Integrity and trust Data privacy and security At Uber, we believe that proper data management right thing. Period. Our focus on law and ethics forms is key to responsible innovation. Uber’s mission is a strong foundation on which we build trust and to be a trusted steward of our users’ personal data confidence in a consistently positive user experience in every market where we operate. To bring this around the world. And as a data-driven company, mission to life, Uber focuses on consumer privacy we believe it’s everyone’s job to understand how and data protection every day. These are shared that data is used, managed, and protected. All full- responsibilities in which every employee is expected time employees receive mandatory data privacy and to participate. Uber has a large and diverse team of security training during their onboarding process and privacy and security professionals from all over the annually thereafter. Uber employees may also receive world and across legal, engineering, product, and additional privacy and security training based on public policy organizations, who are dedicated to, their role, or if they volunteer for Uber’s Privacy and passionate about, protecting user data. Champion program. Privacy Principles We build privacy into our products from start to Uber is guided not only legally by its obligations finish. Uber’s Privacy-by-Design process identifies under global privacy laws, but also ethically by its potential personal data privacy legal and ethical Privacy Principles, modeled after the Fair Information risks, evaluates those risks, and identifies ways Practice Principles (FIPPs). The FIPPs have formed to appropriately mitigate them. The process is the foundation of many countries’ privacy and applied not only to Uber’s product development and data protection laws around the world over many engineering activities, but also to its marketing- years. Applying the concepts from the FIPPs to our related activities and other initiatives that involve business, Uber created and published the following managing personal data. For example, in many Privacy Principles, which provide common goals for markets, we use address anonymization to obscure the responsible collection and use of personal data, precise pickup and dropoff details from driver receipts regardless of where our users live or travel. post-trip, and we use phone anonymization to allow We do the right thing with data. Uber’s Privacy drivers and riders to communicate without sharing Principles start with one of our core values: Do the their personal phone numbers. 2021 ESG Report 60