The Dutch Data Protection Authority fined Uber €825 million (about $966 million) for deactivating driver accounts through automated systems without adequate human review or notification, the regulator confirmed on August 21, 2026, after initially announcing the fine on August 17 [1, 2, 3].
The investigation focused on Uber’s automated suspensions and deactivations of drivers’ accounts between 2018 and 2022, triggered mainly by complaints from around 170 French drivers [1, 2, 3]. Drivers flagged for suspected fraud — such as taking detours to inflate fares or accepting then abandoning trips — or who received low passenger ratings could be suspended or deactivated automatically [1, 2, 3].
Monique Verdier, deputy chair of the Dutch Data Protection Authority, said Uber "committed serious violations" by not providing human review. She said, "From one moment to the next they no longer had any income … A computer should not make decisions on its own that have (such) major consequences" [1, 3]. She emphasized decisions with major consequences "should first have been reviewed by a human" [3].
Uber responded that it "strongly disagrees with this decision and disproportionate fine" and said the company "takes drivers’ rights seriously" with policies that include "both human reviews and opportunities for drivers to dispute platform suspensions" [1].
The €825 million penalty is the second-largest ever under European GDPR rules, behind only a €1.2 billion fine imposed on Meta in 2023 [1]. The Dutch regulator handled the case because Uber’s European headquarters are in the Netherlands [1, 2, 3]. This is the fourth significant fine levied by Dutch authorities on Uber in recent years, following a €10 million fine in 2023 and a €290 million fine in 2024 related to data transfers [2].
The regulator’s actions come four days after the initial fine was issued on August 17 and represent an escalation in penalties targeting Uber’s data and account management practices [1]. Uber has said it will appeal the ruling.
