Discrepancy in personal data release at Uber
- Request to:
- Law used:
Wet bescherming persoonsgegevens
- Status of this request:
- Response overdue
- Due date:
Jan. 13, 2017 - 1 year, 6 months ago
How is this calculated?
- Summary of Request
- Dear Uber NL,
A while ago I submitted a request to Uber for access to my personal data, under the EU Data Protection Directive's translation into Dutch law, since this is where Uber is established for the purpose of the Directive. I did receive some files, that I have chosen to make available in an anonymized form to the general public at
Indeed, I believe that some accountability on the part of internet platforms is necessary, which will emerge out of individual users asking for more transparency and further efforts by civil society. I am often asked what good it makes to have a copy of your data, since that step in itself requires the trust that the data controller will reply truthfully to the subject access request. I have always responded that you could then compare with other data subjects or data controllers, and that there might always be a breach of data.
Today it looks like Uber has suffered some sort of breach: an article in TechCrunch, available at
talks about an ongoing lawsuit, where the plaintiff has introduced as exhibit their own personal data:
(p. 6 - 42).
As observed by the journalist who wrote the article, my own data disclosure does not seem to have had nearly as much data.
I remind you that under the EU Data Protection Directive,
(a) 'personal data' shall mean any information relating to an identified or identifiable natural person ('data subject');
I understand everything included in this appendix to be the plaintiff's personal data, since it is tied to this natural person. I would like to similarly get a copy of my personal data, for every single one of the fields present in that appendix and available for my account, in an intelligible form.