Dutch Data Protection Authority Fines Uber IDR 174.1 Billion

JAKARTA - The Dutch Data Protection Authority (DPA) on Wednesday, January 31 gave Uber a fine of 10 million euros (Rp174.1 billion) for violations of privacy regulations related to the personal data of its drivers.

The DPA found that Uber did not determine in terms and conditions how long the driver's personal data was stored, or how the data was secured when it was sent to entities in countries, which were not named, outside the European Economic Zone (EEA).

Uber has also hindered drivers' efforts to exercise its privacy rights by making requests for access to personal data unnecessary, the authority added, although it noted that Uber had taken steps to fix the highlighted issues.

"The Dutch data protection authorities have acknowledged that Uber is fixing a small number of 'low-impact' issues raised by the drivers, while rejecting most of their claims as baseless," an Uber spokesperson said.

The spokesperson added that the company continues to strive to improve the process of requesting their data.

The fine was dropped after more than 170 French drivers complained to a French human rights organization, which filed a complaint with French data protection authorities. However, because Uber has a European headquarters in the Netherlands, the complaint was forwarded to the DPA.