All news
Enforcement May 22, 2026 7 min

Netherlands: the EUR 290 million Uber fine and the Dutch Authority's new priorities for 2026

Transfer of EU driver data to US servers without adequate safeguards. The Dutch AP focuses on mass surveillance, AI and digital resilience

TL;DR for the DPO

The Dutch Authority (AP) fined Uber EUR 290 million for transferring EU driver data to US servers without adequate Chapter V GDPR safeguards. One of Europe's highest fines. For 2026-2027 the AP set three priorities: mass surveillance, artificial intelligence, digital resilience. It is also starting random inspections of municipalities (processing registers, DPIAs, DPO independence).

The Uber case

Following complaints from French drivers, the Dutch AP (Uber's European HQ is in Amsterdam) found that Uber transferred EU drivers' personal data to the United States without adopting the safeguards required by Chapter V of the GDPR for non-EU transfers.

290MEUR
Dutch AP fine
Official source:EDPB - Dutch SA fines Uber EUR 290M

Looking for a workspace for your DPO work?

DPO Workspace is built by a certified DPO. 30-day free trial.

Start free

Related articles

Enforcement
26complaints, and no fine

You declare contract, then you reject the objections: Norway shows how the two mistakes travel together

SATS asked members for a photo kept in the membership system and used at the desk to check the identity of people coming in. Datatilsynet found the notice stated the wrong legal basis, failed to explain the right to object, and that objections were rejected without demonstrating compelling legitimate grounds. The deadline to fix it is 11 September 2026.

Aug 26, 2026New 6 min
Enforcement
825 mln €the second-largest fine ever

Eight hundred and twenty-five million for an algorithm that deactivated accounts with nobody looking

It is the second-largest fine ever imposed under the GDPR, behind only Meta's 1.2 billion. It is not about a data transfer or a security breach: it is about Article 22, the rule on automated decisions that almost nobody documents because it looks like a big-platform problem. It is in fact about anyone who lets software decide something that weighs on a person's life.

Aug 24, 2026New 5 min
Enforcement
64 mln złagainst 14 the year before

Poland quadrupled its fines in a year, and the three highest ever all date from 2025

For years Poland was treated as a low-enforcement market. That assumption no longer holds: in twelve months the total went from fourteen to over sixty-four million zloty, and the three largest fines in the country's history all carry the same year. If you look after a client with a branch, a supplier or a service centre in Poland, the risk calculation has changed.

Aug 24, 2026New 4 min