Uber has been fined €290 million ($324 million) by the Dutch data protection authority (DPA) for unlawfully transferring European taxi drivers’ personal data to the US, violating EU data protection laws, Reuters reports.
The DPA found that Uber’s data transfer practices did not comply with the General Data Protection Regulation (GDPR). Uber has ceased this practice and plans to appeal the fine, arguing that its data transfer processes were compliant during a period of regulatory uncertainty between the EU and the US. The fine is suspended pending the outcome of the appeal process, which could take up to four years.
The investigation began after a French human rights group filed a complaint on behalf of over 170 taxi drivers, which was forwarded to the Dutch authorities. In January, Uber was also fined 10 million euros ($11 million) for privacy breaches concerning driver data.
