Uber Agrees to Expanded Settlement with FTC Related to Privacy, Security Claims

Uber Technologies has agreed to expand the proposed settlement it reached with the Federal Trade Commission in 2017 over charges that the ride-sharing company deceived consumers about its privacy and data security practices. After the announcement of 2017’s proposed settlement, the FTC learned that Uber had failed to disclose a significant breach of consumer data that occurred in 2016 -- in the midst of the FTC’s investigation that led to the August 2017 settlement announcement. Due to Uber’s misconduct related to the 2016 breach, Uber will be subject to additional requirements. Among other things, the revised settlement could subject Uber to civil penalties if it fails to notify the FTC of certain future incidents involving unauthorized access of consumer information.