Uber Technologies Inc. has been hit with an €825 million ($966 million) fine by the Dutch data protection regulator over the use of automated systems to suspend and deactivate drivers, putting the growing use of algorithms to manage gig workers under renewed regulatory scrutiny.
The Dutch Data Protection Authority, known as the Autoriteit Persoonsgegevens or AP, said Uber violated the European Union’s General Data Protection Regulation by allowing automated systems to make decisions affecting drivers without adequate human intervention and by failing to properly inform them about the process.
The penalty is the second-largest fine issued under the GDPR, behind the €1.2 billion penalty imposed on Meta Platforms in 2023. The Dutch regulator said the violations occurred between 2018 and 2022.
The case goes beyond Uber. It puts a spotlight on a fundamental question facing technology companies as artificial intelligence and automated decision-making become embedded in digital businesses: How much power should companies give software to determine whether a person can earn a living?
When an Algorithm Becomes a Gatekeeper
Uber’s business depends heavily on software. Algorithms match passengers with drivers, calculate fares, detect suspected fraud and monitor activity across the platform.
That automation allows Uber to operate at enormous scale. But the Dutch regulator found that some of the company’s automated systems went further, making decisions that could directly affect drivers’ ability to work.
The investigation followed complaints from 171 drivers represented by the French human-rights organization Ligue des droits de l’Homme. Because Uber’s European headquarters are in Amsterdam, the Dutch authority handled the case under the EU’s regulatory framework for cross-border data protection enforcement.
According to the regulator, Uber’s systems were used to suspend drivers suspected of fraudulent behavior, including alleged unnecessary detours designed to increase fares or accepting rides without completing them. Drivers could also be permanently removed from the platform based on low customer ratings.
The AP said the problem was not simply that Uber used algorithms. It was that the company allowed automated processing to produce significant consequences without adequate human oversight and did not properly inform drivers about the automated decision-making involved.
That distinction is increasingly important as companies automate decisions that once required a manager, investigator or customer-service representative.
GDPR Puts Limits on Automated Decisions
The legal foundation for the case is Article 22 of the GDPR, which gives individuals protections against decisions based solely on automated processing when those decisions have legal or similarly significant effects.
For a ride-hailing driver, losing access to a platform can have an immediate economic impact. A driver who depends on Uber for income can go from receiving trips to receiving none, potentially without warning.
The Dutch regulator said Uber’s practices breached drivers’ rights because the automated decisions could have significant consequences and because drivers were not adequately informed about the process.
The case illustrates why algorithmic management is becoming a major regulatory issue.
A recommendation algorithm deciding which video a user sees is one thing. An algorithm deciding whether a worker can continue earning money is another.
Uber Disputes the Findings
Uber said it strongly disagrees with the decision and considers the fine disproportionate. The company plans to appeal.
The company argues that the Dutch regulator examined historical policies that were discontinued years ago and said its current systems include human reviews, safeguards and mechanisms through which drivers can challenge suspensions.
Uber has also disputed the regulator’s characterization of its permanent deactivations. The company said only 126 drivers in Europe were permanently deactivated because of customer ratings in 2021 and argued that permanent account closures were not carried out solely by automated systems.
The appeal could therefore become an important test of how European regulators and courts interpret the boundary between automated decision-making and meaningful human oversight.
The issue is not whether Uber can use algorithms. It is whether the company must ensure that a human being has a genuine opportunity to review a consequential decision before it takes effect.
A Bigger Fight Over Algorithmic Management
The Uber case arrives as European regulators are increasing their scrutiny of how technology companies use artificial intelligence, personal data and automated decision-making.
For years, algorithms have quietly become part of the management infrastructure of the gig economy.
Ride-hailing companies use software to determine which drivers receive requests. Delivery platforms monitor completion rates and cancellations. Marketplaces identify suspected fraud. Financial platforms use automated systems to assess customers and transactions.
The efficiency gains are substantial. A platform serving millions of users cannot manually review every transaction.
But automation creates a different problem when an algorithm makes a mistake.
A human manager can hear an explanation, reconsider evidence or recognize that an unusual event does not necessarily indicate fraud. An automated system may simply classify the behavior and trigger a predetermined response.
That is why regulators are increasingly focusing not only on whether algorithms are accurate, but also on whether people affected by those algorithms have transparency, recourse and access to meaningful human intervention.
The Africa Implications
The issue is particularly relevant to Africa, where ride-hailing and other platform businesses have become increasingly important parts of urban economies.
Uber operates across several African markets, while competitors and other digital platforms have built businesses around similar models. In cities such as Nairobi, Lagos, Johannesburg and Accra, drivers and delivery workers increasingly interact with platforms through algorithms that influence their access to customers and income.
The Dutch decision does not automatically impose European GDPR obligations on every African platform. But it provides a warning about the direction of regulation as African governments strengthen data-protection regimes and examine how technology companies use personal information.
For African startups, the lesson is not that algorithms should be avoided.
It is that algorithmic efficiency cannot come at the expense of accountability.
A platform that automatically blocks a driver, freezes an account, rejects a transaction or identifies a user as fraudulent needs to consider what happens when the system is wrong.
That becomes even more important as artificial intelligence makes automated decisions increasingly sophisticated and harder for ordinary users to understand.
The Cost of Getting Automation Wrong
The €825 million penalty is large enough to make algorithmic governance a boardroom issue.
European data-protection rules can impose fines of significant proportions of a company’s global turnover, meaning failures involving personal data and automated decision-making can become material financial risks rather than simply compliance issues.
The Dutch regulator’s action also marks the fourth significant penalty it has imposed on Uber. Its previous major enforcement action against the company included a €290 million fine in 2024 over the transfer of European drivers’ personal data to the United States without adequate protection.
Uber’s appeal means the final legal outcome could take time. But the regulatory message is already clear.
Companies can automate the management of millions of interactions, but they cannot necessarily automate responsibility.
As artificial intelligence moves deeper into hiring, lending, insurance, customer service, fraud detection and platform work, the question of who gets to challenge an algorithm’s decision will become increasingly important.
For Uber, that debate has produced a $966 million price tag.
For the broader technology industry, it could be the beginning of a much larger reckoning over who is accountable when software decides who gets to work.