers incidents in Europe between 2020 and 2022, and began with a complaint from drivers in France whom Uber had suspended on suspicion of fraud.
- [21]
This is the AP's fourth fine against Uber: 600,000 euros in 2018, 10 million euros in early 2024 over drivers' privacy rights, and 290 million euros over transfers of driver data to the United States, which had been its record and which Uber is also appealing.
Sources
3 independent publishers whose own reporting we read for this story.
- engadget.comUber hit with a nearly $1 billion fine for automatically deactivating drivers in Europe
1 article · August 22, 2026
- techcrunch.comUber faces fine of nearly $1B over automated driver suspensions
1 article · August 23, 2026
- thenextweb.comUber is fined 825 million euros over automated driver suspensions
1 article · August 21, 2026
Topics and entities
Topics
- GDPR Enforcement
- Gig Economy Labor
- Automated Decision-Making Rules
Entities
- Uber
- Autoriteit Persoonsgegevens
- John Gruber
- GDPR
- Meta
- Paul-Olivier Dehaye