The Italian data protection authority issued a € 2.5 million fine against a food delivery company for GDPR violations arising from its riders' data processing.