Uber — HIPAA + EU AI Compliance
Teaching HIPAA and the EU AI Act so people know how the rules apply in their roles
I owned HIPAA compliance learning and EU AI Act / AI compliance learning at Uber. The work covered safeguarding PII across Uber Health, keeping proprietary data out of unauthorized AI model use, and ethical AI use to reduce biased outcomes — delivered with motion graphics and embedded knowledge checks.
- EmployerUber
- RoleManager, Legal – Compliance
- CategoryHIPAA compliance learning · EU AI Act / AI compliance learning
- ScopeHIPAA + EU AI learning/enablement · counsel-gated paths · ack / completion
- SurfacesRegulated-audience training & comms (LMS / enablement surfaces)
- PartnersLegal counsel · E&C / privacy / AI governance stakeholders as applicable
HIPAA learning people could finish
Policy into paths regulated audiences could acknowledge and complete — with counsel in the loop.
Translated HIPAA obligations into training and communications so privacy-sensitive work didn’t rely on unread policy text alone. Acknowledgment / completion lived in the same path as the learning.
EU AI Act learning with the same discipline
Second regulatory beat, same craft — AI compliance learning with counsel.
Policy-to-learning for AI-regulated audiences. Training and communications so AI Act expectations were clear and completable — not a governance memo left unread.
What shipped
- Anti Fraud, Waste, and Abuse Training
- Applying HIPAA across engineering and public health organization facing roles
- Uber’s Responsible AI Principle training curricula for the entire workforce
What this cleared the way for
- Enhanced consumer protection
- Rapid, scalable, & safe AI model creation
- Aligned business workflows in advance of regulation
