> In other words: the inner workings of a company are by definition a black box and only an insider can leak screenshots or damning data to prove they break a l

> In other words: the inner workings of a company are by definition a black box and only an insider can leak screenshots or damning data to prove they break a law in the first place. In reality, no one gets fined based on whims and wishes, but after investigations, just like in this case: > The DPA said it started the investigation after more than 170 French drivers complained to a French human rights interest group, which then filed a complaint to France's data protection watchdog. > Under the GDPR, a business that processes data in several EU countries must deal with the data protection authority where its main office is located. Uber's European headquarters are in the Netherlands. https://www.lemonde.fr/en/economy/article/2024/08/26/uber-fined-290-million-by-dutch-watchdog-for-failure-to-protect-drivers-data_6721808_19.html https://www.lemonde.fr/en/economy/article/2024/08/26/uber-fi... Seems the investigation uncovered that Uber didn't process data in their European headquarters but instead sent the data to the US, otherwise there obviously wouldn't be any basis for the fine.