Authorities opened an investigation after Uber drivers in France sent complaints to the French privacy protection commission, the CNIL. The CNIL transferred the handling of the complaints to the Dutch Data Protection Authority, since Uber BV is incorporated in the Netherlands.
The drivers’ main complaints were, inter alia:
- There was a lack of transparency and due disclosure about the retention period of their personal information.
- Information request forms are hidden in various places on the website and are inaccessible.
- The company failed to disclose to which countries outside the EEA it transfers personal information.
