Transparency Report: Government Requests for Data

Rideshare companies have long been required to provide regulators with information about the trips that are facilitated with their apps, but few provide public transparency about these requirements. By publishing this report, we hope to give consumers more visibility into how their data is shared between companies and government agencies and enable them to consider the type and scope of data that regulators have access to. Uber’s Transparency Report was the first of its kind to address rideshare services and gives an overview of what we provide to government agencies in the US and Canada.

Currently, this report covers data we are compelled to share with regulators, airports, and law enforcement agencies for different parts of our business in the US and Canada. This report is not an exhaustive overview; for example, it does not cover the location data that local jurisdictions compel us to share about trips taken with bikes and scooters. However, we’re committed to expanding the report in the future to cover our growing set of mobility options and adequately reflect the ever-growing and complex reporting requirements we’re subject to as a regulated global business.

When regulatory agencies ask for more information than is necessary to fulfill their obligations—or information that is commercially or personally sensitive—we seek to narrow our response. This may involve negotiations with the regulatory agency, and in some cases it has required defending ourselves in legal proceedings before the agency or in court.

Not always. But we do ask for this information to ensure that data requests are limited to legitimate regulatory purposes.

We have attempted to limit agencies from disclosing commercially or personally sensitive information. But agencies may disregard our requests and complaints, collecting far more data than necessary to fulfill their obligations and therefore creating additional risks that this data is publicly exposed. In addition, regulatory agencies may disclose this information through open data portals or when responding to Freedom of Information Act requests.

Only in some cases. Taxis are not always bound by the same agencies or regulations as Uber is. Depending on the location, the authorities and rules that apply to each type of company may vary.

State and local regulators have very different objectives from airport authorities. State and local regulators, like public utility commissions, are responsible for ensuring that certain companies operate in accordance with the applicable regulations, including those governing safety. Airport authorities often defer to state and/or local regulations but may require additional data requirements that allow them to track and count the number of vehicles on their property.

Rideshare companies must agree to airport rules as part of the permitting process. Each airport authority independently determines what information is required to be reported to them.

Yes, some ask to have information broken out by ride option type or the regulatory framework that each vehicle is operating under.

Yes. The information airports request and receive from taxis, limousines, and livery providers is generally consistent with what is disclosed in this report.

Airport authorities don’t tell us what they do with the information we provide.

During a criminal investigation, law enforcement agencies may ask us for information about user(s) that’s relevant to the investigation. Our dedicated team of experts, who are trained to manage these requests, work to ensure that any information we disclose is consistent with our policies and applicable law.

Uber is committed to protecting the privacy and security of our users’ data. With limited exceptions like emergencies, we require a valid and sufficient legal process from official government agencies before we disclose any information about our users. When we receive a request from law enforcement, we review it to ensure that it satisfies legal requirements. We object to overly broad, vague, or unreasonable requests.

Yes. National security requests include orders and directives issued under the Foreign Intelligence Surveillance Act (FISA) and national security letters (NSLs). Unfortunately, we’re prohibited from reporting exact numbers of NSLs or FISA orders received; pursuant to US law, these numbers are reported within ranges and are subject to a one-year reporting delay.

To learn more about our process and requirements for responding to law enforcement requests in the US, see Uber’s Guidelines for United States Law Enforcement. For the rest of the world, see the Uber Guidelines for Law Enforcement Authorities - Outside the US.