Uber Faces $324M Dutch Fine for Transfer of Driver Data to US

The Dutch privacy watchdog said it has fined Uber Technologies (UBER) 290 million euros ($324 million) for allegedly transferring the personal data of European taxi drivers to the U.S. without adequate safeguards.

The Dutch Data Protection Authority, or DPA, said the ride-hailing giant breached the European Union (EU)’s General Data Protection Regulation (GDPR) by sending “sensitive information of drivers from Europe and retained it on servers in the US.”

The fine reportedly is a record for Uber, which is appealing the second of two other penalties from the Dutch regulator.

French Uber Drivers Triggered Complaint

The fine stemmed from complaints from 170 French Uber drivers, but the Dutch regulator issued the fine because Uber’s European headquarters is in the Netherlands.

In a statement to Investopedia, Uber said it will appeal, calling the Dutch decision “flawed” and “completely unjustified.”

The Dutch DPA said among sensitive information Uber had collected and kept on its U.S. servers were “account details and taxi licences, but also location data, photos, payment details, identity documents, and in some cases even criminal and medical data of drivers.”

The regulator added that “Uber has ended the violation.”

Uber shares slipped less than 1% to $73.80 soon after the opening bell Monday. They are up about 20% this year.