Lack of transparency of the algorithms used for the management of the riders, for the assignment of orders, for the booking of work shifts and “meticulous” control over the work performance: these are the reasons that led to the Privacy Guarantor to fine with 2.5 million Deliveroo, the food delivery giant, accused of “illegally processing the personal data of 8,000 riders”. From the investigations carried out also at the headquarters of the company, which carries out food and product delivery activities through a digital platform, “numerous and serious violations of the European and national privacy legislation, of the Workers’ Statute and of the recent legislation on protection of those who work with digital platforms “.
The company, which at the end of 2020 declared that it no longer uses the booking system of shifts, will have to provide riders with “precise information on the functioning of the order assignment system and identify measures to protect the right to obtain human intervention capable of fully assessing and, if necessary, substantially correcting the functioning of the system “. The company is responsible for “verifying, on a periodic basis, the correctness of the results of the algorithms to minimize the risk of distorted or discriminatory effects”. The Authority has granted to Deliveroo 60 days to correct violations found and an additional 90 days to complete the interventions on the algorithms.
In response, the British company has made it known that the decision of the Privacy Guarantor is based on an old technology that is no longer in use and that as a delivery company it has already taken corrective measures.
“We recognize the tremendous importance of compliance with data protection legislation. The on-demand economy is a rapidly developing sector, the company said. “We strongly believe in frank and transparent collaboration with Italian institutions, such as the Guarantor for the Protection of Personal Data, in areas that are subject to very rapid changes,” explained Deliveroo.
“We have worked closely with the Guarantor during the investigations – continued Deliveroo – and we believe that the Authority’s conclusions do not represent the way in which Deliveroo works with riders today. They are based on an old session booking system that was phased out in 2020. We are currently evaluating the next steps and all available options, including recourse. We are committed to maintaining the highest standards in privacy: today we have strong procedures to ensure that our processes are fair and that all personal data is safe. “
“Deliveroo – concluded the note – is certain that they have been taken corrective measures appropriate and that the issues raised, consequently, no longer represent a problem. The company will continue to collaborate with the Guarantor, where appropriate, with frankness and transparency “.