In January, Uber was fined €10 million for data access rights pertaining to the same complaints. But the new fine announced Monday dwarfs the earlier penalty — landing it a new spot on the list of tech giants stung with the ten biggest GDPR fines, just below mid-table.

The size of the penalty reflects the seriousness of the breach, per the AP, which wrote in a press release that Uber had failed to “appropriately safeguard” data which it transferred out of the EU — dubbing that “a serious violation”.