
In a significant enforcement action underscoring the stringent requirements of the General Data Protection Regulation (GDPR), Uber has been hit with a substantial fine by the Dutch Data Protection Authority (DPA). The $323 million penalty was imposed due to Uber’s transfer and storage of the personal data of European drivers to the United States without the appropriate safeguards in place.