Uber collects biometric data including facial recognition images to verify driver identity, which may be processed by third-party providers.
Biometric data is uniquely sensitive and permanent — unlike a password, you cannot change your face, making any misuse or breach particularly serious.
Biometric data collection triggers obligations under Illinois BIPA, Texas CUBI, Washington WBPA, and similar state laws requiring informed written consent, data retention schedules, and prohibition on sale. GDPR Article 9 requires explicit consent or another listed exception for biometric processing.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Uber collects extensive personal data from drivers and delivery workers including precise GPS location, behavioral and performance data, biometric identity verification, and financial information, all of which is shared with insurers, government authorities, and third-party analytics providers. Automated systems are used to make decisions that can affect a driver's access to the platform, including deactivation. You can access, correct, or delete your personal data by submitting a request through the Uber Driver app privacy settings or at privacy.uber.com.