Informa Tech Automotive Group’s Post

Dutch Data Protection Authority Imposes €10 Million Fine on Uber for multiple violations related to driver information. This decision highlights the significance of providing transparent information and emphasizes the importance of facilitating individuals in exercising their rights. It goes beyond mere basics and stresses the need to ensure that the process is easily accessible, straightforward, and user-friendly. Adding an additional layer of consideration for companies when developing their privacy processes, applications, systems, and procedures with privacy at the forefront.🛡️🔒 #DataProtection #GDPRfine #UberFine https://hubs.ly/Q02jCtrq0

The recent NYT article sheds light on a significant development in data privacy enforcement. Uber has been slapped with a €13.5 million fine by Dutch regulators for mishandling driver data. This case underscores the critical importance of adhering to stringent data protection laws and respecting user privacy. 🔍 𝗞͟𝗲͟𝘆͟ ͟𝗧͟𝗮͟𝗸͟𝗲͟𝗮͟𝘄͟𝗮͟𝘆͟𝘀͟:͟ 1. 𝗗𝗮𝘁𝗮 𝗣𝗿𝗼𝘁𝗲𝗰𝘁𝗶𝗼𝗻 𝗖𝗼𝗺𝗽𝗹𝗶𝗮𝗻𝗰𝗲: This fine highlights the necessity for companies to rigorously comply with data protection regulations like the GDPR. Ensuring transparent and secure handling of personal data isn’t just a legal obligation—it’s a crucial trust-building measure. 2. 𝗗𝗿𝗶𝘃𝗲𝗿 𝗗𝗮𝘁𝗮 𝗦𝗲𝗰𝘂𝗿𝗶𝘁𝘆: Uber's mishandling of driver data raises questions about how companies manage sensitive information. It’s a reminder that robust data security practices are essential not just for customer data but for all stakeholders. 3. 𝗟𝗲𝗴𝗮𝗹 𝗮𝗻𝗱 𝗙𝗶𝗻𝗮𝗻𝗰𝗶𝗮𝗹 𝗥𝗲𝗽𝗲𝗿𝗰𝘂𝘀𝘀𝗶𝗼𝗻𝘀: The hefty fine demonstrates the financial risks associated with data privacy breaches. Investing in comprehensive data protection strategies can mitigate these risks and safeguard your organization’s reputation. 4. 𝗕𝗿𝗼𝗮𝗱𝗲𝗿 𝗜𝗺𝗽𝗹𝗶𝗰𝗮𝘁𝗶𝗼𝗻𝘀: This case serves as a wake-up call for all businesses operating in data-intensive environments. Strengthening data protection practices should be a top priority to avoid similar legal and financial penalties. As we navigate the evolving landscape of data privacy, let’s use this incident as a catalyst to reinforce our commitment to safeguarding personal data. How is your organization preparing to address data privacy challenges? 💬👇 https://lnkd.in/eqdDAmRG

What's the risk? This question is crucial, especially when balancing business risk with data privacy compliance requirements. Recently, I was discussing the August 2024 Uber GDPR enforcement action with a few CEO's which helped to shed light on the growing trend of regulators targeting companies beyond tech giants like Amazon, Google, and Meta, for data privacy violations. While I predicted this shift was coming, now more than ever, it's evident that businesses face increasing complexity and uncertainty due to the proliferation of diverse privacy regulations affecting data handling here in the US and around the world. Even seemingly minor issues like data transfers will draw regulators' attention. Uber's preventable infraction serves as a valuable lesson for companies engaging in EU to US data transfers. Utilizing available transfer tools can avert costly penalties and litigation, while preserving trust and reputation. Interested in safeguarding your company against data transfer risks? Connect with me at todd@privacyaviator.com. At Privacy Aviator, we specialize in assisting companies with personal data transfer strategies to ensure data privacy compliance.

