Notes from performance data 37This report reflects audited sexual assault reports that were classified into one 43Value represents the number of users whose data Uber disclosed in response of these categories. Uber occasionally receives notice of a potential sexual assault to a valid request from law enforcement or public health authorities. It is well after the trip has ended. The sexual assault data presented includes incident distinct from the number of users whose information was “requested.” We use reports resolved on or before October 31, 2019, and for this reason may change “disclosed” to reflect that requests are not necessarily or consistently account- over time. based. Due to the nature of our business, we may receive requests for an undefined number of users based on a specific set of parameters (i.e., date and 38Incident reports as a percent of total trips are rounded. time, geography). Our team may work with the requesting agency to narrow the scope of an inquiry or inquiries to minimize the number of users impacted. Thus, 39Percent of respondents indicating that they are either somewhat satisfied or we have determined that the number of user accounts with data disclosed is a very satisfied with their experience with Uber. more meaningful metric than the number of user accounts with data requested. 40 44 Surveys are performed at the line-of-business level within each country of “User data” refers to any information that relates to or is associated with an interest. Country-level results have been aggregated to a global level by creating identified or identifiable natural person. To learn more about our process and a weighted average based on each country’s total gross bookings in 2019. requirements for responding to public health requests, see Uber’s Guidelines for Public Health Authorities. “Requests” include any response related to outbreaks 41 Survey frequencies vary. Monthly line-of-business surveys are weighted, of infectious diseases such as the novel coronavirus (COVID-19). and averaged over the course of the year. The line-of-business results are then aggregated at a country level, using a weighted average based on gross 45A cybersecurity breach is material if it could have an adverse effect on our bookings as of November 2020. business, financial condition, operating results, or prospects. 42 46 “User data” refers to any information that relates to or is associated with an Amount refers to 3 private settlements in the US related to the 2014 and 2016 identified or identifiable natural person. To learn more about our process and data incidents that were paid out in 2020. requirements for responding to law enforcement requests in the US, see Uber’s Guidelines for Law Enforcement Authorities. Uber gives an extensive overview 47Amount includes all judgments, fines, and penalties paid as a result of of information provided to federal and state regulators and law enforcement antitrust-related legal proceedings. The entire amount for CY 2020 is related to agencies in the US and Canada here. the divestiture of Uber’s Southeast Asia business to Grab in 2018. 48Payment made in local currency; USD figure calculated using exchange rate as of December 31, 2020. 2021 ESG Report 92