AP (The Netherlands) - Uber B.V & Uber Technologies Inc.
The DPA fined Uber €824.99 million for automatically deactivating drivers’ accounts without human intervention, in violation of Article 22 GDPR, and for insufficient transparency.
Full text
Machine translation of the decision, via GDPRhub — not the official text.
The DPA fined Uber €824.99 million for automatically deactivating drivers’ accounts without human intervention, in violation of Article 22 GDPR, and for insufficient transparency. English Summary. Facts. Uber B.V. and Uber Technologies Inc., the controllers, used software between 2018 and 2022 to monitor drivers’ behaviour and customer ratings. Where the system detected suspected fraud or low customer ratings, drivers’ accounts could be automatically temporarily or permanently deactivated without human assessment. During the deactivation, affected drivers could no longer generate income through Uber. The proceedings followed complaints by 171 French drivers represented by the Ligue des droits de l’Homme. Since the controllers’ main European establishment was in the Netherlands, the Dutch DPA investigated the matter as lead supervisory authority in cooperation with the French DPA and other concerned authorities. Holding. The DPA held that the controllers violated Article 22 GDPR by subj