Uber is appealing the Dutch privacy regulator’s €290 million fine over transfers of European drivers’ personal data to the United States. The Autoriteit Persoonsgegevens (AP) said the transfers lacked adequate safeguards; Uber disputed the decision. The latest AP update located, dated 21 August 2026, said the procedure was still ongoing, so no final court outcome is established here.
Why did the Dutch regulator fine Uber €290 million?
In August 2024, the AP said Uber had transferred European taxi drivers’ personal data to the United States without appropriately safeguarding it. The regulator treated this as an infringement of Article 44 of the General Data Protection Regulation (GDPR). It said the violation had ended by the time it announced the fine. The AP’s announcement describes its finding; the administrative decision sets out the penalty and calculation.
| # | Preview | Product | Price | |
|---|---|---|---|---|
| 1 |
|
Uber eGift Card | $200.00 | Buy on Amazon |
| 2 |
|
Uber eGift Card | $50.00 | Buy on Amazon |
| 3 |
|
Uber eGift Card | $100.00 | Buy on Amazon |
| 4 |
|
Uber Physical Gift Card | $50.00 | Buy on Amazon |
| 5 |
|
Uber eGift Card | $15.00 | Buy on Amazon |
The case followed complaints from more than 170 French Uber drivers, submitted through the Ligue des droits de l’Homme (LDH) to France’s data protection authority, CNIL. The Dutch AP handled the cross-border case because Uber’s European headquarters were in the Netherlands and said it coordinated with other European data protection authorities.
What information did Uber transfer?
The AP said the records included account details, taxi licences, location data, photographs, payment details and identity documents. Some records also contained criminal and medical data. The regulator’s account describes the categories of information at issue; it does not mean every driver’s records contained every category.
Quick wins for a faster PC:
Repair Windows errors before they cause bigger problemsFix Now →Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →#1 Best Overall
- 24/7 safe pickups
- Order from hundreds of local restaurants
- Low-cost and premium options
- Track delivery
- Redemption: Online
Why did the AP say the safeguards were inadequate?
In the AP’s account, Uber stopped using Standard Contractual Clauses (SCCs) for these transfers from August 2021. The regulator considered drivers’ data insufficiently protected after that point. The AP also noted that the Court of Justice of the European Union invalidated the EU–US Privacy Shield in 2020 and that Uber used its successor framework by the end of 2023. This is the regulator’s chronology and legal reasoning, not a general determination of how other companies’ transfers should be assessed.
The AP set the penalty for the Article 44 infringement at €290 million. In its decision, the regulator stated that Uber’s worldwide turnover in 2023 was €34.235 billion and calculated the applicable maximum fine as €1.369 billion using that turnover. These are the AP’s figures, not independent estimates.
Rank #2
- 24/7 safe pickups
- Order from hundreds of local restaurants
- Low-cost and premium options
- Track delivery
- Redemption: Online
What is Uber’s position, and has the appeal been decided?
Uber said it would appeal and disputed the AP’s decision. The disagreement is therefore unresolved in the latest status reported by the regulator: the AP’s notice of 21 August 2026 said procedures concerning both its 2023 €10 million fine against Uber and the 2024 €290 million fine were still ongoing. That notice does not establish that a court upheld, overturned or finalized the €290 million penalty. The AP’s 21 August 2026 update is the latest located regulator status for this case.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Is the €824.99 million Uber fine the same case?
No. The AP announced a separate €824.99 million fine in 2026 concerning alleged automated driver deactivations and inadequate information about profiling. It is not the €290 million data-transfer case. The European Data Protection Board’s notice dated 8 October 2026 said Uber had appealed that separate fine and that it had no final judicial decision at that point. The EDPB notice concerns that separate proceeding.
Recommended Free Tools
Quick Recap
Best Value
- 24/7 safe pickups
- Order from hundreds of local restaurants
- Low-cost and premium options
- Ratings ensure premium quality
- Track delivery
Rank #4
- 24/7 safe pickups
- Order from hundreds of local restaurants
- Low-cost and premium options
- Ratings ensure premium quality
- Track delivery
Rank #3
- This card is redeemable via the Uber app within the U.S. in cities where Uber is available.
- Redemption: Mobile App
- No returns and no refunds on gift cards.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
