
Background information
Cookie banners: what we can learn from the EU’s mistakes
by Marc Engelhard

Self-driving taxis are set to roll through Zurich by the end of 2026. But Uber's robo-taxi plans have hit a sensitive point: data protection.
The initial situation is quickly explained: Uber wants to test self-driving taxis in Zurich by the end of 2026, alongside Madrid, Hong Kong and Houston. Uber CEO Dara Khosrowshahi told Reuters. Technology partners are Waabi and WeRide, depending on the market.
Uber's narrative: autonomous vehicles should be cheaper, more reliable and more scalable. For Uber itself, this means one thing above all: more economical. In other words: where there is no driver, no breaks and no wages, the business model suddenly pays off much faster.
This is where the real story begins.
What appears in many reports only as a subordinate clause - except, for example, here - is in fact the crucial bottleneck: Before even a single robotaxi drives in Zurich, Uber must submit and, above all, pass a data protection impact assessment (DPIA).
This is the real sticking point. Switzerland did authorise the technical operation of Level 4 vehicles in 2025 with the revision of the Road Traffic Act and the new Ordinance on Automated Driving. But traffic law does not take precedence over data protection law.
A robotaxi is not a normal car. It is a rolling sensor system. It has:
All of this falls under the revised Data Protection Act (DSG), which is very similar to the new EU General Data Protection Regulation (GDPR): A DPIA is mandatory for such high-risk processing. No ifs and buts. This must show in detail what data is collected, how it is protected or anonymised, who has access to it and how long it is stored.
The Federal Data Protection and Information Commissioner (FDPIC) and cantonal data protection authorities are among those responsible for the audit.
The Zurich region has already gained experience with autonomous vehicles. However, pilot projects such as «iamo» in the Furttal valley or tests by VBZ have so far mainly served research and testing purposes.
A commercial robotaxi service from a global company like Uber would be in a different league from a regulatory perspective. It would have to be scrutinised accordingly. Zurich could set a precedent in terms of data protection in particular: As a non-EU country with strict rules, other cities will be very interested in how Switzerland harmonises autonomous mobility with the protection of privacy.
There is more at stake for Uber than just a single test market. The decision in Zurich - among others - could become a benchmark for other European cities.
I write about technology as if it were cinema, and about films as if they were real life. Between bits and blockbusters, I’m after stories that move people, not just generate clicks. And yes – sometimes I listen to film scores louder than I probably should.
From the latest iPhone to the return of 80s fashion. The editorial team will help you make sense of it all.
Show all