Image Credit, Erik Mclean
Dutch regulators have fined Uber €290 million for violating data protection laws, marking another major penalty for the company. Uber had previously been fined over €600 million and an additional €10 million for similar breaches. This latest fine stems from Uber’s illegal practice of storing European user data, including personal identification and financial information, on U.S. servers, in direct violation of the European Union’s (EU) General Data Protection Regulation (GDPR).
Under GDPR, companies must store and process data within the EU or in countries that meet its strict data protection standards. Uber’s decision to store data on U.S. servers exposed European users to potential risks, as U.S. privacy protections are deemed inadequate under EU law. This is not the first time Uber has been penalized for data mishandling. In 2018, the company faced a €600 million fine after a major breach compromised the data of 57 million passengers and drivers worldwide.
The Dutch fine highlights the ongoing efforts by European regulators to enforce GDPR compliance and hold companies accountable for how they handle user data. Uber was also criticized for failing to be transparent with users about where their data was stored and how it was being processed, another key requirement under GDPR.
Uber has defended its use of U.S. servers by citing its global infrastructure, but critics argue that this prioritizes convenience over user privacy. The company’s repeated violations raise concerns about its commitment to data security, and this latest fine underscores the need for Uber to overhaul its practices to comply with European regulations.
As regulatory pressure intensifies, Uber’s ongoing struggles with data privacy could serve as a warning for other tech companies operating in regions with strict privacy laws. Its ability to align with GDPR will be critical to maintaining its presence in Europe, where user privacy remains a top concern.
About The Author
