Integrity and trust Data collected as of December 31, 2020. Data privacy and security Organizational Engaging with law enforcement with the exception of emergency 189 10 16,174 Uber is different from other tech requests. Uber reserves the right to Number of FTEs Number of external Number of personnel companies. Because we put real reject legal process for any reason, dedicated to assessments of our who took at least one people in real cars, we are committed including requests that do not have a privacy and security privacy and/or privacy training²⁹ to working with law enforcement and valid legal basis; are overbroad, vague, security programs²⁸ public health officials to respond or otherwise inappropriate; or if Uber quickly to valid data requests from cannot verify the legitimacy of the government agencies. In fact, we built request. Our team of highly trained Reviews and assessments a dedicated portal for both local law public safety response professionals enforcement and public health officials will work with law enforcement to submit inquiries to Uber in a secure personnel to ensure that all requests 950 657 553 manner consistent with our Guidelines are narrowed in scope to disclose for Law Enforcement. Examples of only what is minimally necessary in Privacy Impact Technical Privacy Number of bug how our responses to these requests response to the legal process. Assessments Reviews completed bounty reports assists with public safety include Every year, we produce a Transparency completed³⁰ submitted investigations related to financial Report outlining the number of US fraud, locating missing persons, and and Canada government requests preventing exposure to infectious we’ve received and how we responded diseases (such as COVID-19). to them in certain markets. Our User controls and requests For US law enforcement, Uber will transparency report is the first in the disclose information where required by mobility space and one of a few in the legal process issued pursuant to the ICT industry that discloses information 25,245 43 Electronic Communications Privacy about how non-law enforcement Number of user data Number of privacy features Act (ECPA) and other legal authorities. entities, like transportation agencies, downloads through available to riders, drivers, All law enforcement requests for data request data from our business. Download Your Data feature³¹ or Uber Eats users must be supported by legal process, ²⁸Assessments performed by independent third parties. ²⁹Full-time employees and contracted personnel who completed at least one of Uber's five privacy-related trainings in 2020. 2021 ESG Report ³⁰Total number of Privacy Impact Assessments completed, or updated. 6262 ³¹Number represents user data downloads requested and completed in 2020.

Uber ESG Report - Page 62 Uber ESG Report Page 61 Page 63