🚨 HOT IN: Uber fined 10 million by the Dutch Data Protection Authority for the following failures: - disclosing how long they store the drivers data; - disclosing which non European countries the data is transferred to; - providing an easy to use solution for the drivers to access their personal data. Nothing too complicated, basic failure to incorporate privacy by design practices. It's been 5 years and 8 months since the GDPR came into force, just saying 🙆♀️ https://lnkd.in/dTbvvFps #gdprcompliance #privacybydesign

💣 UBER, DUTCH DPA & 10 MILLION FINE. On December 11th 2023, in cooperation with the CNIL (French Data Protection Authority), the Dutch watchdog fined Uber B.V. and Uber Technologies Inc. in 10 million euros for several breaches of drivers' personal information, based on a collective complaint received by the CNIL from the association ‘La Ligue des droits de l'Homme’, representing more than 170 drivers on the Uber platform. Under the procedures for cooperation between authorities introduced by GDPR, it was the Dutch data protection authority that was competent to conduct the investigations in this case, as Uber has its main establishment in the Netherlands. 👉 The breaches identified Concerning the difficulties encountered in exercising Uber driver’s rights, the Dutch Data Protection Authority found that Uber B.V. and Uber Technologies (jointly responsible) had: ⛔ Failed to provide the data requested under the right of access in an accessible format and by providing drivers with information about the processing operations carried out on them in English; ⛔ Failed to make the online form for exercising rights within the application used by drivers, sufficiently accessible; ⛔ Failed to provide complete information in their privacy statement about data transfers outside the European Union, as well as overly general information about data retention periods; ⛔ Failed to explicitly mention the right to data portability in their privacy statement. ✋ Transparency is a fundamental part of protecting personal data This decision reaffirms the importance of the obligation to provide transparent information and the need to ensure that the rights of data subjects are respected. #data #dataprotection #transparency #information https://lnkd.in/ehEyd4_n

Our latest blog post looks at Uber, who have recently found themselves in hot water as the Dutch Data Protection Authority (AP) imposed a substantial fine of €10 million in response to privacy violations. Uber has been penalised for failing to disclose comprehensive details about its data retention practices concerning European drivers and for hindering drivers’ rights to privacy. To read more on the topic, head to the news section of our website; https://lnkd.in/ejdQTcPy

Dutch watchdog fines Uber 10 million euros over privacy regulations infringement - here is what we know: **Dutch watchdog fines Uber 10 million euros** - The Dutch data protection authority (DPA) imposed a 10 million euros ($11 million) fine on Uber for infringing privacy regulations regarding its drivers' personal data. **Uber failed to specify data retention and security policies** - The DPA found that Uber did not state how long it kept its drivers' data, how it secured the data when sending it to unnamed countries outside the EEA, and how it informed its drivers about their data rights. **Uber obstructed drivers' access to personal data** - The DPA also said that Uber made it unnecessarily complicated for its drivers to request access to their personal data, violating their right to privacy. **Uber fixed some issues, dismissed most claims** - Uber said that it had fixed the "low impact" issues raised by the drivers while rejecting most of their claims as unfounded. It also said that it continuously works on improving its data request processes. https://buff.ly/4878rji #dataprotection #fines #gdpr #DPO #CommSec

Uber has been fined €290 million by the Dutch Data Protection Authority (DPA) for illegally transferring the personal data of European drivers to US servers, violating the EU's General Data Protection Regulation (GDPR). The DPA stated that Uber failed to protect sensitive driver information, including ID documents, taxi licenses, location data, and, in some cases, criminal and medical records. The fine follows an investigation triggered by complaints from French drivers. Uber has announced plans to appeal the fine, claiming that their data transfer practices complied with GDPR. This is the third fine Uber has faced from the DPA, which has previously fined the company €600,000 in 2018 and €10 million last year. The EU continues to enforce strict regulations on data protection, with significant fines imposed on big tech firms for non-compliance. Interesting? Want to read more? Click the link Below https://lnkd.in/dPM7dvj9 #uber #dataprivacy #gdpr #datasecurity #europelaw #bigtech #dataprotection #cybersecurity #privacyrights #techregulation #databreach #eulaw #legalnews #technews #fined

In the firm's latest data protection bulletin, members of Stephenson Harwood's data protection team including head of data protection Katie Hewson, partner Joanne Elieli, managing associate Sarah O'Brien, trainee Douglas Henderson and solicitor apprentice Amy Allen explore the European Commission's proposed new standard contractual clauses for data importers directly subject to GDPR; fines for Meta, Clearview and Sky Betting and Gaming from various international data protection regulators; Ofcom's proposed approach to regulating 'small but risky' online platforms; and the ongoing cyber-security incident affecting TfL, among other topics. Read the full bulletin below. #DataProtection #Technology

Our September DP Bulletin is out now! Most interesting update this month is that the #EuropeanCommission has published some FAQs on the #DataAct. Great timing ⏰ as we've recently published a series of deep dives into the various provisions of the Data Act (link to these is in our Bulletin). Take note if you manufacture, import, distribute or use #connectedproducts. #data #datasharing #IoT #datarights