Fining the algorithm: what Europe's €825m penalty on Uber is for

IT IS RARE for a number to be simultaneously huge and trivial. The fine imposed on Uber this week is both. On August 21st the Dutch data-protection regulator, the Autoriteit Persoonsgegevens (AP), made public a decision, dated August 17th, ordering the ride-hailing giant to pay €825m ($966m)—the second-largest penalty ever imposed under the General Data Protection Regulation (GDPR), exceeded only by the €1.2bn fine given to Meta in 2023. The scale of the sum is unmistakable. What the penalty is actually for is more surprising, and more revealing.

The underlying conduct is, on the surface, mundane. Between 2020 and 2022 Uber's systems suspended or deactivated the accounts of European drivers without adequate human oversight or explanation. Some drivers were flagged for suspected fraud—allegedly taking circuitous routes to inflate fares, or accepting trips they had no intention of completing. Others lost their accounts because of persistently low rider ratings. The system acted, the AP found, without properly telling drivers what had happened, why, or how to challenge it. In the jargon of the GDPR that is a breach of the right not to be subjected to decisions based solely on automated processing, and of the right to be informed. Uber says it disagrees strongly, calls the penalty disproportionate, insists that it no longer permanently deactivates accounts without human review, and says it will appeal.

So far a familiar story: another record fine for an American platform. But look closer, and the case is doing something odder. It is deploying a law written to police the flow of personal data as a backdoor to police the workplace. The GDPR's clause on automated decision-making is a general consumer-protection measure, not a labour statute. It does not restore a suspended account, reimburse lost fares or change a driver's legal status; it offers information and a route of challenge, which is valuable but not the same as a job. Europe has no shortage of labour law. What it lacks is an answer to a new question: who is accountable when the "boss" is an algorithm managing people formally classified as self-employed.

That the Dutch AP, of all regulators, is wielding the whip is itself a quirk of the system. The case began with a complaint in France and was decided in the Netherlands because Uber's European headquarters sits in Amsterdam, making the authority the company's lead regulator under the GDPR's one-stop-shop procedure. It is the second time the AP has hit the same target: in 2024 it imposed a then-record €290m on Uber for shipping European drivers' personal data to America without adequate safeguards, a fine the firm is contesting. The same regulator, the same company, and the same continental axiom—that the surest way to sting a global platform is through its European base.

None of this will trouble the share price much, for reasons that arithmetic makes plain. Uber's most recent reported quarter brought in $14.2bn of revenue, on which it earned $0.81 per share, in line with what analysts had expected; its trailing-twelve-month revenue is around $55bn. A $966m fine is hence under 2% of a year's revenue and a little less than a week of its quarterly take, comfortably inside the GDPR's ceiling, which caps such penalties at 4% of global turnover. The AP justifies the size of the fine by Uber's scale and the need for a dissuasive penalty. Regulators may call the number; the courts tend to get the last word, and Uber has promised an appeal that will run for years.

It would nonetheless be wrong to dismiss the penalty as pure theatre. If it survives the courts, it embeds a legal standard with real meaning: a platform may not terminate the people who drive for it with an algorithmic shrug. Cheap termination is the lever on which gig-economy economics turn. The ability to discipline a workforce one does not formally employ—instantly, at scale, without explanation—is a source of platform power. Forcing a human being into the loop changes that balance, whatever the euro amount. Uber's own defence concedes the point, since the human reviews and appeals process it now advertises are precisely what the GDPR was asking for all along.

The deeper problem is that Europe is using the wrong instrument for the job, and knows it. The GDPR was written in an age of targeted advertising and data brokers; it was not designed to referee dismissal. The proper tool—an EU directive on platform work, adopted in October 2024—would require transparency, human oversight and, crucially, a rebuttable presumption that platform workers are employees. Member states were meant to transpose it into national law by December 2nd 2026; many are still debating, and the employment presumption, the directive's centrepiece, is being diluted as national governments legislate. Because politics could not settle the status of gig workers in labour law, privacy regulators are left to answer the question in fines.

That leaves the penalty in an awkward spot. A sum that will be contested, delayed and probably reduced is a cost of doing business in Europe—borne in the end by riders and shareholders, the way every other regulatory levy is absorbed. The fine informs affected drivers, which is good, and embarrasses the platform, which is cheap. What it does not do is employ anyone, restore an account, or resolve the status question at the heart of the industry. The constraints that would actually bind—employment reclassification, or the directive's human-oversight duties—are still being drafted, still being fought over, and years from effect.

None of this makes the fine worthless. It records, loudly and publicly, a judgement about who is accountable when software runs a workforce. But it is worth saying plainly what it is: a verdict, expressed in euros, on an algorithm—not a cure for the gig economy. If Europe wants to do more than fine the machine, it should stop treating privacy law as social policy and finish the labour-law job it has already begun. Until it does, expect the routine to repeat: a record fine, a firm appeal, and years of argument over rights that no amount of money was ever designed to price.