- The Dutch Data Protection Authority fined Uber nearly 825 million euros, one of the largest penalties ever issued under Europe's privacy law.
- Regulators found Uber blocked drivers' accounts through automated systems without the human review that GDPR Article 22 requires for decisions that carry significant consequences.
- The ruling arrives as companies rush to hand autonomous AI agents authority over consequential decisions, putting a near billion euro price on removing the human from the loop.
The Dutch regulator ties an 825 million euro fine to automated deactivations
Uber suspended drivers from its platform using automated systems that flagged them for suspected fraud, based on signals such as unnecessary detours and incomplete trips, then blocked their accounts without adequate human review or clear notification. The Autoriteit Persoonsgegevens, the Netherlands data protection authority, ruled that this cut drivers off from their income and therefore qualified as a decision with significant consequences, one that European law does not allow software to make alone. The penalty, nearly 825 million euros or roughly 966 million dollars, ranks among the heaviest ever levied under the General Data Protection Regulation.
Uber has violated drivers' rights, specifically the right not to be subject to automated decision-making that has significant consequences, and the right to be informed.Autoriteit Persoonsgegevens, the Dutch Data Protection Authority
The violations span roughly 2020 to 2022. The regulator did not publish a total number of affected drivers, though Uber has said low ratings alone led to 126 permanent deactivations across Europe in 2021. Uber said it strongly disagrees, called the fine disproportionate, and plans to appeal, adding that it no longer automates permanent deactivations and now builds in human review and a route for drivers to contest a block.
| ~825M euros | fine, about 966 million dollars, among the largest ever issued under the GDPR |
| Article 22 | the GDPR rule on solely automated decisions with significant effects |
| 2020 to 2022 | the period the violations covered |
| Appeal | Uber's stated response, calling the fine disproportionate |
Why the agentic AI era makes this a warning, not a footnote
The fine reads like a ride-hailing dispute, but its logic points straight at the technology now moving into every enterprise. Article 22 says that when a purely automated system makes a decision with a serious effect on someone, a human has to be able to step in and the person has to be able to challenge it. That is precisely the guardrail companies are tempted to drop as they deploy AI agents to screen job applicants, approve or deny credit, moderate accounts, and flag fraud at machine speed. Europe has now attached a concrete number to skipping it.
Uber's defense, that it has since added human review, is itself the lesson. The cheapest moment to keep a person in the loop is before a regulator decides an algorithm took away someone's livelihood. As agents graduate from drafting text to taking actions, the Uber ruling sets the reference price for building systems that act on people without anyone accountable standing beside them.
The fine is not really about drivers. It is about who answers when an automated decision ends a person's income, and Europe has now put that answer at nearly a billion euros. Every company shipping agents that act without a human alongside them just saw the cost of getting it wrong.
Santage is committed to independent, transparent journalism. This article is produced in accordance with Santage's Editorial Standards and aims to provide accurate and timely information. Readers are encouraged to verify information independently.