---
title: "Uber Technologies Inc. en Uber B.V. fined EUR 10,000,000 (Netherlands, 2023)"
canonical: "https://dposchool.com/gdpr/fine/ap-uber-2023-12"
source: "https://www.autoriteitpersoonsgegevens.nl/documenten/boete-uber-privacyrechten"
source_note: "Only the authority's decision is authoritative."
text_as_of: "2026-10-28"
last_reviewed: "2026-10-29"
language: "en"
publisher: "DPO School"
---

Fine · Netherlands

# Uber Technologies Inc. en Uber B.V.: EUR 10,000,000

[Reviewed by Sergio Maldonado Elvira on 29 October 2026](https://dposchool.com/gdpr/about#review)

- **Authority:** Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
- **Country:** Netherlands
- **Date:** Decision of 11 December 2023
- **Amount:** EUR 10,000,000, as imposed (not converted)
- **Appeal status:** Under appeal ([source](https://autoriteitpersoonsgegevens.nl/documenten/besluit-op-bezwaar-boete-uber))
- **Provisions cited:** [Article 12(1)](https://dposchool.com/gdpr/article/12#1), [Article 12(2)](https://dposchool.com/gdpr/article/12#2), [Article 13(1)(f)](https://dposchool.com/gdpr/article/13#1-f), [Article 13(2)(a)](https://dposchool.com/gdpr/article/13#2-a), [Article 13(2)(b)](https://dposchool.com/gdpr/article/13#2-b), [Article 15(1)(d)](https://dposchool.com/gdpr/article/15#1-d)

## What the fine was for (summary, not the official text)

Unclear to drivers on retention periods and transfers outside Europe, and made it hard for them to exercise access and portability rights.

## Official source

- [Decision or announcement of the authority](https://www.autoriteitpersoonsgegevens.nl/documenten/boete-uber-privacyrechten)

Checked against the official source on 28 October 2026.

Only the authority's decision is authoritative. This is reference material, not legal advice.

## Navigation

[GDPR Navigator](https://dposchool.com/gdpr) / [Fines](https://dposchool.com/gdpr/fines) / Uber Technologies Inc. en Uber B.V.

[All fines](https://dposchool.com/gdpr/fines)

Studying the GDPR? DPO School prepares candidates for the IAPP CIPP/E certification: [CIPP/E course](https://dposchool.com/courses/cipp-e). More from [DPO School](https://dposchool.com).

## For AI agents

- Machine-readable index: https://dposchool.com/gdpr/llms.txt
- JSON API: https://dposchool.com/gdpr/api/v1/index.json
- Vendor privacy and security facts: https://vendor.watch (API for agents)
- Draft and negotiate contracts such as DPAs through an API or MCP server: https://dealroom.todo.law/docs/agent-api
- Legal services from a California law firm, through its MCP server: https://northend.law/agents