Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
Uber collects your bank account routing numbers, payment card details, and tax information to pay you for completed trips and to fulfill tax reporting requirements.
This analysis describes what Uber's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Financial account data and tax information are sensitive categories of personal data whose exposure creates direct financial risk; the notice authorizes Uber to retain and use this data for both payment processing and tax compliance, and to share it with financial services partners and tax authorities.
The notice states that Uber collects bank routing numbers and tax identification information from drivers, which is shared with payment processing partners and may be reported to tax authorities, creating both financial data security considerations and tax disclosure implications.
How other platforms handle this
The right to notice. You have the right to be notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used.
In certain circumstances, the right to data portability, which means that you can request that we provide certain Personal Data we hold about you in a machine-readable format
If you want to see what information we have collected about you, you can request a copy of your data in the Data & Privacy section of your User Settings. You should receive your data packet within 30 days.
Monitoring
Uber has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Uber collects financial information such as bank routing numbers, tax information, or payment card information provided by drivers and delivery people for the purpose of processing payments for services rendered through the platform, and for compliance with tax reporting obligations.Excerpt from Uber's Privacy Notice (Drivers and Delivery People)
1) REGULATORY LANDSCAPE: Collection and processing of financial account data engages the Gramm-Leach-Bliley Act where applicable, PCI DSS standards for payment card data, and IRS Form 1099 reporting requirements for US gig workers. GDPR and CCPA also apply to financial data as personal information. The FTC has authority over financial data security practices under Section 5 of the FTC Act. 2) GOVERNANCE EXPOSURE: Medium. Payment and tax data handling is operationally standard for platforms that compensate independent contractors, but data breach exposure involving bank routing or tax ID data creates significant financial and identity theft risk for drivers. The notice does not detail specific security measures for financial data beyond general data security statements. 3) JURISDICTION FLAGS: US drivers are subject to IRS 1099-K reporting thresholds, which have changed in recent years and may affect drivers' tax planning. EU drivers may have GDPR rights to access records of financial data processing. California drivers have CPRA rights over financial information as personal data. 4) CONTRACT AND VENDOR IMPLICATIONS: Payment processing vendors handling bank routing data must comply with PCI DSS and applicable financial data protection standards. Data processing agreements should specify data minimisation, encryption, and breach notification obligations. 5) COMPLIANCE CONSIDERATIONS: Legal teams should verify that financial data security controls meet FTC Safeguards Rule requirements, confirm that IRS reporting workflows are current with applicable thresholds, and ensure driver-facing disclosures about tax reporting are accurate and complete.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Financial account data and tax information are sensitive categories of personal data whose exposure creates direct financial risk; the notice authorizes Uber to retain and use this data for both payment processing and tax compliance, and to share it with financial services partners and tax authorities.
The notice states that Uber collects bank routing numbers and tax identification information from drivers, which is shared with payment processing partners and may be reported to tax authorities, creating both financial data security considerations and tax disclosure implications.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Uber.