Dutch DPA fines Uber $324M over transferring driver data to U.S.

Uber

The Dutch Data Protection Authority (DPA) fined Uber 290 million euros (U.S. $323.7 million) for illegally transferring data on European drivers to American servers and failing to appropriately safeguard the transfers.

Over a period of two years, Uber collected sensitive information on European drivers that included account details, taxi licenses, location data, photos, payment details, identity documents, and criminal and medical data of drivers, the Dutch DPA said Monday in a press release.

The investigation began with a complaint filed with the French DPA that accused Uber of transferring data to the U.S. of 170 drivers in France. The Dutch and French DPAs closely collaborated in issuing the fine as part of the one-stop shop mechanism of the European Union’s General Data Protection Regulation (GDPR).

lock iconTHIS IS MEMBERS-ONLY CONTENT. To continue reading, choose one of the options below.