PRIVACY AUTHORITY SANCTIONS TWO COMPANIES OF THE UBER GROUP FOR MORE THAN EUR 4 MILLION.
The Italian Privacy Authority has sanctioned two companies of the Uber Group for around EUR 2 million each. The main violations found were unsuitable disclosures, the processing of data without proper consent, and the failure to notify a data breach.
After a long and complex investigation started in 2019, the data protection authority (‘Garante’) issued an injunction order against Uber B.V., headquartered in the Netherlands, and Uber Technologies, headquartered in San Francisco, USA. A fine of EUR 2 million and EUR 120,000 was issued for each of the two companies.
The two subjects were found guilty of GDPR violations against 1.5 million users resident in Italy, passengers and drivers.
