Uber has agreed to an expanded settlement with the Federal Trade Commission. The new settlement takes into account Uber’s massive 2016 data breach. Uber is compelled to disclose future incidents involving consumer data. Uber must retain certain records related to bug bounty reports of flaws that could compromise users’ data. The ride-sharing company could be subject to civil penalties if it fails to share future incidents with the FTC. It must also submit all reports from required third-party audits of its privacy program, the FTC says.”]