Uber's being required to encrypt rider geolocation data and to adopt multifactor authentication before allowing employees to get at riders' personal data.