California residents have rights under the CCPA/CPRA to know what personal data is collected, request deletion, opt out of data sales, and not be discriminated against for exercising these rights.
California drivers have enhanced legal rights to control their personal data and can take specific actions to limit how Uber uses and shares it.
CPRA compliance requires Uber to honor opt-out of sale and sharing requests within 15 business days, respond to verified consumer requests within 45 days (extendable by 45 days), maintain a 'Do Not Sell or Share My Personal Information' mechanism, and conduct annual cybersecurity audits for businesses that process sensitive data at significant scale.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Uber collects extensive personal data from drivers and delivery workers including precise GPS location, behavioral and performance data, biometric identity verification, and financial information, all of which is shared with insurers, government authorities, and third-party analytics providers. Automated systems are used to make decisions that can affect a driver's access to the platform, including deactivation. You can access, correct, or delete your personal data by submitting a request through the Uber Driver app privacy settings or at privacy.uber.com.