Italy’s DPA fines Uber 4.2M euros for data processing violations

Italy's data protection authority, the Garante, fined ridesharing platform Uber 4.2 million euros for alleged data processing violations. The Garante said it found a subsidiary of Uber processed users’ personal data without consent and without notifying supervisory agencies. Approximately 57 million users worldwide were affected. The Garante said the personal data included contact information, Uber account data, location and relations with other users. The Garante also said Uber’s management companies based in the Netherlands and United States violated the personal data protection code for Italian users.