Garante fines Foodinho 5 million euro over the algorithms that manage its riders
Garante took fine action against Foodinho S.r.l. (Glovo group) over Rider scoring, assignment and identity verification systems, announced 22 November 2024. The amount is 5 million euro. Status: confirmed.
The record
Key facts
- Record ID
- AIT-2024-0006
- Status
- Confirmed
- Action type
- Fine
- Regime
- GDPR
- Jurisdiction
- Italy
- Target
- Foodinho S.r.l. (Glovo group), headquartered in Italy
- AI system
- Rider scoring, assignment and identity verification systems
- Date announced
- Date of decision
- Amount
- 5 million euro
- Appeal
- None recorded. No annulment recorded.
- Last verified
In full
What happened, and why it matters
The Italian authority fined the Glovo subsidiary Foodinho 5 million euro, its second sanction against the same company, over the systems that assign work to and score food delivery riders. The findings read as a catalogue of what goes wrong when management is automated without governance: location data collected outside working hours, biometric checks used to verify rider identity without a valid basis, automated decisions affecting people's earnings with no meaningful human review, rider data shared with third parties, and security controls that let personal data be exposed. The Article 22 finding is the one that carries forward. A scoring system that decides who gets offered work is an automated decision with legal or similarly significant effect, and the right to contest it is not satisfied by a support inbox. Under the AI Act the same systems are candidates for Annex III high risk classification in employment and worker management, which brings human oversight under Article 14, logging under Article 12 and a deployer duty to inform affected workers under Article 26. The rules that apply from December 2027 are stricter than the ones Foodinho was fined under, and the conduct is already unlawful today.
At a glance
The four things to take away
- Fine of 5 million euro, announced 22 November 2024.
- Second Garante sanction against the same company, after a 2.6 million euro fine in 2021.
- Findings include Article 22 automated decision making without meaningful contestability.
- Worker management AI is an Annex III high risk category under the AI Act from December 2027.
Orders
What the authority required
- stop tracking rider location outside working time
- stop the unlawful use of biometric identity checks
- give riders a workable route to contest automated decisions
- correct the security and data sharing failures identified
The law
Provisions this action rests on
- GDPR Article 5(1)(c)violated
- GDPR Article 9violated
- GDPR Article 22violated
- GDPR Article 32violated
- AI Act Article 6adjacent
Read the official text of Article 6 in the EU AI Act Explorer, consolidated with the Digital Omnibus applied.
How it moved
Timeline
Garante adopts the decision
Decision announced
Verification
Sources
Primary sources are the authority's own decision or press release, the Official Journal, or a court judgment. A record with no source is not published.
- Garante, provvedimento del 24 ottobre 2024 (doc. web 10077053)Primary · 22 November 2024
Next
Related enforcement actions
- ConfirmedAI Act directAIT-2026-0002
Garante warns Myndoor over workplace emotion inference, citing AI Act Article 5(1)(f)
14 May 2026 · Warning · GDPR and AI Act · No financial penalty
Formal warning, provvedimento no. 342 of 14 May 2026. No financial penalty.
- ConfirmedAI adjacentAIT-2024-0001
Garante fines the Municipality of Trento 50,000 euro over three AI street surveillance projects
11 December 2023 · Fine · GDPR · 50,000 euro
Fine of 50,000 euro against a municipality, announced 11 January 2024.
- ConfirmedAI adjacentAIT-2026-0003
Garante fines Character.AI 158,000 euro over age checks and protection of minors
3 July 2026 · Fine · GDPR · 158,000 euro
Fine of 158,000 euro, decision of 3 July 2026, announced 9 July 2026.
- Under appealAI adjacentAIT-2025-0003
Garante fines Luka Inc. 5 million euro over the Replika companion chatbot
10 April 2025 · Fine · GDPR · 5 million euro
Fine of 5 million euro, decision of 10 April 2025, announced 19 May 2025.
- ConfirmedAI adjacentAIT-2025-0001
Garante blocks DeepSeek in Italy over transfers to China and missing information
30 January 2025 · Ban · GDPR · No financial penalty
Urgent definitive limitation on processing, adopted 30 January 2025.
- AnnulledAI adjacentAIT-2024-0007
Garante fines OpenAI 15 million euro, and the Court of Rome annuls the decision in full
2 November 2024 · Fine · GDPR · 15 million euro
Fine of 15 million euro plus a media campaign order, decision 2 November 2024, announced 20 December 2024.
Cite this record
Free to reuse under CC BY 4.0, with attribution. The record ID AIT-2024-0006 is permanent and is never reused.
- In a sentence
- According to the GAGE EU AI Act Enforcement Tracker (as of 20 August 2026), garante fines foodinho 5 million euro over the algorithms that manage its riders.
- APA
- GAGE (Global Academy of Generative-AI Education). (2026). Garante fines Foodinho 5 million euro over the algorithms that manage its riders. EU AI Act Enforcement Tracker. Retrieved 20 August 2026, from https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2024-0006-garante-foodinho-algorithmic-management-fine
- MLA
- "Garante fines Foodinho 5 million euro over the algorithms that manage its riders." EU AI Act Enforcement Tracker, GAGE (Global Academy of Generative-AI Education), 20 August 2026, https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2024-0006-garante-foodinho-algorithmic-management-fine.
- Chicago
- GAGE (Global Academy of Generative-AI Education). "Garante fines Foodinho 5 million euro over the algorithms that manage its riders." EU AI Act Enforcement Tracker. Last modified 20 August 2026. https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2024-0006-garante-foodinho-algorithmic-management-fine.
- Permalink
- https://www.gage.academy/tools/eu-ai-act-enforcement-tracker/actions/AIT-2024-0006-garante-foodinho-algorithmic-management-fine
Back to the full enforcement tracker, or see every action against gig work and algorithmic management and every action in Italy.
Last updated . Every record re verified . The tracker is checked every Monday, and the same day for any action under the AI Act.