Netherlands hits Uber with €290M fine for transfer of ‘sensitive’ driver data to US

The Dutch data protection authority (DPA) has hit Uber with a €290mn fine for transferring personal European driver data to the US. According to the DPA, the transfers constituted a “serious violation” of the EU’s GDPR, as they failed to provide the necessary safeguards for data storage outside the block. Following an investigation, the DPA found that, between August 2021 and November 2023, Uber was transferring and storing sensitive data to US servers without the additio