Uber Fined €290 Million for GDPR Violation
The Dutch Data Protection Authority (DPA) has imposed a substantial fine on ride-hailing giant Uber for transferring the personal data of European taxi drivers to the US without adequate protection. This violation of the EU General Data Protection Regulation (GDPR) has resulted in a fine of €290 million, which is 4% of the company’s global annual turnover.
Lack of Protection for Personal Data
Aleid Wolfsen, president of the Dutch DPA, emphasized that while the GDPR ensures robust protection of personal data within Europe, such guarantees are not always guaranteed outside the EU. Wolfsen highlighted the risks of governments accessing data on a large scale and the need for companies to take additional measures when storing personal data of European citizens outside the European Union.
Uber failed to comply with the GDPR requirements, leading to the transfer of sensitive information to the US, including account details, taxi licenses, location data, photographs, payment details, identity documents, and criminal and medical records.
Investigation and Collaboration
The Dutch DPA launched an investigation into Uber in 2021 after receiving complaints from over 170 French drivers. The French human rights organization Ligue des droits de l’Homme (LDH) filed a complaint with the French data protection authority, which was then passed on to the Dutch DPA. The two authorities collaborated to investigate the complaints and make a decision.
The Largest Fine Imposed on Uber
Although the fine is below the maximum 4% of Uber’s annual revenue, it is the largest fine the company has received to date. Uber’s annual revenue in 2023 was approximately €34.5 billion. The company has previously received fines of €600,000 in 2018 and €10 million in 2023.
Uber has expressed its opposition to the fine and announced its intention to appeal. A spokesperson for the company stated that the decision is wrong and the fines are “unjustified,” arguing that Uber had complied with European Union data regulations.