Skip to main content
ConfirmedAI adjacent

Dutch AP, with the CNIL, fines Uber 824,990,000 euro over fully automated driver deactivations

Dutch DPA took fine action against Uber B.V. and Uber Technologies, Inc. over Uber's automated fraud suspension and rating based deactivation systems for drivers, announced 24 August 2026. The amount is 824.99 million euro. Status: confirmed.

The record

Key facts

Record ID
AIT-2026-0005
Status
Confirmed
Action type
Fine
Regime
GDPR
Jurisdiction
Netherlands
Target
Uber B.V. and Uber Technologies, Inc., headquartered in Netherlands
AI system
Uber's automated fraud suspension and rating based deactivation systems for drivers
Date announced
Date of decision
Amount
824.99 million euro
Appeal
pending. Uber can challenge the decision before the Dutch courts; no appeal had been announced by 14 September 2026.
Last verified

In full

What happened, and why it matters

The largest AI adjacent penalty in Europe by a wide margin, and the second largest GDPR fine ever, behind only the 1.2 billion euro Meta transfer decision of 2023. The Dutch authority, lead under the one stop shop because Uber's European establishment is in Amsterdam, with the CNIL taking part after a 2020 collective complaint from the Ligue des droits de l'Homme on behalf of more than 170 French drivers, found that Uber's systems took fully automated decisions against drivers with no real human intervention: temporary suspensions on suspicion of fraud, and temporary or permanent deactivations when customer ratings fell below a threshold. Each decision cut off a driver's income at once. That is the conduct Article 22 of the GDPR forbids without safeguards, and it is also the conduct Annex III of the AI Act now lists as high risk: systems that make decisions affecting the terms of work relationships or their termination. The decision was taken under the GDPR alone, before any AI Act authority had jurisdiction over the system, which is the pattern every record on this tracker repeats: algorithmic management is being policed today by data protection authorities, at GDPR penalty scale, and the AI Act adds obligations on top rather than replacing that exposure. Uber had already been fined 10 million euro in 2023 for failing to inform drivers and 290 million euro in 2024 for transfers to the United States. Whether Uber appeals is not yet public.

At a glance

The four things to take away

  • Fine of 824,990,000 euro on Uber B.V. and Uber Technologies, Inc., imposed by the Autoriteit Persoonsgegevens with the CNIL participating; the CNIL published its statement on 24 August 2026.
  • Conduct: fully automated account suspensions on suspected fraud and deactivations on low customer ratings, with no human review before the sanction took effect.
  • Origin: a collective complaint by the Ligue des droits de l'Homme, received by the CNIL in 2020 for more than 170 drivers and supplemented in 2021, referred to the Dutch lead authority.
  • Provision: GDPR Article 22 (automated individual decision making).
  • Uber's earlier fines: 10 million euro on 11 December 2023 for failure to inform, 290 million euro on 22 July 2024 for transfers to the United States.
  • Second largest GDPR fine on record; no appeal announced as of 14 September 2026.

The law

Provisions this action rests on

Read the official text of Article 6 in the EU AI Act Explorer, consolidated with the Digital Omnibus applied.

How it moved

Timeline

  1. Collective complaint by the Ligue des droits de l'Homme reaches the CNIL (supplemented in 2021)

  2. Dutch AP fines Uber 10 million euro for failing to inform drivers

  3. Dutch AP fines Uber 290 million euro over transfers to the United States

  4. Dutch AP imposes the 824,990,000 euro fine over automated decisions

  5. CNIL publishes its statement on the joint case

Verification

Sources

Primary sources are the authority's own decision or press release, the Official Journal, or a court judgment. A record with no source is not published.

  1. CNIL, Automated decisions: UBER fined nearly EUR 825 millionPrimary · 24 August 2026
  2. Autoriteit Persoonsgegevens, Uber fined nearly 825 million euros for automated driver blockingPrimary · 21 August 2026

Next

Cite this record

Free to reuse under CC BY 4.0, with attribution. The record ID AIT-2026-0005 is permanent and is never reused.

In a sentence
According to the GAGE EU AI Act Enforcement Tracker (as of 14 September 2026), dutch ap, with the cnil, fines uber 824,990,000 euro over fully automated driver deactivations.
APA
GAGE (Global Academy of Generative-AI Education). (2026). Dutch AP, with the CNIL, fines Uber 824,990,000 euro over fully automated driver deactivations. EU AI Act Enforcement Tracker. Retrieved 14 September 2026, from https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2026-0005-ap-cnil-uber-automated-deactivations-fine
MLA
"Dutch AP, with the CNIL, fines Uber 824,990,000 euro over fully automated driver deactivations." EU AI Act Enforcement Tracker, GAGE (Global Academy of Generative-AI Education), 14 September 2026, https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2026-0005-ap-cnil-uber-automated-deactivations-fine.
Chicago
GAGE (Global Academy of Generative-AI Education). "Dutch AP, with the CNIL, fines Uber 824,990,000 euro over fully automated driver deactivations." EU AI Act Enforcement Tracker. Last modified 14 September 2026. https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2026-0005-ap-cnil-uber-automated-deactivations-fine.
Permalink
https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2026-0005-ap-cnil-uber-automated-deactivations-fine

Back to the full enforcement tracker, or see every action against gig work and algorithmic management and every action in Netherlands.

Last updated . Every record re verified . The tracker is checked every Monday, and the same day for any action under the AI Act.

GAGE briefings tell you which AI regulation deadlines are coming, what they actually require of you, and when a program opens.