The Dutch privacy regulator on Wednesday imposed a fine of ten million euros on the reservation platform Uber for lacking transparency in the processing of the data of its European drivers.
The Dutch Data Protection Authority (AP) said it imposed the fine after more than 170 French drivers raised the alarm with the League for Human and Citizen's Rights.
A complaint from the French interest group was forwarded to the Netherlands, as that is where Uber's European headquarters is located.
The Dutch Data Protection Authority (AP) found that the company was not clear
“on how long it kept the data of European drivers and to which countries outside Europe it was transmitted »
, she explained.
“Uber has also made it difficult for drivers to exercise their privacy rights
,” she added in a statement.
Appeal of the decision
Users have, for example, the right to consult the data, to have it corrected or deleted, recalled the Dutch regulator.
But Uber notably made it
“unnecessarily complicated”
for drivers to submit a request to view their data.
A digital form existed, but was very difficult to find on the app, and the information shared afterwards was
“difficult to interpret”
.
Additionally, the company did not clearly state in its privacy policy how long it retains driver data and what specific protection measures are taken when it is transferred to countries outside the Economic Area. European (EEA).
“Drivers have the right to know how Uber processes their personal data
,” said Aleid Wolfsen, president of the AP, quoted in the press release.
However,
“it was opaque
,” he continued.
Uber has now taken steps to improve the situation, and has appealed the decision, according to the AP.