麻豆传媒

Skip to main content

Dutch watchdog fines Uber $436 million for alleged inadequate protection of drivers' data

Share

The Dutch data protection watchdog slapped a 290 million euro (C$436 million) fine Monday on ride-hailing service Uber for allegedly transferring personal details of European drivers to the United States without adequate protection. Uber called the decision flawed and unjustified and said it would appeal.

The Dutch Data Protection Authority said the data transfers spanning more than two years amounted to a serious breach of the European Union鈥檚 General Data Protection Regulation, which requires technical and organizational measures aimed at protecting user data.

鈥淚n Europe, the GDPR protects the fundamental rights of people, by requiring businesses and governments to handle personal data with due care,鈥 Dutch DPA chairman Aleid Wolfsen said in a statement.

鈥淏ut sadly, this is not self-evident outside Europe. Think of governments that can tap data on a large scale. That is why businesses are usually obliged to take additional measures if they store personal data of Europeans outside the European Union. Uber did not meet the requirements of the GDPR to ensure the level of protection to the data with regard to transfers to the U.S. That is very serious.鈥

The case was initiated by complaints from 170 French Uber drivers, but the Dutch authority issued the fine because Uber鈥檚 European headquarters is in the Netherlands.

Uber insisted it did nothing wrong.

鈥淭his flawed decision and extraordinary fine are completely unjustified. Uber鈥檚 cross-border data transfer process was compliant with GDPR during a 3-year period of immense uncertainty between the EU and U.S. We will appeal and remain confident that common sense will prevail,鈥 the company said in a statement.

The alleged breach came after the EU鈥檚 top court ruled in 2020 that an agreement known as Privacy Shield that allowed thousands of companies 鈥 from tech giants to small financial firms 鈥 to transfer data to the United States was invalid because the American government could snoop on people鈥檚 data.

The Dutch data protection agency said that following the EU court ruling, standard clauses in contracts could provide a basis for transferring data outside the EU, 鈥渂ut only if an equivalent level of protection can be guaranteed in practice.鈥

鈥淏ecause Uber no longer used Standard Contractual Clauses from August 2021, the data of drivers from the EU were insufficiently protected,鈥 the watchdog said. It added that Uber has been using the successor to Privacy Shield since the end of last year, ending the alleged breach.

The Computer & Communications Industry Association, an advocacy organization for tech companies, said the fine ignored the realities of online business in the aftermath of the 2020 EU court ruling.

鈥淭he busiest internet route in the world could not simply be put on hold for three entire years while governments worked to establish a new legal framework for these data flows,鈥 the association's European head of policy, Alexandre Roure, said in a statement.

鈥淎ny retroactive fines by data protection authorities are especially worrisome given that these very privacy watchdogs failed to provide helpful guidance during this period of significant legal uncertainty, in absence of any clear legal framework,鈥 he added.

Monday's announcement is not the first time the Dutch data protection watchdog has fined Uber. In January, the agency fined it 10 million euros over what it said was the company's failure to disclose how long it retained data from drivers in Europe or to name non-EU countries it shared the data with. 

CTVNews.ca Top Stories

The jury at the trial of a second-degree murder suspect in Sudbury on Wednesday heard graphic details of the crime scene discovered in a Kathleen Street apartment on Boxing Day 2020.

BREAKING

BREAKING

Toronto police say an officer has been shot while conducting an investigation midtown.

A census of endangered southern resident killer whales off the coast of British Columbia and Washington state shows the pods have lost three animals, bringing the population to 73, excluding a new calf born after the survey.

Local Spotlight

The last living member of the legendary Vancouver Asahi baseball team, Kaye Kaminishi, died on Saturday, Sept. 28, surrounded by family. He was 102 years old.

On Saturday night at her parents鈥 home in Delaware, Ont. the Olympic bronze medallist in pole vault welcomed everyone who played a role in getting her to the podium in Paris.

A tale about a taxicab hauling gold and sinking through the ice on Larder Lake, Ont., in December 1937 has captivated a man from that town for decades.

When a group of B.C. filmmakers set out on a small fishing boat near Powell River last week, they hoped to capture some video for a documentary on humpback whales. What happened next blew their minds.

A pizza chain in Edmonton claims to have the world's largest deliverable pizza.

Sarah McLachlan is returning to her hometown of Halifax in November.

Wayne MacKay is still playing basketball twice at Mount Allison University at 87 years old.

A man from a small rural Alberta town is making music that makes people laugh.

An Indigenous artist has a buyer-beware warning ahead of Sept. 30, the National Day for Truth and Reconciliation.

Stay Connected