Uber is set to face a €825mn fine from the Dutch Data Protection Authority over its use of automated systems to deactivate driver accounts without proper notification, marking one of the largest penalties under GDPR.

The Dutch regulator found that Uber violated drivers' rights by subjecting them to automated decision-making with significant consequences and failing to fully inform them of such processes. This penalty follows a previous €290mn fine in 2021 for transferring European driver data to the US without adequate safeguards.

Uber has called the fine 'disproportionate' and plans to appeal, arguing that Dutch regulators examined 'historic policies that were discontinued years ago.' The company emphasized its commitment to fair treatment, including human reviews, robust safeguards, and appeal opportunities for drivers.

The investigation was handled by Dutch authorities due to Uber's European headquarters being located in Amsterdam. The fine ranks as the second-largest under GDPR, behind Meta's €1.2bn penalty in 2023. The Computer & Communications Industry Association Europe criticized the fine as 'truly colossal,' warning against using GDPR enforcement as punishment.