Not for the first time, food delivery firm Foodinho has been spanked by Italy’s privacy watchdog. Per Reuters, the Glovo-owned on-demand delivery app has been fined €5 million ($5.20 million) after it was found to have unlawfully processed the data of more than 35,000 riders registered on the platform.

Issues identified included riders’ geolocation data being transferred to third parties without their knowledge, including — up to August 2023 — when they were not working. The watchdog has ordered changes related to the app’s messaging to riders and GPS feature, so the tracking can be turned off when riders are not on the job.

Foodinho has also been banned from using riders’ biometric data, such as facial recognition, for identity verification.

Back in 2021, when Foodinho had around 19,000 registered riders, Italy’s watchdog fined it around $3 million over a laundry list of data protection and algorithmic management issues. So the app hasn’t proved to be “once bitten, twice shy” on privacy compliance.