Italian DPA fines food delivery app 2.6M euros for GDPR violations

Italy's data protection authority, the Garante, fined food delivery application Foodinho 2.6 million euros for violations of the EU General Data Protection Regulation. The DPA found the app violated GDPR principles around transparency and lawfulness of processing and cited illegal algorithmic discrimination against certain employees. The Garante opened a joint investigation with the Spanish data protection authority, Agencia Española de Protección de Datos, into Foodinho's parent company.