Back to Explorer
GDPRTechnologyHigh Severity

Uber Technologies

€290,000,000

Authority

AP

Country

Netherlands

Date Issued

August 26, 2024

Industry

Technology

Summary

The Dutch DPA fined Uber €290 million for unlawfully transferring personal data of European drivers to the United States for over two years without adequate legal safeguards following the invalidation of the Privacy Shield framework. The company failed to implement compliant transfer mechanisms when moving sensitive driver information across borders.

Violation Types

Cross-Border TransferSecurityLegal Basis

Articles Violated

Art. 44 GDPR

Avoid enforcement risk with automated compliance

IQWorks helps organizations automate GDPR compliance before regulators come knocking.

Talk to an Expert