Uber fined €825m over driver suspensions; Nigeria adopts EU data protections
Uber has been fined €825 million ($966 million) by the Dutch Data Protection Authority for using automated systems to suspend and deactivate drivers’ accounts without adequately informing them or providing sufficient safeguards around automated decision‑making. The penalty covers practices between 2020 and 2022 and is the second‑largest GDPR fine ever imposed, after Meta’s €1.2 billion penalty in 2023. Uber says it strongly disagrees, will appeal, and notes the disputed practices were discontinued years ago.
For Nigerian drivers using ride‑hailing or delivery platforms, the Nigeria Data Protection Act 2023 already gives a right against decisions based solely on automated processing where such decisions have legal or similarly significant effects. Section 37 requires data controllers to provide safeguards that allow affected individuals to obtain human intervention, express their views and contest automated decisions. The Nigeria Data Protection Commission (NDPC) has highlighted automated decision‑making in employment, lending and profiling as a regulatory priority and, in July 2025, fined MultiChoice Nigeria N766.24 million for similar violations, showing that enforcement can bring substantial penalties.
Drivers who believe an account suspension or deactivation was made purely by an algorithm can request a human review, ask for the specific reasons behind the decision, and lodge a complaint with the NDPC. Knowing these rights lets you challenge unfair automated actions and seek redress before losing income.