Uber can and will share your personal data — including your location, identity, and trip records — with police, government agencies, and regulators when legally required or when Uber judges there to be a safety or fraud risk.
Your identity documents, GPS history, trip records, and behavioral data can be disclosed to law enforcement and government regulators either under legal compulsion or at Uber's unilateral discretion when it judges there to be a safety or fraud concern — drivers are not necessarily notified when this occurs.
How other platforms handle this
8 Sensory data. Audio, electronic, visual, thermal, olfactory, or similar information. YES (only images you upload to our services) YES
We may engage third-party companies or individuals as service providers or business partners to process Information and support our business. These third parties may, for example, provide virtual computing and storage services, assist Slack with verifying Owners and Customers, or we may share busine...
To Comply With Our Legal Obligations. We may disclose your information with courts, law enforcement authorities, regulators, attorneys or other parties: (A) to comply with laws and legal obligations; (B) for the establishment, exercise, or defense of a legal or equitable claim; (C) to respond to law...
Uber retains broad discretion to disclose driver data to law enforcement beyond mandatory legal obligations, including based on Uber's own safety or fraud determination — this could expose drivers to law enforcement contact based on algorithmic flags rather than verified evidence.
REGULATORY FRAMEWORK: Voluntary law enforcement disclosure is governed by the Electronic Communications Privacy Act (ECPA 18 U.S.C. §2702), which permits but does not require voluntary disclosure to government entities in emergency circumstances; the Stored Communications Act (SCA 18 U.S.C. §2703) governs compelled disclosure. GDPR Art. 6(1)(c) and (e) provide lawful basis for legal obligation disclosures but require necessity and proportionality; GDPR Art. 23 permits restrictions on data subject rights for public security purposes. The Notice's provision for discretionary disclosure based on Uber's 'determination' goes beyond mandatory legal obligation and raises GDPR proportionality concerns.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.
Your genetic data may be transferred to a new owner as a business asset. Here is what the Terms of Service actually say and what you can do right now.