Uber’s €290 Million Fine by EU Regulator Highlights Risks of Transatlantic Data Transfers

Uber Technologies Inc.’s €290 million ($324 million) fine by a European data-privacy watchdog serves as a significant alert for U.S. companies that manage data transfers between the EU and U.S. The Dutch Data Protection Authority imposed the fine after determining that Uber had transferred French drivers’ location data and other sensitive information to U.S. servers without adequate safeguards. This decision followed a complaint from over 170 French drivers and highlighted Uber’s serious infringement of the General Data Protection Regulation (GDPR). The authority’s actions underscore the ongoing volatility in data management agreements between the U.S. and the EU (read more).