The Italian DPA (Garante per la protezione dei dati personali) has sanctioned Uber with a €4.240m fine for lack of transparency in the privacy policies, and missed notifications for a data breach occurred in 2017. Find the decision of the Garante (in Italian) here.