It seems life is really not going to be easy on Uber for this holiday season.

After the local National Privacy Commissions’ (NPC) demand that Uber explain why they did not disclose the data breach and the extent of its effect on their local subscribers, The Land Transportation Franchising Regulatory Board (LTFRB) has also sent a summons for Uber to explain why they should not be penalized for their failure to disclose.

LTFRB Board member Atty. Aileen Lizada summoned Uber to make them explain the undisclosed data breach on their system. (photo from LTFRB)

LTFRB Board member Atty. Aileen Lizada said the failure of Uber to report the data breach and its effect to local consumers constitute a violation of their franchise and they could be facing serious sanctions if not explained properly. LTFRB will conduct their own investigation said Lizada.

Local privacy laws state that in the event of a data breach, the company affected must immediately disclose the breach and subject themselves to investigation in order to protect the privacy of the subscribers affected. There are serious penalties involved in failure to disclose.

National Privacy Commission Chairman Raymund Liboro summoned Uber local executives to also explain why no disclosure was made about their system data breach. (photo from NPC files)

The NPC’s chairman Raymund Liboro earlier said they have not received a notice of disclosure from the local Uber franchise and have ordered the ride-sharing app company to furnish them with a report.

Liboro said they have been in contact with the United States, Netherlands and Australia to investigate the breadth of data incursion reached because of this data breach. The breach occurred in 2016 but was only reported a week ago by Uber to US authorities.

According to the report, about 600,000 data sets were hacked and stolen. Uber allegedly found the hackers and paid them $100,000 to return the data and keep quiet about the breach.

Ubers corporate headquarters is located in San Francisco, USA while their servers and data bank is located in the Netherlands.