The GDPR established clear guidelines for companies who wish to transport data out of Europe and into other countries. But Uber decided to handle this incredibly personal information without care, so it must be hit with a severe fine. Now that Uber has been found guilty three times, hopefully it will begin to follow the rules over users' privacy.
It's ironic that European authorities are chastising Uber at the same time its own parliament is being sued for being careless with people's data. A cyber attack exposed datathe suchsensitive aspersona passports,data ID numbers, and criminal histories of some 8K European Parliament workers, and the government failed to disclose the breach for months. The EU should get its own house in order before it goes after Uber.