GHAMS - 200.295.747/01

From GDPRhub
Revision as of 14:29, 11 April 2023 by Ls (talk | contribs)
GHAMS - 200.295.747/01
Courts logo1.png
Court: GHAMS (Netherlands)
Jurisdiction: Netherlands
Relevant Law: Article 15(1)(h) GDPR
Decided: 04.04.2023
Published: 04.04.2023
Parties:
National Case Number/Name: 200.295.747/01
European Case Law Identifier: ECLI:NL:GHAMS:2023:796
Appeal from:
Appeal to: Unknown
Original Language(s): Dutch
Original Source: Rechtspraak.nl (in Dutch)
Initial Contributor: Anton Ekker

Dutch Court of Appeal orders Uber to provide access to personal data to drivers and information about logic of automated decision-making.

English Summary

Facts

This decision is the result of an appeal (and incidental appeals) filed against a decision from the District Court of Amsterdam (available on GDPRhub). The District Court orderred Uber to provide to its drivers information regarding the rating by passengers but rejected several other requests for information under Article 15.

The different drivers requested different information in appeal. Driver 1 requested his device data, driver's profile, tags, reports per trip, individual ratings per passenger and information about the recipients, the processing purposes, categories of personal data and existence of automated decision-making referred to in Article 22. Driver 2 requested personal data in the context of upfront pricing

Request for information on, inter alia, the 'batched matching' system and 'upfront pricing system' used by Uber as well as the determination of average ratings. Scope of the right to information under Article 15(1)(h) GDPR. Does the information request concern decisions that have legal consequences for drivers or otherwise significantly affect them? Can Uber rely on an exception to the information right invoked by the drivers? How should the information request be acted upon?

Drivers also request portability of certain personal data under Article 20 GDPR.

Holding

The Court first assessed the admissibility of the incidental appeals under national law.

The court annulled the contested decision insofar as it rejected the request of [appellant sub 1] et al. concerning:

a) the initial request by [appellant sub 1] c.s., based on Article 15(1) GDPR, for access to the personal data concerning them (i) as described in production 2 to the notice of appeal and belonging to category 12 of the Guidance Notes, entitled 'Driver detailed device data', (ii) as included in the Driver's profile and (iii) as included in the 'tags';

(b) [appellant sub 3]'s initial request, based on Article 15(1) GDPR, for access to personal data concerning him in the category 'upfront pricing';

(c) the initial request from [appellant sub 1] c.s., based on Article 15(1)(a), (b) and (c) of the AVG, for access to information on the recipients or categories of recipients to whom personal data of [appellant sub 1] c.s. were disclosed for 'legal reasons or in the event of a dispute', as well as the processing purposes and categories of personal data concerned

(d) the initial request by [appellant sub 1] et al. for information based on Article 15(1)(h) of the AVG concerning the existence of automated decision-making within the meaning of that provision in so far as that request relates to the 'batched matching system', the 'upfront pricing system' whether or not in combination with the system of dynamic rates used by Uber as well as the determination of (average) ratings;

Uber was ordered, within two months of service of this order, to grant the requests referred to above under (a) to (c) as well as the request referred to above under (d) in the manner described in paragraph 3.41, subject to a penalty payment in the amount of €4,000.00 for each day or part thereof that Uber fails to comply with this order;

Comment

Share your comments here!

Further Resources

Share blogs or news articles here!

English Machine Translation of the Decision

The decision below is a machine translation of the Dutch original. Please refer to the Dutch original for more details.