Uber hit with $324 million EU fine for improper data transfer

From The Verge: Uber is facing a fine of 290 million euros ($347 million USD) after improperly transferring driver data from the EU to the US in one of the largest penalties levied under the European Union’s General Data Protection Regulation (GDPR) since its inception.

The fine was imposed by the Dutch Data Protection Authority (DPA), which accused Uber of failing to “properly safeguard” European drivers’ personal data while transferring it to the United States. Uber has since ceased the practice, DPA added.

“Uber did not meet the requirements of the GDPR to ensure the level of protection to the data with regard to transfers to the US,” the regulator said in a statement. “That is very serious.”

The DPA started investigating the data transfer after 170 French Uber drivers complained to a human rights organization, which passed it along to the French DPA. Uber’s European headquarters is in the Netherlands, which allowed that country’s DPA to lead the investigation.

View: Full Article