Regulator announcement; this article does not establish payment or the outcome of any subsequent appeal.
What happened
CNIL reported in August 2026 that the Dutch authority had fined Uber entities €824,990,000 over automated decisions concerning drivers. The findings addressed account deactivations without human intervention, affecting drivers’ ability to earn. This is a distinct case from the earlier Uber penalties concerning transparency and international transfers.
Source: CNIL — original source ↗
What it means for your website
The lesson for businesses using automation is to identify what the software actually decides. Sorting a mailing list and automatically blocking someone from earning a living are very different activities. If a system makes consequential decisions, ask where a person can challenge the result and whether the reviewer can meaningfully change it. Do not describe a nominal approval click as a complete safeguard without checking how it works. The UK and EU rules are not identical, particularly following UK reforms, so seek advice for the relevant jurisdiction. GDPRFix’s public scan does not evaluate your decision-making algorithms.
Three useful next steps
- List automated decisions with significant effects on people.
- Check the real role of human review and appeals.
- Assess the applicable UK or EU requirements separately.
Sources & context
Official sources consulted on 1 October 2026. A regulator’s announcement records its findings at that time; it is not proof of payment or the outcome of every later appeal.
CNIL — original sourceOur practical suggestions are GDPRFix commentary. A public website scan cannot establish your full legal position. For advice on a specific obligation or enforcement matter, use a suitably qualified adviser.