| Key takeaway: In November 2024, Italy’s Garante fined Foodinho €5 million for illegal algorithmic management affecting 35,000 riders. This decision penalizes unauthorized geolocation tracking and the lack of human oversight in performance ratings. It signals a major regulatory shift, requiring platforms to ensure transparency and human intervention to prevent discriminatory automated decisions under evolving European labor laws. |
Can an algorithm truly replace human judgment when it comes to managing thousands of workers? In November 2024, the Italian privacy authority fined Foodinho 5 million euro after discovering that the platform’s automated systems were making life-altering decisions for 35,000 riders without any human oversight or transparency.
This case highlights the growing legal risks of Foodinho algorithmic management and the urgent need for companies to balance digital efficiency with worker rights.
So, let’s take a look at the specific GDPR violations and the evolving regulatory landscape that platform operators must now navigate to stay compliant.
The 5 Million Euro Fine for Foodinho Algorithmic Management Failures
Italy’s Garante fined Foodinho €5 million in November 2024 for illegal data processing affecting 35,000 riders. The decision highlights severe GDPR breaches and unauthorized geolocation tracking, signaling a crackdown on opaque algorithmic surveillance in platform work.
The recent findings regarding GDPR violations lead us directly into the legal specifics of the Italian Garante’s decision.
Violations of the Italian Garante Privacy Standards
In November 2024, the Italian Garante imposed a €5 million fine on Foodinho S.r.l., a key entity within the Glovo group. This enforcement action followed rigorous inspections into their digital infrastructure.
The investigation revealed systemic failures in how the company processed personal data. These illegal practices impacted over 35,000 delivery riders. The scale of the breach suggests a fundamental disregard for privacy standards.
Such failures are closely linked to broader HR compliance issues and challenges. Regulators are now treating these algorithmic errors with increasing severity and scrutiny.
This fine marks a major legal milestone. It serves as a stern warning to other giants operating within the platform economy.
- Total fine amount: €5 million
- Scope: Over 35,000 riders affected
- Parent company: Glovo (Delivery Hero group
- Primary authority: Italian Garante per la protezione dei dati personali
Beyond general privacy standards, the specific handling of location data revealed even deeper issues with worker surveillance.
Illegal Processing of Rider Geolocation and Personal Data
The regulator discovered that Foodinho collected geolocation data without proper authorization. The app continued to track riders even when it was running in the background. This created a state of constant, invisible surveillance.
These practices directly violated the Italian Workers’ Statute. Remote monitoring was implemented without reaching mandatory union agreements. The company also failed to obtain necessary administrative permits, effectively bypassing local labor protections.
The Garante found this intrusive monitoring lacked a valid legal basis and was entirely disproportionate. Similar concerns have appeared in Italian court rulings on rider selection regarding discriminatory algorithmic outcomes.
Ultimately, the data collection went far beyond delivery requirements. It constituted a serious breach of rider privacy and labor dignity.
HR Consequences of Automated Foodinho Algorithmic Management
While the fines focus on privacy, the real operational damage lies in how these algorithms fundamentally altered the employer-employee relationship and HR oversight.
Absence of Human Intervention in Rider Ratings
The Garante decision highlighted a total absence of human oversight. The algorithm alone evaluated and rated worker performance. This created a “black box” for the riders.
We see a clear failure to allow riders to contest results. Workers could not express their views on automated scores. This lack of dialogue is a major HR failure.
This situation directly impacts how to handle poor performance compliantly. Human review remains mandatory for any disciplinary actions.
- Absence of human review in scoring
- Lack of feedback loops
- Inability to challenge automated bias
- Rigid mathematical evaluations
Transparency Gaps in Account Deactivations
Foodinho used standardized messages during deactivations. These automated emails lacked specific reasons. Riders were left without clear contestation rights. This practice violates basic labor dignity.
Companies must ensure that automated systems do not lead to AI bias in hiring and recruitment discrimination. Opaque decision-making creates significant legal risks.
|
HR Risk |
Algorithmic Practice |
Regulatory Requirement |
|
Performance Rating |
Hidden scores |
Human intervention |
|
Account Deactivation |
Standardized emails |
Right to contest |
|
Geolocation Tracking |
Background processing |
Strict necessity |
|
Data Access |
Third-party sharing |
Prior notification |
Transparency is a fundamental necessity. Employers must explain the logic behind every automated decision affecting a worker’s livelihood.
