Uber Technologies Inc. agreed Tuesday to submit to regular audits of its privacy protocols to resolve Federal Trade Commission allegations that the ride-hailing platform failed to properly safeguard sensitive data and misrepresented its monitoring of employee access to consumers' personal information.

Following news reports about employees improperly accessing customer data, Uber released a statement in November 2014 stating that the company had a “strict policy prohibiting” such practices and, the next month, developed an automated system for monitoring staff's access to consumers' personal information. But less than a year later, Uber stopped using that system, the FTC alleged Tuesday. The FTC also accused Uber of failing to adequately protect personal information stored with Amazon Web Services, a third-party cloud provider, allowing a hacker to access the names, driver's license numbers and other sensitive data about more than 100,000 drivers in May 2014.

“Uber failed consumers in two key ways: First by misrepresenting the extent to which it monitored its employees' access to personal information about users and drivers, and second by misrepresenting that it took reasonable steps to secure that data,” said FTC acting Chairwoman Maureen K. Ohlhausen. “This case shows that, even if you're a fast-growing company, you can't leave consumers behind: you must honor your privacy and security promises.”

This content has been archived. It is available through our partners, LexisNexis® and Bloomberg Law.

To view this content, please continue to their sites.

Go To Lexis →

Not a Lexis Subscriber?
Subscribe Now

Go To Bloomberg Law →

Not a Bloomberg Law Subscriber?
Subscribe Now

NOT FOR REPRINT