Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The notice states that Uber may disclose driver personal data to law enforcement and government authorities in response to legal process or regulatory requests, and may disclose data to protect rights and safety without specifying minimum legal process thresholds beyond 'legal obligation.'
This analysis describes what Uber's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes disclosure of driver data including background check results, location history, communications, and financial data to government authorities, which is operationally significant for drivers in jurisdictions with active regulatory scrutiny of gig worker classification and for those operating in countries with broad government access powers.
Interpretive note: The notice does not specify the minimum legal process threshold (subpoena, court order, warrant) required before voluntary disclosures occur, creating ambiguity about the scope of this provision in practice.
This provision establishes that Uber may disclose any category of driver personal data to law enforcement and regulators in response to legal process or requests; the notice does not specify whether Uber will notify drivers of such disclosures where legally permissible.
How other platforms handle this
The right to request detailed information about the specific types of Personal Data we've collected over the past 12 months, including data disclosed for business purposes
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
When you are asked to provide information, you may decline to do so; but if you choose not to provide information that is necessary to provide some of our Services, you may not be able to use those Services.
Monitoring
Uber has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Uber may disclose personal data in response to a legal obligation, court order, or governmental request, including from law enforcement and regulatory authorities. Uber may also disclose data as necessary to establish, exercise, or defend legal claims, or to protect the rights, property, or safety of Uber, its users, or others.Excerpt from Uber's Privacy Notice (Drivers and Delivery People)
1) REGULATORY LANDSCAPE: Government access and law enforcement disclosure provisions implicate GDPR Article 6(1)(c) (legal obligation as lawful basis), GDPR Chapter V restrictions on transfers to third countries in response to foreign government orders, the US Electronic Communications Privacy Act (ECPA) for communications data, and the EU-US Data Privacy Framework's government access provisions. In the EU, the Court of Justice (Schrems II) established that government access to personal data transferred to the US remains subject to scrutiny. 2) GOVERNANCE EXPOSURE: Medium. The provision's reference to disclosures 'to protect rights, property, or safety' without specifying minimum legal process requirements is broader than a strict 'legal obligation only' standard and may create tension with GDPR data minimization and purpose limitation principles where voluntary disclosures exceed what is legally required. 3) JURISDICTION FLAGS: EU/EEA (GDPR Chapter V, government access limitations), UK (UK GDPR and Investigatory Powers Act), Brazil (LGPD government access provisions), markets with active gig worker regulatory investigations (California, EU member states). Cross-border government requests for Uber driver data may trigger data transfer restrictions under GDPR. 4) CONTRACT AND VENDOR IMPLICATIONS: B2B clients using Uber for Business who have employees as drivers should be aware that those employees' platform data may be subject to government disclosure without B2B client notification. Vendor and employer data sharing agreements should account for this disclosure pathway. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should assess whether Uber's government access disclosure policy includes a commitment to notify affected individuals where legally permissible, and whether the 'protect rights, property, or safety' voluntary disclosure standard is consistent with applicable law in each operating jurisdiction. GDPR-required documentation of legal obligation disclosures should be maintained.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
This provision authorizes disclosure of driver data including background check results, location history, communications, and financial data to government authorities, which is operationally significant for drivers in jurisdictions with active regulatory scrutiny of gig worker classification and for those operating in countries with broad government access powers.
This provision establishes that Uber may disclose any category of driver personal data to law enforcement and regulators in response to legal process or requests; the notice does not specify whether Uber will notify drivers of such disclosures where legally permissible.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Uber.