• Facts: Uber experienced a data breach in 2016, involving the personal information of drivers and passengers, but it was not made public until 2017 when top management was replaced. A lawsuit that ensued was settled when Uber agreed to pay states $148 million dollars, and agreed to adopt privacy by design in its products. Refer to this brief article background for the case description and settlement: http://cyberlaw.stanford.edu/blog/2018/10/privacy-design-and-uber-settlementLinks to an external site.
• Analyze, being specific, and referring to your readings, the following:
  • How should Uber redesign its 2016 practices to incorporate the approach of privacy by design?
  • How should Uber redesign its 2016 practices to also meet major requirements of the GDPR?
  • How can the NIST Privacy Framework help Uber design its privacy program, specifically?
• In order to narrow this assignment, you should describe and analyze one aspect of Uber's business related to the breach; you can make some assumptions about this product, but describe those assumptions