VTechFusion Team
VTechFusion Technologies
The Dutch data protection authority, Autoriteit Persoonsgegevens (AP), fined Uber €824.99 million on August 21, 2026 — the second-largest GDPR fine ever issued, trailing only Meta's €1.2 billion penalty from 2023.
What Uber Was Fined For
The case concerns fully automated individual decisions made against platform drivers — specifically, account deactivations triggered by fraud suspicions or low ratings between 2018 and 2022, applied without adequate human review. The AP found Uber breached GDPR's prohibition on fully automated decision-making and separately found that Uber did not sufficiently inform drivers that these decisions were being made through automation.
How This Ranks Among GDPR Fines
- €824.99 million — second-highest GDPR fine ever issued, behind Meta Ireland's €1.2 billion
- Cumulative GDPR fines across jurisdictions have exceeded €7.1 billion as of early 2026
- This is a separate case from an earlier €290 million fine the same Dutch regulator imposed on Uber over international data transfer violations
Uber's Response
Uber has rejected the allegations, with a company spokesperson describing both the decision and the size of the fine as disproportionate. Uber has said it plans to appeal the decision.
What This Means for Organizations Using Automated Decision Systems
This fine is a significant, concrete enforcement data point specifically on GDPR's prohibition on fully automated decisions that significantly affect individuals without adequate human review — directly relevant to any organization using algorithmic or AI-driven systems to make consequential decisions about employees, contractors, customers or platform participants (account suspensions, credit decisions, hiring screens, and similar use cases). Organizations operating in or serving EU markets with automated decision-making systems should treat this case as a prompt to specifically verify that meaningful human review is genuinely built into any consequential automated decision process, not merely documented as a formal option.
Frequently Asked Questions
Why was Uber fined €825 million?
The Dutch data protection authority found Uber breached GDPR's prohibition on fully automated individual decision-making by deactivating driver accounts between 2018 and 2022 based on fraud suspicions or low ratings without adequate human review, and separately failed to sufficiently inform drivers about the automated process.
How does this fine compare to other GDPR penalties?
At €824.99 million, it is the second-highest GDPR fine ever issued, behind only Meta Ireland's €1.2 billion penalty from 2023.
Is Uber appealing the fine?
Yes. Uber has called both the decision and the fine amount disproportionate and has said it plans to appeal.
Media & Press Enquiries
For editorial enquiries, expert commentary, or case study access.
Ready to Build Something Great?
Let's turn your idea into a product. Book a free 30-minute discovery call with our team — no commitment, just clarity.