Uber fined $324M for EU drivers’ data transfer violations.
Uber has been fined €290 million ($324 million) by the Netherlands’ privacy watchdog for violating the EU’s General Data Protection Regulation (GDPR). The fine relates to the unauthorized transfer of EU drivers’ personal data to the US, where Uber’s headquarters are located. The penalty, stemming from complaints by over 170 Uber drivers in France in 2021, is among the largest GDPR fines imposed on a tech company since the regulation took effect in 2018.
The Dutch regulator, Autoriteit Persoonsgegevens (AP), found that Uber failed to adequately protect the transferred data, a serious violation under GDPR. The breach involved sensitive driver information, including account details, payment info, and even criminal and medical data, which was transferred without proper safeguards for over two years.
Uber disputes the fine and plans to appeal, arguing that its data transfer practices were compliant during a period of legal uncertainty between the EU and US. The company claims it sought guidance from the AP but received no clear feedback. Despite its appeal, Uber has updated its practices to align with the latest EU-US data transfer framework introduced in July 2023.
Share News with us via WhatsApp: 08163658925 or Email: naijaeyes1@gmail.com
Join Our Social Media Channels:
WhatsApp: NaijaEyes
Facebook: NaijaEyes
Twitter: NaijaEyes
Instagram: NaijaEyes
TikTok: NaijaEyes
