The Dutch Data Protection Authority has handed Uber a €825 million fine — the second-largest penalty ever issued under Europe's GDPR — for using automated systems to suspend and terminate drivers without meaningful human oversight. The regulator found that Uber's algorithmic management tools made consequential employment decisions at scale, in violation of GDPR's rules on automated decision-making. Drivers had no practical way to contest the AI's call.

This is a landmark moment for what's sometimes called "algorithmic management" — the practice of using software to hire, discipline, and fire workers without a human ever meaningfully reviewing the case. Uber isn't alone in doing this; it's just the one that got caught holding the bag for nearly a billion euros.

The significance goes beyond the fine itself. GDPR Article 22 gives individuals the right not to be subject to decisions made solely by automated means when those decisions have significant effects on them. Regulators have been largely quiet on how that applies to gig-economy platforms. This ruling makes the position explicit: you can't automate someone out of their livelihood and call it a "platform feature."

Why it matters beyond the gig economy. Any organisation using AI-driven HR tools — performance scoring, hiring filters, disciplinary workflows — should be reading this ruling carefully. The underlying legal logic isn't specific to ride-share. It applies anywhere an algorithm makes or substantially influences a decision about a person's employment, credit, or legal status. That includes recruiting tools, automated fraud-detection systems that block customer accounts, and insurance underwriting.

The Australian angle. Australia's Privacy Act reforms, which have been grinding through Parliament, include proposed provisions on automated decision-making that mirror some of the GDPR's intent. The OAIC has flagged algorithmic accountability as a priority area. Australian companies using similar workforce-management tools should note that the Dutch ruling gives domestic regulators a well-documented precedent to point to — even if the current Privacy Act doesn't yet have GDPR's explicit bite. Uber operates extensively in Australia; it's reasonable to expect the OAIC to be watching this case closely.

What Uber will do next. The company has 30 days to appeal, and almost certainly will. But even if it wins on quantum, the underlying legal principle — that automated employment decisions require genuine human review — is unlikely to be overturned. The more interesting question is whether this triggers a wave of similar investigations across other platform companies operating in EU jurisdictions.

The broader pattern here is one regulators have been telegraphing for years: AI that affects people's livelihoods is not a neutral tool. It's a decision-maker. And decision-makers are accountable.