Garante serves up 2.5M euro fine over gig worker privacy

Italy's data protection authority, the Garante, issued a 2.5 million euro fine to food delivery service Deliveroo for improperly processing workers' personal data. According to the Garante, Deliveroo's violations stemmed from "the lack of transparency of the algorithms used to manage" approximately 8,000 contract workers. The regulator also found the company used geolocation data to track workers beyond purpose limitation principles under the EU General Data Protection Regulation.