Uber Fined €825 Million in the Netherlands: Legal Analysis of Data Compliance and Driver Rights Behind Automated Account Suspensions

Introduction: A hefty fine sounds the alarm on algorithm-based employment

Recently, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) imposed a record €825 million (approximately RMB 6.4 billion) fine on Uber for unlawfully suspending drivers’ accounts via automated systems and for serious violations in processing drivers’ personal data. This penalty sets a new record for fines issued by Dutch data protection authorities and has quickly drawn global attention from both the technology and legal communities.

As a lawyer specializing in labor law and data compliance, I see that the core issue in this case is not merely the “account suspension” itself, but rather the erosion of workers’ fundamental rights by the underlying algorithmic decision-making mechanism. The Uber case is not an isolated incident; in China, workers in emerging employment models—such as food delivery couriers and ride-hailing drivers—face similar challenges, including “algorithm-based order assignment” and “algorithm-driven account suspensions.” When algorithms become “invisible employers,” how should the law define responsibility? And how can drivers protect their rights? This article provides an in-depth analysis of the incident from a legal perspective, drawing on the Personal Information Protection Law, the Labor Law, and relevant judicial practice.

I. Incident Analysis: Why Was Uber Penalized? Data Protection and the “Black Box” Account Suspension

The Dutch Data Protection Authority found during its investigation that, between 2018 and 2021, Uber used an automated system to suspend or deactivate driver accounts. This system, operating without human intervention, assessed whether drivers engaged in fraudulent activity based on internal algorithms and directly executed account deactivations. The issue is that Uber failed to adequately inform drivers about the processing of their personal data—including the scope of data collection, purposes of processing, and the logic of the algorithms—thereby violating the GDPR’s principles of transparency and lawfulness.

More critically, after Uber bans a driver’s account, the driver has no effective avenue for appeal and may not even be informed of the specific reason for the ban. This “black-box” practice directly deprives drivers—acting as data subjects—of their rights to be informed and to object. The Dutch supervisory authority determined that Uber’s conduct constitutes a serious infringement of drivers’ data rights; given Uber’s pan-European operations, the impact is extensive, prompting the imposition of an exceptionally high fine.

From a legal perspective, this penalty targets not merely the “account suspension” outcome but rather the “automated decision-making” process itself. Article 22 of the GDPR explicitly provides that data subjects have the right not to be subject to a decision based solely on automated processing—including profiling—if such decision produces legal effects concerning them or similarly significantly affects them. Uber’s account suspension clearly exerted a “significant effect” on drivers’ livelihoods yet failed to provide “appropriate safeguards,” constituting a material violation.

II. From the Perspective of Chinese Law: How Does the Algorithmic Account Suspension Apply to the Personal Information Protection Law?

Turning our attention back to China, the Uber incident carries a strong warning for Chinese platform enterprises. Article 24 of the Personal Information Protection Law (PIPL), which took effect on November 1, 2021, stipulates: “Individuals have the right to refuse decisions made solely through automated decision-making by personal information handlers.” This provision aligns with Article 1035 of the Civil Code of the People’s Republic of China, which requires that personal information processing adhere to the principles of legality, legitimacy, and necessity.

Specifically, for ride-hailing and food delivery platforms, if an enterprise uses algorithms to automatically suspend riders’ or drivers’ accounts, it must meet the following three requirements:

**First, transparent notification.** Platforms must clearly inform drivers of the data dimensions (e.g., order acceptance rate, number of negative reviews, complaint records, etc.) underlying account suspension decisions, as well as the fundamental logic of the algorithm. Currently, most platforms suspend accounts solely on the grounds of “abnormal activity detected by the system,” which clearly violates the PIPL’s “transparency” requirement.

**Second, manual review.** Article 24 of the PIPL stipulates that where automated decision-making significantly affects an individual’s rights and interests, the individual has the right to request an explanation from the enterprise and the right to refuse decisions made solely through automated decision-making. This means platforms must provide a manual appeal channel, and appeal outcomes must not rely entirely on algorithms. In practice, although many platforms have established appeal entry points, reviews are often still conducted “automatically by the system,” which fundamentally fails to resolve the issue.

