Netherlands. Uber fined. Will pay PLN 290 million for violating the General Data Protection Regulation

Dutch Data Protection Authority (dpa) A fine of 290 million euros actually Breasts To transfer personal data to European carriers to the United States. According to the Data Protection Authority, this constitutes a serious violation of the General Data Protection Regulation (GDPR).

Uber violated GDPR. Fined PLN 290 million

“In Europe, the General Data Protection Regulation protects people’s fundamental rights by requiring companies and governments to handle personal data with due diligence. Unfortunately, this is not as clear outside Europe (…).” Uber failed to meet GDPR requirementsto ensure a level of data protection for transfers to the United States. “This is very important,” said Aled Wolfsen, chairman of the Dutch Data Protection Association, in a statement.

See: Pillar crashes into pizza restaurant in Austria. Eight people injured

The DPA found that Uber collected, among other things: the confidential data of European drivers Stored on servers in the USA. This includes taxi account and license data, as well as location data, photos, payment data, identity documents, and in some cases even criminal and medical data of drivers.

The penalty was imposed in July. After a collective complaint from 170 driverswhich was represented by French League for Human RightsThe investigation has been handed over to Dutch regulators because Uber’s EU headquarters are in the Netherlands.

See: Incident on Polska Campus. Romanowski reports to the prosecutor’s office, the prime minister responds

Already last year, the American company received a fine of 10 million euros Due to minor breaches of the GDPR. In 2018 this was 600 Shut up. Euro For similar crimes.

Uber appeals fine. Fine will be suspended

This was announced by Caspar Nixon, Uber spokesperson. You will appeal this decision. Because it did not violate any laws regarding the transfer of confidential data.

See: Elon Musk and JK Rowling’s problems. The Algerian Olympic Committee wants to punish them

– Uber’s cross-border data transfer process was GDPR compliant during a 3-year period of significant uncertainty between the EU and the US. We will resume We are convinced that common sense will prevail, he said, referring to the period when the United States and the European Union had to review their regulations so that data could be transferred freely without complex agreements.

Uber can appeal the decision to the DPA, and if that doesn’t help, it can file a complaint with a Dutch court. The entire appeal process can take around four years. Until a final decision is made The fine will remain suspended.

Read more