Uber Technologies and GDPR
CertReports found no public GDPR evidence for Uber Technologies as of unknown date. This does not mean the vendor is non-compliant. It means CertReports found no public evidence at the last check.
Evidence
- Kind
- listing
- Issued or listed
- 27 Nov 2023
- Expires or valid through
- 15 Oct 2026
- Scope
- This certification applies to UTI’s processing of personal information originating from the European Economic Area (“EEA”), United Kingdom (“UK”) or Switzerland. UTI processes this personal information to provide, maintain, and/or improve the UTI services requested by and/or on behalf of those data subjects. Depending on the services requested, UTI also processes such personal information for purposes of safety, fraud protection and security; customer support; research and development; to enable communications between data subjects; to send non-marketing communications to data subjects; and in connection with legal proceedings and requirements. For more information regarding UTI’s processing of personal information, including personal information not in scope of this certification, please see UTI’s User Privacy Notice at the link below. UTI processes personal information of employees and candidates of UTI or its affiliates in the EEA, UK or Switzerland in connection with their recruitment to, and employment with, UTI or its affiliates. This includes processing such personal information for purposes of communications; human resources administration; internal operations; investigations, litigation and law enforcement; learning; payroll; and safety and security. UTI’s processing of the personal information of its employees and candidates, and those of its affiliates is described in detail in UTI’s Employee Privacy Notice and UTI’s Candidate Privacy Notice. UTI also processes personal information originating from the EEA, UK, or Switzerland to support the development and evaluation of advanced mobility technologies. This includes processing personal data incidentally collected through sensor and video-based systems operating in public spaces, such as public roadways. UTI's processing of such personal information is described in detail in UTI's Privacy Notice for Road Video Collection.
| Source | Captured | Quote | Links |
|---|---|---|---|
Data Privacy Framework list Official registry · HTTP 200 | 17 Sep 2026 | Uber Technologies Inc.: Active: EU-US Certification, UK Extension Certification, SW-US Certification | Live pagesha256 c5346f0fb2 |
What GDPR means, and what it does not
"GDPR compliant" is a claim, not a certification. The verifiable facts are a public DPA, SCC usage, an EU representative, data residency options and a Data Privacy Framework listing.
Read the GDPR guide and browse all vendors with evidenceQuestions buyers ask
Is Uber Technologies GDPR compliant?
There is no GDPR certification in general use. The verifiable facts are a public data processing agreement, standard contractual clauses, an EU representative and a Data Privacy Framework listing. See the legal artefacts and the DPF row on this page, each with its capture date.
How does CertReports verify this?
Every state carries a capture date, a source and a snapshot link. Registry rows come from the official registry data; vendor statements come from the vendor’s own page or trust centre; nothing is inferred. Vendors can dispute any row and corrections ship within two business days.
Alternatives with GDPR evidence
Similar vendors (shared product tags) whose GDPR row is verified or vendor-stated, ranked by similarity.
No same-category vendor has GDPR evidence in the index yet.