Uber Pledges to Improve Data Privacy Practices

Photo
An Uber driver in New York. Uber said it would adopt new policies on privacy and data security.Credit Sam Hodgson for The New York Times

Uber, the popular ride-hailing start-up, on Friday said it would strengthen its data privacy practices, responding to months of criticism that the company had taken a lackadaisical approach to guarding the customer information.

The company said it would adopt a series of new policies, including mandatory employee training on privacy and data security, among other improvements.

The news comes two months after an article from BuzzFeed News reported that an Uber employee had accessed the ride history of a journalist who wrote about the company. The story quickly caught the attention of privacy advocated like Senator Al Franken, Democrat of Minnesota.

Shortly thereafter, Uber enlisted the aid of Hogan Lovells, a Washington law firm, to conduct an audit of Uber’s privacy practices. Harriet Pearson, the Hogan Lovells partner who led the audit, recommended 10 general areas for the company to improve upon. Some of those suggestions included developing a schedule for regular reviews of the company’s privacy program, and more stringently reviewing how Uber partners deal with data security.

“Uber has put a strong privacy program in place,” Ms. Pearson said in a conference call with reporters on Friday. “Is there room for improvement? Yes.”

Many of the early privacy blunders, Uber said, were the result of the company’s rapid growth. The company has expanded to operating in nearly 300 cities around the globe in just a few years. As Uber grew, the company did not properly scale its internal data privacy tools and policies at a fast enough pace.

“It’s important to remember that we are a company that has grown exponentially in a short amount of time,” Katherine Tassi, Uber’s managing counsel of data privacy, said in the conference call. “It was only about a year ago that we were a quarter of the size we are now. Our policies have developed.”

According to the Hogan Lovells report, Uber now restricts access to user ride data based on the job responsibilities of the employee. The report said that a digital map that allowed employees to see the locations of riders in real-time — known internally as “God View” — was “retired over a year ago and replaced with an operations tool that now masks consumer data.”

Along with these changes, Uber said it soon planned to release a clearer version of its privacy policy to better explain its practices to users.

Related

Uber Accused of Lax Safety Practices by Delhi Woman

Uber Accused of Lax Safety Practices by Delhi Woman

The woman who says she was sexually assaulted by an Uber driver says in a lawsuit filed in California that the company does not adequately screen its drivers, risking the safety of Uber customers.