6 unchanged sentences
The CISO has served in such role since February 2021 and has more than 20+ years of engineering and/or cybersecurity experience, including previously as CISO and Deputy Chief Technology Officer at a Fortune 500 company.
−Removed: The cybersecurity program is also supported by Uber’s Chief Privacy Officer and Associate General Counsel, Privacy & Cybersecurity (“CPO”), who has served in that role since August 2018.
−Removed: The CPO has over three decades of experience as a legal advisor to multinational corporations, including serving as Chief Privacy & Security Counsel for a Fortune 100 technology company prior to her role at Uber.
−Removed: The cybersecurity program is supported by other members of Uber’s senior management team as well, including the Chief Legal Officer, Chief Architect Officer, and Global Data Protection Officer.
+Added: The cybersecurity program is also supported by Uber’s Chief Privacy Officer and Vice President, Privacy & Cybersecurity (“CPO”), who has served in that role since November 2025.
+Added: The CPO has over three decades of legal experience spanning across technology, government, privacy, AI, cybersecurity, and media, including having served as Chief Privacy Officer at two Fortune 500 companies prior to her role at Uber.
+Added: The cybersecurity program is supported by other members of Uber’s senior management team as well, including the Chief Legal Officer and Chief Technology Officer.
Uber’s Board of Directors oversees the cybersecurity program through regular updates.
26 unchanged sentences
In addition, Uber’s third-party suppliers and service providers who process Uber personal data are contractually obligated to notify Uber if they experience certain incidents impacting Uber personal data.
−Removed: For a discussion regarding risks from cybersecurity threats, see our risk factors, including the risk factors titled “— We have experienced, and may experience security or privacy breaches or other unauthorized or improper access to, use of, disclosure of, alteration of or destruction of our proprietary or confidential data, employee data, or platform user data, which could cause loss of revenue, harm to our brand, business disruption, and significant liabilities” , “—Cyberattacks, including computer malware, ransomware, viruses, denial of service attacks, spamming, phishing and social engineering attacks could harm our reputation, business, and operating results”, “—We currently are subject to a number of inquiries, investigations, and requests for information from the DOJ, other federal, state and local government agencies and other foreign government agencies, the adverse outcomes of which could harm our business” and “—We face risks related to our collection, use, transfer, disclosure, and other processing of data, which could result in investigations, inquiries, litigation, fines, legislative and regulatory action, and negative press about our privacy and data protection practices” in Part I, Item 1A of this Annual Report on Form 10-K.
+Added: For a discussion regarding risks from cybersecurity threats, see our risk factors, including the risk factors titled “— We have experienced, and may experience security or privacy breaches or other unauthorized or improper access to, use of, disclosure of,
+Added: alteration of or destruction of our proprietary or confidential data, employee data, or platform user data, which could cause loss of revenue, harm to our brand, business disruption, and significant liabilities” , “—Cyberattacks, including computer malware, ransomware, viruses, denial of service attacks, spamming, phishing and social engineering attacks could harm our reputation, business, and operating results”, “—We currently are subject to a number of inquiries, investigations, and requests for information from the DOJ, other federal, state and local government agencies and other foreign government agencies, the adverse outcomes of which could harm our business” and “—We face risks related to our collection, use, transfer, disclosure, and other processing of data, which could result in investigations, inquiries, litigation, fines, legislative and regulatory action, and negative press about our privacy and data protection practices” in Part I, Item 1A of this Annual Report on Form 10-K.
Compared sentence by sentence after normalising whitespace, quotation marks, case and digits, so re-formatting and restated figures do not read as changed language. Wording changes appear as one removal and one addition. The current filing and the prior one are authoritative.