Attorney General Mike DeWine announced on Wednesday a nationwide settlement with Uber over its delay in notifying drivers about a 2016 data breach.
All 50 states and the District of Columbia participated in the settlement, according to DeWine.
The state of Ohio is receiving more than$5 millionof the $148 million Uber agreed to pay.
The settlement requires Uber to:
- Take steps to protect any user data that Uber stores on third-party platforms
- Require strong password policies for employees
- Develop and implement strong overall data security policy for all data Uber collects about its users
- Hire a qualified outside party to assess Uber's data security efforts on a regular basis and report any recommended improvements
DeWine has decided to set aside $1.2 million of the settlement to provide each eligible Ohio Uber driver with a $100 payment. Anyone who drives or applied to drive for Uber before Nov. 2016 and whose driver's license was accessed during the breach will be eligible, DeWine says.
The data breach was brought to light in November 2016. Driver's license information for an estimated 600,000 Uber drivers in America was stolen. The breach wasn't acknowledged by Uber until a year later, The Associated Press reported.