**Third, data minimization.** Platforms must limit the collection of driver data to information “directly relevant” and must not indiscriminately collect sensitive data such as location tracking, facial recognition, or social relationships. In the Uber case, the Dutch supervisory authority found that the scope of data collected far exceeded what was necessary—a practice that could likewise constitute a violation in China.

III. Algorithms and Labor Relations: Are Banned Drivers “Employees” or “Independent Contractors”?

The underlying dispute in the Uber case concerns the legal classification of drivers. Uber has long maintained that its drivers are “independent contractors” rather than “employees,” thereby evading obligations under labor law—such as protection against dismissal and social security contributions. However, in its 2021 ruling, a Dutch court classified Uber drivers as employees. This determination directly influenced the data protection authority’s assessment: since drivers are employees, Uber’s handling of their accounts must comply with stricter labor law principles.

In China, the status of workers in emerging forms of employment is equally complex. In 2021, the Ministry of Human Resources and Social Security and seven other departments jointly issued the *Guiding Opinions on Safeguarding the Labor Protection Rights and Interests of Workers in Emerging Forms of Employment*, introducing the concept of “situations that do not fully meet the criteria for establishing an employment relationship”—a “third category” of employment relationships situated between traditional “employment relationships” and “civil relationships.” For such workers, platform enterprises must not abuse algorithms to restrict their labor autonomy, nor may they use account suspension as a disguised means of dismissal.

In judicial practice, courts have already determined that a de facto employment relationship exists between food-delivery platforms and delivery riders (e.g., a local court ruling in 2022). Once an employment relationship is established, unilateral account suspension by the platform constitutes “termination of the employment contract” and must comply with the statutory grounds stipulated in Article 39 of the *Labor Contract Law* (e.g., serious violation of work rules or gross negligence); otherwise, such termination is unlawful, and the employee may claim compensation.

IV. Compliance Responses by Drivers and Enterprises: Practical Legal Advice

For drivers and delivery riders facing account suspension by algorithms, the path to safeguarding their rights should proceed step by step:

– **证据留存**：及时截图保存封号通知、接单记录、与平台客服沟通的聊天记录等。这些是后续申诉或诉讼的关键证据。

– **内部申诉**：先通过平台官方渠道提出书面申诉，要求说明封号理由及依据。若平台拒绝或答复含糊，可向劳动监察部门投诉，或依据《个人信息保护法》第50条向网信部门举报。

– **司法救济**：若封号导致收入损失，可主张平台违约或侵权。在劳动关系明确的情况下，可申请劳动仲裁，要求恢复账户或赔偿损失。

For platform enterprises, the Uber case serves as a lesson that algorithms are not beyond the reach of the law. Enterprises should establish an “algorithm compliance review mechanism,” conduct legal risk assessments prior to deploying automated decision-making systems, and provide “human intervention interfaces.” Additionally, enterprises are advised to regularly engage qualified lawyers to audit their employment rules and data policies, thereby avoiding disregard for legal boundaries under the pretext of “technological neutrality.”

Conclusion: In the Age of Algorithms, the Dignity of Labor Requires Legal Protection

Uber has been fined €825 million—not only a financial loss for a multinational corporation, but also a powerful counterstrike by the global legal system against “algorithmic hegemony.” In China, with the implementation of the Personal Information Protection Law and the Data Security Law, and with the Supreme People’s Court’s judicial interpretations on labor disputes arising from new forms of employment gradually improving, legality reviews of algorithmic decision-making will become increasingly stringent.

Whether you are a driver, delivery rider, or ordinary consumer, when confronted with a situation where “the system decides everything,” you must recognize that the law serves as the fundamental safeguard for individual rights. Guangdong Zhiming Law Firm has long focused on practical issues at the intersection of technology and law, and possesses extensive experience in labor disputes, data compliance, and algorithm-related legal remedies. If you are currently facing similar challenges, please feel free to consult us. Our professional lawyers will clarify your legal options and protect your legitimate rights and interests.