The policy states that Uber collects facial verification and biometric data from users in jurisdictions where applicable law permits or requires it, using facial recognition technology for identity verification purposes including its Real-Time ID Check feature.
This analysis describes what Uber's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision authorizes collection of biometric identifiers, a category of sensitive personal data subject to specific statutory requirements in Illinois, Texas, Washington, and other jurisdictions, with distinct consent, retention, and destruction obligations that may exceed what a general privacy policy disclosure satisfies.
Interpretive note: Whether the policy's consent framing satisfies jurisdiction-specific written consent requirements under BIPA and analogous statutes requires legal analysis beyond the document text alone.
Under this clause, users in applicable jurisdictions may have biometric facial data collected and processed by Uber's identity verification systems. The policy states collection occurs when users choose to share such data or where required by law, but the adequacy of this framing under state biometric privacy laws depends on jurisdiction-specific requirements.
How other platforms handle this
to request that your data be transferred to a third party (data portability)
Your organization may allow you to access and export your data in order to back it up or transfer it to a service outside of Google.
To stop us collecting your location information, you can update your device settings, stop using the Service, or uninstall our mobile apps.
"We collect biometric data, including facial verification data, if you choose to share it, or where permitted or required by applicable law. We may use facial recognition technology to compare your photo against a selfie you take when verifying your identity, checking that you are wearing a mask, or otherwise verifying your identity as part of our Real-Time ID Check feature.Excerpt from Uber's Privacy Notice
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Search "[your state] attorney general consumer complaint" to find your state's direct complaint form
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision authorizes collection of biometric identifiers, a category of sensitive personal data subject to specific statutory requirements in Illinois, Texas, Washington, and other jurisdictions, with distinct consent, retention, and destruction obligations that may exceed what a general privacy policy disclosure satisfies.
Under this clause, users in applicable jurisdictions may have biometric facial data collected and processed by Uber's identity verification systems. The policy states collection occurs when users choose to share such data or where required by law, but the adequacy of this framing under state biometric privacy laws depends on jurisdiction-specific requirements.
ConductAtlas has identified this type of provision across 290 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Uber.