Uber receives multi-million fine for transmitting driver data

The Dutch Data Protection Authority has imposed a 290 million euro fine on Uber because the US ride-hailing service provider allegedly inadequately protected data from European drivers during transmission to its headquarters.

Violation now rectified

According to the data protection authority in The Hague, the data stored on servers in the USA included identification documents and payment details, but sometimes also criminal and medical data of the drivers. Uber has since rectified the violation, which lasted around two years. The ride-hailing company announced it would appeal the fine.

“This incorrect decision and the extraordinary fine are completely unjustified,” said an Uber spokesperson. Uber's cross-border data transfer was compliant with data protection regulations during a three-year period of great uncertainty between the EU and the USA. “We will appeal and are confident that common sense will prevail.”

Investigation against Uber

The data protection authority launched an investigation against Uber after a complaint from more than 170 French drivers. This complaint initially landed with the French data protection authority. However, since Uber's European headquarters is located in the Netherlands, the data protection authority there handled the case.