Uber Fined €290 Million by Dutch for Driver Data Breach

Uber Fined €290 Million by Dutch for Driver Data Breach

The Dutch Data Protection Authority (DPA) has fined Uber €290 million ($324 million) for transferring the personal data of European drivers to U.S. servers without adequate protection, violating the European Union's General Data Protection Regulation (GDPR). The DPA's investigation found that Uber failed to secure driver information, including taxi licenses, location data, photos, payment details, and criminal and medical records over a two-year period without using proper transfer tools.

Uber has stated that it plans to appeal the decision, arguing that the data transfer process was compliant during a period of regulatory uncertainty between the EU and the U.S. This fine marks the third instance of the DPA penalizing Uber, following fines of €600,000 in 2018 and €10 million last year. The French national data protection regulator CNIL also confirmed its cooperation with the DPA in this investigation.

Summary

Other news in business