Uber Fined €825 Million for Automated Driver Account Suspensions Without Due Process

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Uber was fined €825 million by the Dutch Data Protection Authority for using automated systems to suspend driver accounts in the Netherlands between 2020 and 2022 without sufficient human oversight or informing affected drivers, violating GDPR. The lack of transparency and due process in the AI-driven decisions led to significant legal and reputational consequences.[AI generated]

Why's our monitor labelling this an incident or hazard?

The automated system used by Uber to deactivate driver accounts is an AI system making significant decisions affecting individuals. The Dutch regulator found that Uber violated GDPR provisions protecting individuals from impactful automated decisions without human oversight or appeal mechanisms. This is a clear violation of rights (a breach of obligations under applicable law intended to protect fundamental rights). The harm has already occurred as drivers' accounts were deactivated without proper process, directly linked to the AI system's use. Hence, this is an AI Incident rather than a hazard or complementary information.[AI generated]
AI principles
Privacy & data governanceTransparency & explainability
Industries
Mobility and autonomous vehicles
Affected stakeholders
WorkersBusiness
Harm types
Economic/PropertyReputationalHuman or fundamental rights
Business function:
Monitoring and quality control
AI system task:
Event/anomaly detection

Articles about this incident or hazard