Dutch Authorities Fine Uber €290 Million for Data Transfer Breach

The Dutch data protection authority fined Uber €290 million for transferring European drivers' personal data to the U.S. without adequate protection. Uber, disputing the decision, plans to appeal. The case highlights the importance of adhering to GDPR regulations safeguarding personal data transfers outside Europe.

The Dutch data protection watchdog has imposed a €290 million ($324 million) fine on ride-hailing giant Uber. The penalty stems from allegations that Uber transferred personal details of its European drivers to the United States without adequate protection—violating GDPR regulations.

According to the Dutch Data Protection Authority (DPA), the data transfers, occurring over more than two years, represent a serious breach of the EU's General Data Protection Regulation (GDPR). GDPR mandates stringent measures to safeguard user data.

Despite the fine, Uber maintains its innocence. In a statement, the company described the decision as flawed and unjustified, vowing to appeal. The case originated from complaints by 170 French drivers but was adjudicated by Dutch authorities due to Uber's European headquarters in the Netherlands.

(With inputs from agencies.)