Glovo Group History with Foodinho Algorithmic Management Penalties
This recent €5 million fine is not a standalone event but rather the latest chapter in a long history of regulatory friction for the Glovo group.
The 2021 Precedent Involving Rider Ranking Systems
The 2024 fine is closely linked to a previous €2.6 million sanction from July 2021. The Garante identified recurring issues in how the platform manages its fleet. The core problems remain strikingly similar to those found in the 2021 Foodinho algorithmic fine details.
Rider-ranking algorithms have faced persistent accuracy concerns for years. The group failed to implement sufficient corrective measures following the initial investigation. This lack of transparency continues to penalize workers unfairly.
According to compliance statistics for 2026, regulatory pressure is mounting. Repeated violations often lead to exponentially higher fines and stricter oversight from national authorities.
These algorithms frequently fail to distinguish between legitimate absences and poor performance. Such technical rigidity leads to systemic discrimination against riders. It ignores basic worker protections like the right to strike or sick leave.
Collective Responsibility Within the Glovo Corporate Structure
Foodinho operates as a subsidiary of the Glovo group and was acquired by Delivery Hero in 2022. Corporate ownership does not shield subsidiaries from local labor laws. Regulatory accountability remains localized despite centralized technology.
We see a broader pattern of enforcement emerging across Europe. Spain and Italy have been particularly active in challenging gig economy models. The group now faces a coordinated regulatory front from multiple data protection authorities.
Maintaining global HR compliance in 2026 requires rigorous internal checks. Companies must learn how to conduct an HR audit in a multi-country setup to avoid these pitfalls.
Centralized algorithms require localized legal vetting to ensure compliance with specific national statutes. Failure to do so creates massive financial liabilities for the parent company. Legal risks cannot be outsourced to code.
Future of Foodinho Algorithmic Management Under New EU Laws
Looking ahead, the regulatory pressure on Foodinho will only intensify as new European frameworks move from theory to enforcement.
Impact of the EU Platform Work Directive on Operations
The EU Platform Work Directive introduces a major shift for Foodinho. This law mandates algorithmic transparency for all digital labor platforms. It specifically addresses the inherent power imbalance in the sector. We see a clear push for accountability.
A central pillar is the new legal presumption of employment. Platforms must prove workers are truly independent rather than employees. This changes the entire HR management strategy for Foodinho. It forces a total rethink of how riders are managed.
Compliance requires aligning with the legal framework for information and consultation. This ensures workers understand the logic behind automated decisions. It is no longer optional to keep these systems opaque.
- Right to explanation for automated decisions
- Human-in-the-loop requirements for oversight
- Collective bargaining for algorithmic changes
Governance Requirements Under the EU AI Act Framework
Employers also need to prepare for the EU AI Act requirements that apply to certain high-risk AI systems used in employment and worker management. These can include tools used for recruitment, selection, worker evaluation, or other employment-related decisions. Where a system falls within the high-risk category, organizations may face requirements covering areas such as data quality, risk management, documentation, human oversight, and technical controls. Employers should therefore assess AI tools carefully before deploying them in HR processes.
It is also important to distinguish between existing GDPR obligations and the additional requirements introduced by the EU AI Act. Organizations using AI in recruitment or workforce management may already have responsibilities under GDPR relating to personal data, transparency, lawful processing, and automated decision-making. The EU AI Act adds a separate regulatory framework, with obligations and implementation timelines depending on the type of AI system involved. Companies should therefore monitor the EU AI Act August 2026 deadline and subsequent implementation requirements.
Strategic preparation should include reviewing HR compliance 2026: what does the EU AI Act regulate? alongside guidance on AI recruitment compliance under GDPR. Considering both frameworks together can help employers identify data protection, AI governance, and employee rights requirements before introducing or expanding AI-powered HR systems.
Wrapping Up
The necessity of governance is now undeniable for platform businesses. Companies must audit their algorithms now to avoid future multi-million euro penalties. Waiting for enforcement is a high-stakes gamble that Foodinho cannot afford.
Italy’s €5 million fine against Foodinho highlights the severe risks of opaque surveillance and lack of human oversight. Companies must urgently audit their automated systems to ensure GDPR compliance and transparency. Aligning your foodinho algorithmic management with new EU standards is essential to secure long-term operational success.
