The Dutch data protection authority has imposed a hefty fine of 290 million euros ($324 million) on Uber, a ride-hailing service, for reportedly transferring personal information of European drivers to the United States without sufficient protection. Uber has criticized the decision, deeming it flawed and unjust, and has stated that they will challenge the ruling through an appeal.
The Dutch Data Protection Authority found that the data transfers, which occurred over a period of more than two years, constituted a significant violation of the European Union’s General Data Protection Regulation. This regulation mandates the implementation of both technical and organizational measures designed to safeguard user data.