The notice states that Uber collects facial images and processes biometric data from drivers in applicable markets for identity verification during onboarding and ongoing real-time checks while using the platform.
This analysis describes what Uber's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision requires collection and processing of biometric identifiers, which are classified as special category data under GDPR Article 9 and sensitive personal information under CCPA/CPRA, and as biometric identifiers under Illinois BIPA and similar statutes, triggering heightened consent, retention, and security obligations in multiple jurisdictions.
Interpretive note: The specific markets where biometric facial verification is collected are not exhaustively enumerated in the notice; applicable legal basis under GDPR and consent mechanism adequacy under BIPA require jurisdiction-specific verification.
This provision establishes that drivers in applicable markets are subject to facial biometric data collection both at onboarding and during active platform use; under Illinois BIPA and similar statutes, this requires written informed consent and a publicly available retention and destruction schedule.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"Uber collects biometric data from drivers and delivery people in certain markets. This includes facial verification images collected during the account registration process and through real-time ID checks during the use of the Uber apps, to help verify that the right person is using the account.Excerpt from Uber's Privacy Notice (Drivers and Delivery People)
1) REGULATORY LANDSCAPE: This provision implicates GDPR Article 9 (special categories of personal data requiring explicit consent or another qualifying basis), CCPA/CPRA's sensitive personal information framework, Illinois BIPA (740 ILCS 14), Texas CUBI, Washington My …
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision requires collection and processing of biometric identifiers, which are classified as special category data under GDPR Article 9 and sensitive personal information under CCPA/CPRA, and as biometric identifiers under Illinois BIPA and similar statutes, triggering heightened consent, retention, and security obligations in multiple jurisdictions.
This provision establishes that drivers in applicable markets are subject to facial biometric data collection both at onboarding and during active platform use; under Illinois BIPA and similar statutes, this requires written informed consent and a publicly available retention and destruction schedule.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Uber.