Dutch privacy regulators have ordered Uber to pay €825 million, about $966 million, over the company’s handling of driver account deactivations between 2020 and 2022. The penalty, which Uber plans to appeal, is among the largest ever imposed under the European Union’s General Data Protection Regulation.
The case focuses on GDPR protections involving automated decision-making. Dutch regulators found that some drivers were deactivated through automated processes without sufficient warning, explanation or meaningful human review. Because losing access to the Uber platform could mean losing income, regulators treated the decisions as having serious consequences for affected drivers.
For insurance claims professionals, the case illustrates how one automated process can generate exposures across several coverage lines. A regulatory privacy action may implicate cyber or privacy coverage, while allegations involving employment decisions could raise EPL issues. Claims alleging defects in technology or automated services could also lead to tech E&O questions, while scrutiny of corporate oversight may reach D&O policies. Whether regulatory penalties themselves are insurable depends heavily on policy language and applicable law.
The dispute also has implications beyond Europe. U.S. litigation is testing liability associated with AI-assisted employment decisions, while insurers are examining exclusions and coverage limitations for AI-related exposures. Claims adjusters may increasingly need to determine not only what happened, but how much of a disputed decision was made by software, what human review occurred and which policy or coverage section responds.
The same questions can arise when automated tools are used inside the insurance claims process. Fraud scoring, claim prioritization, damage assessment and other automated systems can influence decisions with financial consequences for policyholders and claimants. Documentation showing how a model reached or contributed to a decision, what controls were in place and whether a human had authority to override the system could become important evidence in future claims and litigation.
Uber’s appeal means the penalty is not yet final. Still, the case gives adjusters and insurers a significant example of how automated decision-making can turn a technology or data practice into a major regulatory and liability exposure.
