Dutch AP, with the CNIL, fines Uber 824,990,000 euro over fully automated driver deactivations
Dutch DPA took fine action against Uber B.V. and Uber Technologies, Inc. over Uber's automated fraud suspension and rating based deactivation systems for drivers, announced 24 August 2026. The amount is 824.99 million euro. Status: confirmed.
The record
Key facts
- Record ID
- AIT-2026-0005
- Status
- Confirmed
- Action type
- Fine
- Regime
- GDPR
- Authority
- Autoriteit Persoonsgegevens
- Jurisdiction
- Netherlands
- Target
- Uber B.V. and Uber Technologies, Inc., headquartered in Netherlands
- AI system
- Uber's automated fraud suspension and rating based deactivation systems for drivers
- Date announced
- Date of decision
- Amount
- 824.99 million euro
- Appeal
- pending. Uber can challenge the decision before the Dutch courts; no appeal had been announced by 14 September 2026.
- Last verified
In full
What happened, and why it matters
The largest AI adjacent penalty in Europe by a wide margin, and the second largest GDPR fine ever, behind only the 1.2 billion euro Meta transfer decision of 2023. The Dutch authority, lead under the one stop shop because Uber's European establishment is in Amsterdam, with the CNIL taking part after a 2020 collective complaint from the Ligue des droits de l'Homme on behalf of more than 170 French drivers, found that Uber's systems took fully automated decisions against drivers with no real human intervention: temporary suspensions on suspicion of fraud, and temporary or permanent deactivations when customer ratings fell below a threshold. Each decision cut off a driver's income at once. That is the conduct Article 22 of the GDPR forbids without safeguards, and it is also the conduct Annex III of the AI Act now lists as high risk: systems that make decisions affecting the terms of work relationships or their termination. The decision was taken under the GDPR alone, before any AI Act authority had jurisdiction over the system, which is the pattern every record on this tracker repeats: algorithmic management is being policed today by data protection authorities, at GDPR penalty scale, and the AI Act adds obligations on top rather than replacing that exposure. Uber had already been fined 10 million euro in 2023 for failing to inform drivers and 290 million euro in 2024 for transfers to the United States. Whether Uber appeals is not yet public.
At a glance
The four things to take away
- Fine of 824,990,000 euro on Uber B.V. and Uber Technologies, Inc., imposed by the Autoriteit Persoonsgegevens with the CNIL participating; the CNIL published its statement on 24 August 2026.
- Conduct: fully automated account suspensions on suspected fraud and deactivations on low customer ratings, with no human review before the sanction took effect.
- Origin: a collective complaint by the Ligue des droits de l'Homme, received by the CNIL in 2020 for more than 170 drivers and supplemented in 2021, referred to the Dutch lead authority.
- Provision: GDPR Article 22 (automated individual decision making).
- Uber's earlier fines: 10 million euro on 11 December 2023 for failure to inform, 290 million euro on 22 July 2024 for transfers to the United States.
- Second largest GDPR fine on record; no appeal announced as of 14 September 2026.
The law
Provisions this action rests on
- GDPR Article 22violated
- AI Act Article 6adjacent
Read the official text of Article 6 in the EU AI Act Explorer, consolidated with the Digital Omnibus applied.
How it moved
Timeline
Collective complaint by the Ligue des droits de l'Homme reaches the CNIL (supplemented in 2021)
Dutch AP fines Uber 10 million euro for failing to inform drivers
Dutch AP fines Uber 290 million euro over transfers to the United States
Dutch AP imposes the 824,990,000 euro fine over automated decisions
CNIL publishes its statement on the joint case
Verification
Sources
Primary sources are the authority's own decision or press release, the Official Journal, or a court judgment. A record with no source is not published.
- CNIL, Automated decisions: UBER fined nearly EUR 825 millionPrimary · 24 August 2026
- Autoriteit Persoonsgegevens, Uber fined nearly 825 million euros for automated driver blockingPrimary · 21 August 2026
Next
Related enforcement actions
- ConfirmedAI adjacentAIT-2024-0006
Garante fines Foodinho 5 million euro over the algorithms that manage its riders
24 October 2024 · Fine · GDPR · 5 million euro
Fine of 5 million euro, announced 22 November 2024.
- ConfirmedAI adjacentAIT-2024-0003
Dutch authority fines Clearview AI 30.5 million euro, the largest AI adjacent fine on record
16 May 2024 · Fine · GDPR · 30.5 million euro
Fine of 30.5 million euro, decision dated 16 May 2024, announced 3 September 2024.
Cite this record
Free to reuse under CC BY 4.0, with attribution. The record ID AIT-2026-0005 is permanent and is never reused.
- In a sentence
- According to the GAGE EU AI Act Enforcement Tracker (as of 14 September 2026), dutch ap, with the cnil, fines uber 824,990,000 euro over fully automated driver deactivations.
- APA
- GAGE (Global Academy of Generative-AI Education). (2026). Dutch AP, with the CNIL, fines Uber 824,990,000 euro over fully automated driver deactivations. EU AI Act Enforcement Tracker. Retrieved 14 September 2026, from https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2026-0005-ap-cnil-uber-automated-deactivations-fine
- MLA
- "Dutch AP, with the CNIL, fines Uber 824,990,000 euro over fully automated driver deactivations." EU AI Act Enforcement Tracker, GAGE (Global Academy of Generative-AI Education), 14 September 2026, https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2026-0005-ap-cnil-uber-automated-deactivations-fine.
- Chicago
- GAGE (Global Academy of Generative-AI Education). "Dutch AP, with the CNIL, fines Uber 824,990,000 euro over fully automated driver deactivations." EU AI Act Enforcement Tracker. Last modified 14 September 2026. https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2026-0005-ap-cnil-uber-automated-deactivations-fine.
- Permalink
- https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2026-0005-ap-cnil-uber-automated-deactivations-fine
Back to the full enforcement tracker, or see every action against gig work and algorithmic management and every action in Netherlands.
Last updated . Every record re verified . The tracker is checked every Monday, and the same day for any action under the AI Act.
GAGE briefings tell you which AI regulation deadlines are coming, what they actually require of you, and when a program opens.