Uber collects your photo and uses facial recognition technology to verify your identity both when you sign up and periodically while you're actively driving — this is called Real-Time ID Check.
Uber collects your facial biometric data via Real-Time ID Checks during active driving sessions, meaning your face is being scanned and matched algorithmically on an ongoing basis — this data is subject to breach risk and triggers mandatory consent requirements under Illinois BIPA and GDPR that Uber must demonstrably satisfy.
How other platforms handle this
We automatically collect information as you use our Services. This includes: Logs Data - We collect device and network connection information when you access and use the Services. This may include your IP address, user-agent string, browser type, operating system, referral URLs, device information (...
apiName: getBattery, apiObj: navigator, apiType: method, block: false, sampleRate: 0.00005, stackRate: 0
If you use our chat feature, we and our service providers may record your chats and keep transcripts.
Facial recognition and biometric data are among the most sensitive personal data categories under law — once compromised, they cannot be changed, and collection without proper consent violates Illinois BIPA and GDPR Art. 9.
REGULATORY FRAMEWORK: Biometric data collection directly implicates Illinois BIPA 740 ILCS 14/1 et seq., which requires written informed consent, a publicly available retention schedule, and prohibits sale or profit from biometric data; Texas CUBI (Bus. & Com. Code §503.001); Washington My Health MY Data Act (for health-adjacent biometrics); GDPR Art. 9(1) (explicit consent required for biometric data used for unique identification); CCPA/CPRA definition of sensitive personal information (§1798.140(ae)(1)(B)); and EU AI Act provisions on biometric identification systems.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Netflix updated its Privacy Statement on April 18, 2026, disclosing voice recording collection and expanded household ad profiling for the first time.
Google's Privacy Policy covers Search, Gmail, YouTube, Maps, and every site running Google Analytics. Here is what it actually authorizes.