Dutch Watchdog Slaps Uber with €10 Million Fine for Privacy Breaches
The Dutch Data Protection Authority (DPA) has levied a hefty €10 million ($11 million) fine against Uber for violating privacy regulations related to the personal data of its drivers. The DPA's investigation revealed that Uber failed to specify in its terms and conditions how long it retained drivers' personal data and the security measures in place when transmitting the data to undisclosed entities outside the European Economic Area (EEA).
One major concern highlighted by the DPA was Uber's hindrance of drivers' attempts to exercise their right to privacy. The ride-hailing giant allegedly made access requests for personal data unnecessarily complex, obstructing drivers from managing their privacy effectively. However, the authority acknowledged that Uber has taken corrective actions to address the identified issues.
The fine follows a complaint filed by over 170 French drivers with a human rights organization, which, in turn, brought the matter to the attention of the French data protection authority. Given Uber's European headquarters are situated in the Netherlands, the case was subsequently referred to the DPA.
This substantial penalty underscores the significance of complying with privacy regulations, particularly concerning the retention and security of personal data. Companies must be transparent about data practices and facilitate individuals' rights to privacy without unnecessary complications. The enforcement action serves as a reminder to tech giants and service providers that privacy compliance is non-negotiable in the evolving landscape of data protection.
The GRC Report is the first word in governance, risk, and compliance news. As your trusted source for comprehensive coverage, the GRC Report keeps you informed and equipped to navigate the evolving landscape of governance, risk, and compliance. And remember, the GRC Report isn't just a news source; it's a community of professionals who share your passion for GRC excellence. Don't miss out on our insightful articles and breaking news – join the conversation and empower your GRC journey.