A New Sanction Against Uber Based On Automated Decision-Making

In 2020, the Human Rights League filed a class-action complaint with the CNIL on behalf of 170 Uber drivers. The company comprises UBER B.V., headquartered in Amsterdam, and UBER TECHNOLOGIES INC., based in San Francisco, U.S. Under the one-stop-shop mechanism, the Dutch Data Protection Authority (AP) handled the complaint in close cooperation with the CNIL.

As part of this proceeding, the AP has already imposed two penalties on Uber :

• The first was a fine of 10 million euros for failing to provide drivers with information and to ensure they could exercise their rights, imposed on December 11, 2023¹;
• The second, dated July 22, 2024, is a fine of 290 million euros for transferring personal data outside the European Union—in this case, to U.S. servers—without sufficient data protection safeguards².