Menu
Uber to pay $20,000 in settlement on privacy issues with New York attorney general

Uber to pay $20,000 in settlement on privacy issues with New York attorney general

Uber will also secure and restrict employee access to customer geo-location data

Uber has agreed to pay a penalty of US$20,000 in a settlement with New York Attorney General Eric T. Schneiderman for delaying in reporting to drivers the data breach of their personal information in 2014.

The ride-hailing company has also agreed to tighten employee access to geo-location data of passengers, following reports that the company's executives had an aerial "God View" of such data, the office of the attorney general said in a statement Wednesday.

Uber notified Schneiderman's office on Feb. 26, 2015 that driver names and license numbers were accessed by an unauthorized third party in a data breach that was discovered as early as September 2014. The fine has been imposed on the company for its delay in providing timely notice of the data breach to the affected drivers and the office of the attorney general.

An Uber engineer had posted on Github.com in early 2014 an access ID for Uber’s third-party cloud storage in a post accessible to the public, and by May 12, 2014, someone not linked to Uber had accessed the database that included the driver information, according to the attorney general's office.

Uber also ran into controversy in 2014 following a report on BuzzFeed that an Uber executive had used “God View” to track its reporter's ride without permission. The controversy prompted U.S. Senator Al Franken, who is also a ranking member of the Senate Subcommittee on Privacy, Technology, and the Law,  to ask Uber questions about its privacy policies, including who in the company and for what reason had access to the "God View" tool.

Schneiderman launched an investigation in November 2014 into Uber's handling of customer personal information it collects, such as names, email addresses, phone numbers and payment information.

"Uber also collects the geographic location of riders and drivers in real time," according to the statement from Schneiderman's office. But Uber has now agreed under the settlement "to maintain and store GPS-based location information in a password-protected environment, and encrypt the information when in transit."

The company has also agreed to take measures like limiting access to geo-location information to certain employees with a legitimate business purpose, and having technical access controls.

Uber could not be immediately reached for comment on the announcement of the settlement.


Follow Us

Join the New Zealand Reseller News newsletter!

Error: Please check your email address.

Featured

Slideshows

Sizing up the NZ security spectrum - Where's the channel sweet spot?

Sizing up the NZ security spectrum - Where's the channel sweet spot?

From new extortion schemes, outside threats and rising cyber attacks, the art of securing the enterprise has seldom been so complex or challenging. With distance no longer a viable defence, Kiwi businesses are fighting to stay ahead of the security curve. In total, 28 per cent of local businesses faced a cyber attack last year, with the number in New Zealand set to rise in 2017. Yet amidst the sensationalism, media headlines and ongoing high profile breaches, confusion floods the channel, as partners seek strategic methods to combat rising sophistication from attackers. In sizing up the security spectrum, this Reseller News roundtable - in association with F5 Networks, Kaspersky Lab, Tech Data, Sophos and SonicWall - assessed where the channel sweet spot is within the New Zealand channel. Photos by Maria Stefina.

Sizing up the NZ security spectrum - Where's the channel sweet spot?
Kiwi channel comes together for another round of After Hours

Kiwi channel comes together for another round of After Hours

The channel came together for another round of After Hours, with a bumper crowd of distributors, vendors and partners descending on The Jefferson in Auckland. Photos by Maria Stefina.​

Kiwi channel comes together for another round of After Hours
Consegna comes to town with AWS cloud offerings launch in Auckland

Consegna comes to town with AWS cloud offerings launch in Auckland

Emerging start-up Consegna has officially launched its cloud offerings in the New Zealand market, through a kick-off event held at Seafarers Building in Auckland.​ Founded in June 2016, the Auckland-based business is backed by AWS and supported by a global team of cloud specialists, leveraging global managed services partnerships with Rackspace locally.

Consegna comes to town with AWS cloud offerings launch in Auckland
Show Comments