The European data protection authorities have imposed a €100 million fine on MLU B.V., the operator of the Yango ride-hailing service, for illegally transferring the personal data of EU users to Russia. The penalty, one of the largest ever levied by a European privacy watchdog, follows a joint investigation by regulators in Finland, Norway and the Netherlands.
Investigation reveals systematic data breaches
The probe, led by the Dutch data protection authority Autoriteit Persoonsgegevens together with its Finnish and Norwegian counterparts, found that Yango had been sending user data to servers in Russia without ensuring equivalent protection. Yango, the international brand of Yandex.Taxi established in 2018, operates in multiple European markets offering taxi, logistics, scooter rental and food delivery services. Regulators concluded that the company could not demonstrate that Russian state bodies were unable to access the data.
Regulatory response and immediate consequences
Finland’s office of the data protection ombudsman stated that any company operating within the EU must guarantee robust protection of personal data and comply with Union standards on processing. “Transferring such data outside the European Union is not allowed if their security cannot be guaranteed,” the office said in a press release. All cross-border transfers by Yango have now been prohibited, and the company faces a potential lawsuit from the Dutch regulator. The Helsinki Times reported that the fine marks a record penalty for this type of violation.
Broader implications for Russian tech presence in Europe
The decision sets a clear precedent: any digital service with technological roots in Russia will be treated as a potential threat to European data security. Yango’s continued technical reliance on Russian infrastructure meant it effectively operated as an extension of state‑controlled structures, using commercial activity as a cover for intelligence gathering and circumventing sanctions. The ruling is expected to make it far harder for Russian capital to expand within European jurisdiction, as any connection to the Yandex group may now be equated with collaboration with the Kremlin.
