Algorithms don't care if you can pay your rent. They just execute code.
That cold reality just cost Uber an astonishing €825 million, which translates to roughly $966 million. The Dutch Data Protection Authority, known as the AP, laid down the historic penalty after investigating how the ride-hailing giant handled driver account suspensions. It stands now as the second-largest fine ever issued under Europe's General Data Protection Regulation, trailing only Meta's €1.2 billion hit.
If you think this is just standard corporate red tape, look closer. This decision strikes at the heart of how tech platforms use invisible automation to police human workers.
The Core Violation
Between 2018 and 2022, European drivers faced sudden account deactivations managed entirely by software. If an algorithm suspected fraud, detected unusual detours, or flagged low customer ratings, the system could lock a driver out of the app instantly. Often, these suspensions happened without human oversight and without giving drivers clear explanations.
The EU's GDPR has a very strict rule about this. Under Article 22, citizens have the right not to be subjected to decisions based solely on automated processing that produce legal effects or similarly significant impacts. Cutting off someone's primary source of income via a script qualifies as a massive impact.
The Dutch watchdog agreed. They determined that Uber violated these privacy rights and failed to properly inform workers about how automated decision-making controlled their livelihoods.
Why the Netherlands Calls the Shots
You might wonder why a Dutch regulator cares about a dispute that originated largely from complaints filed by French drivers.
Uber bases its European headquarters in Amsterdam. Under European privacy law, the data protection authority in the country of a company's main establishment acts as the lead supervisory authority. When French unions and drivers raised hell about arbitrary lockouts, the case landed squarely on the desk of Dutch regulators.
This isn't even Uber's first rodeo with the AP. Last year, the authority slapped Uber with a €290 million fine for transferring European driver data back to servers in the United States without adequate protection. Before that, smaller penalties hit the ledger for various privacy compliance failures. But this latest figure scales up exponentially because the regulator calculated the penalty based on a percentage of Uber's massive global turnover.
Uber Claps Back
Uber is fighting back hard. Representatives immediately announced plans to appeal the decision, calling the penalty entirely disproportionate.
The company defends its historical actions by arguing that the AP examined outdated policies that have long since been revised. According to Uber, permanent deactivations never happened through automation alone without human review, and current operations include robust appeal mechanisms for drivers. They also point out that the actual number of permanent account closures due to things like low ratings was relatively small—such as 126 cases across Europe in a given year.
They claim the punishment doesn't fit the scale of the infraction. Regulators disagree, viewing algorithmic livelihood termination as an existential threat to worker rights.
What This Means Moving Forward
Platform capitalism relies on automation to scale efficiently. Reviewing millions of drivers manually costs time and money. Yet, this ruling signals a definitive shift across Europe. Regulators are drawing a hard line against algorithmic management.
If you run a platform relying on automated bans, content moderation, or user lockouts, you can no longer hide behind a black-box algorithm. Human accountability is mandatory. Transparency isn't optional.
Drivers deserve to know why they are being fired by an app, and they deserve a real person looking at their case before their income vanishes into thin air. Fix your appeal workflows, or prepare to fund the state budget.
