FOI request detail

Uber's data protection violations

Request ID: FOI-2404-2425
Date published: 22 November 2024

You asked

Dear Sir/Madam, Under the Freedom of Information Act 2000, I would like to request the following information: - The number of Uber's own data protection violations (including all data breaches, material data losses or infringements of data protection law) in the UK that the company reported to Transport for London If possible, please provide a breakdown of the types of data protection violations disclosed, who was affected (drivers, couriers and/or customers) and the outcomes of these data protection violations - The number of Uber's own data protection violations (including all data breaches, material data losses or infringements of data protection law) abroad (countries outside the UK) that the company reported to Transport for London If possible, please provide a breakdown of the types of data protection violations disclosed, who was affected (drivers, couriers and/or customers) and the outcomes of these data protection violations - The number of investigations opened into the above, and outcome of these investigations Please provide the data for the following years, separately, 2024 (year to date), 2023, 2022, 2021, 2020 and 2019. If necessary so as not to exceed the cost/time limit, please refine this to 2024, 2023 and 2022. In the event that you exercise an exemption on any of the above data, please could you supply me with total figures and summary of types of data protection violations that occurred at Uber. There is a clear legitimate public interest in this disclosure as it concerns data protection, which is enshrined in GDPR and other legislation, and such reporting was a condition of Uber's license.

We answered

Our ref: FOI-2404-2425/GH 

  

Thank you for your request received by Transport for London (TfL) on 28 October 2024 asking for information about Uber's data protection violations. 

  

Your request has been considered under the requirements of the Freedom of Information Act 2000 and our information access policy. I can confirm that we do hold the information you require. You asked: 

  

- The number of Uber's own data protection violations (including all data breaches, material data losses or infringements of data protection law) in the UK that the company reported to Transport for London 
If possible, please provide a breakdown of the types of data protection violations disclosed, who was affected (drivers, couriers and/or customers) and the outcomes of these data protection violations 
 
- The number of Uber's own data protection violations (including all data breaches, material data losses or infringements of data protection law) abroad (countries outside the UK) that the company reported to Transport for London 
If possible, please provide a breakdown of the types of data protection violations disclosed, who was affected (drivers, couriers and/or customers) and the outcomes of these data protection violations 
 
- The number of investigations opened into the above, and outcome of these investigations 
 
Please provide the data for the following years, separately, 2024 (year to date), 2023, 2022, 2021, 2020 and 2019. If necessary so as not to exceed the cost/time limit, please refine this to 2024, 2023 and 2022. 
 
In the event that you exercise an exemption on any of the above data, please could you supply me with total figures and summary of types of data protection violations that occurred at Uber. 

 

Transport for London intends to publish, on its website, documents relating to its decision to grant Uber London Limited licences in 2022 and 2024. These documents will provide the information you have requested. We anticipate this information will be published in 2025 at this location: https://tfl.gov.uk/info-for/taxis-and-private-hire/press-releases-and-news

 

Therefore, in accordance with the FOI Act, TfL is not obliged to supply you with the information you have requested as it is subject to a statutory exemption to the right of access to information, under Section 22 of the Act. In this instance the exemption has been applied as the information you have requested is intended for future publication. 

 

This exemption is subject to a public interest test, which requires us to assess whether the public interest in applying the exemption outweighs the public interest in disclosure. In this instance, it is considered that the public interest favours the publication of this information, in context and according to the pre-determined schedule, rather than in response to your request, to ensure the information is provided accurately and in an accessible manner. 

  

If you are not satisfied with this response, please see the attached information sheet for details of your right to appeal. 

  

Yours sincerely 

  

Graham Hurt 

FOI Case Officer 

FOI Case Management Team 

General Counsel 

Transport for London 

Back to top

Want to make a request?

We'll email you the response within 20 working days.


We'll publish the response online without disclosing any personal information.