Uber has been fined €290 million ($324 million) in the Netherlands for improperly sending driver data from Europe to the U.S. in violation of EU rules, the Dutch Data Protection Authority (DPA) said Monday.
Uber failed to “appropriately safeguard” its data on drivers, which the DPA said was a “serious violation” of Europe’s General Data Protection Regulation (GDPR).
The Dutch data watchdog said that Uber collected sensitive information from drivers, including taxi licenses, identity documents, and medical data, and retained it on servers in the United States for more than two years.
Uber transferred that data to Uber’s San Francisco headquarters without using the proper transfer tools, the agency said.
“In Europe, the GDPR protects the fundamental rights of people, by requiring businesses and governments to handle personal data with due care,” Dutch DPA chairman Aleid Wolfsen said in a statement.
Euopre has strict data protection laws, which include requirements that businesses transferring and storing data outside of Europe must take additional security measures. The fine is one of the largest levied against a tech company since the GDPR was implemented in 2018.
Uber has stopped the practice, the DPA said. The company can appeal the ruling, and the DPA said in its release that Uber has indeed indicated its intent to object to the fine. (Uber didn’t immediately respond to Fast Company‘s request for comment.)
The DPA started investigating Uber’s data transfers after more than 170 French drivers complained to a French human rights interest group, which submitted a complaint to the French GPA. Because Uber’s European headquarters are based in the Netherlands, the Dutch DPA had to lead the investigation.
“Uber did not meet the requirements of the GDPR to ensure the level of protection to the data with regard to transfers to the US,” Wolfsen said. “That is very serious.”
Login to add comment
Other posts in this group
On a typical day, you can’t turn on the news without hearing someone say that Congress is broken.
When news broke that the United Healthcare CEO was shot in broad daylight early last month, outrage erupted online. But it wasn’t aimed at the assassin. Instead, it was directed at the broken U.S.
Ashley Abramson first came across Sophie Cress in a cold pitch to her work email. Cress was asking to be an expert source for any stories Abramson was working on as a freelance reporter. “I’ve got
Threads, Meta’s X and Bluesky rival, is testing ads with certain brands in the United States and Japan, the company said Friday.
“We know there will be plenty of feedback abo
Sooner or later, the politicians who most admire Donald Trump begin to emulate him. They
