Get the weekly research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean. No account.
The notice states that government-issued identification documents including driver's license information and national ID numbers are collected from drivers as a condition of account registration and regulatory compliance.
This analysis describes what Uber's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
Government-issued identification numbers constitute sensitive personal information under CPRA and personal data subject to heightened protection under GDPR, and their collection and retention creates obligations regarding secure storage, access controls, and defined retention periods that should be documented in compliance programs.
This provision establishes that drivers must provide government-issued identity documents including license numbers and national identification numbers as a condition of platform access; this data is retained by Uber and subject to the sharing and disclosure practices described throughout the notice.
How other platforms handle this
We may also collect and use personal information with your consent...You can revoke your consent at any time (mostly through our services directly), though note that you might not be able to use any service or feature...
The right to notice. You have the right to be notified which categories of Personal Data are being collected and the purposes for which the Personal Data is being used.
If you choose to reveal any personal information about yourself to other users, you do so at your own risk. We strongly encourage you to use caution in disclosing any personal information online.
Monitoring
Uber has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 20 platforms.
"Uber collects government-issued identification documents from drivers and delivery people as part of the account registration and verification process. This may include driver's license information, national identification numbers, and other identity documents required by local regulations.Excerpt from Uber's Privacy Notice (Drivers and Delivery People)
1) REGULATORY LANDSCAPE: Government-issued identification number collection implicates CPRA (government ID as sensitive personal information, requiring disclosure and proportionate use), GDPR (processing requires a lawful basis and must satisfy data minimization), various US state data breach notification laws that include government ID numbers as covered personal information (California, New York SHIELD Act, and others). The FTC Act applies to deceptive or unfair practices in collecting and securing government ID data. 2) GOVERNANCE EXPOSURE: Medium. Government ID data is a frequent target category in data breach incidents and is specifically enumerated in most US state breach notification statutes, meaning any security incident involving this data category would trigger multi-state notification obligations. Retention of government ID beyond the period necessary for onboarding and verification should be specifically justified. 3) JURISDICTION FLAGS: California (CPRA sensitive personal information, CCPA breach notification), New York (SHIELD Act, which covers government ID numbers as private information), all 50 US states (varying breach notification statutes covering government ID numbers), EU/EEA (GDPR data minimization and retention limitation principles). 4) CONTRACT AND VENDOR IMPLICATIONS: Third-party identity verification vendors receiving government ID documents and numbers must be assessed for compliance with applicable data security and privacy statutes. Vendor contracts should specify retention periods, prohibition on secondary use, and breach notification obligations. 5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that government ID data retention schedules are defined and enforced, that access to government ID data is limited to personnel and systems with a documented need, and that incident response plans specifically address government ID data as a high-priority breach category triggering multi-state notification obligations.
Regulatory citations, enforcement risk, and due diligence action items.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Provision-level monitoring, governance timelines, and regulatory mapping built from archived source documents and historical version tracking.
Government-issued identification numbers constitute sensitive personal information under CPRA and personal data subject to heightened protection under GDPR, and their collection and retention creates obligations regarding secure storage, access controls, and defined retention periods that should be documented in compliance programs.
This provision establishes that drivers must provide government-issued identity documents including license numbers and national identification numbers as a condition of platform access; this data is retained by Uber and subject to the sharing and disclosure practices described throughout the notice.
ConductAtlas has identified this type of provision across 295 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Uber.