Uber has received the second highest fine recorded under GDPR in relation to deactivation of drivers resulting from automated passenger ratings monitoring and a fraud monitor which detected inflated fares and the abuse of rider paid cancellations.
These systems used automated decisions to temporarily and in the case of passenger ratings, permanently, deactivate drivers. In doing so, the Dutch data protection authority found that Uber had violated the prohibition on automated decisions and had failed to provide sufficient information about the automated decisions.
You can find the Dutch data protection authority’s press release here.
If you are using automated decision making in a a work context and would like some guidance on making sure you implement it in a compliant way, please get in touch by emailing hello@hellodpo.com and the team will be happy to help.
