H&M – €50,000 Fine (Italy, 2023)

€50,000Garante per la protezione dei dati personali2 March 2023Italy
final
ePrivacy
Fine

H&M was fined for placing cookies on users' devices before getting their consent. This case highlights the importance of obtaining user permission before tracking their online behavior.

What happened

H&M placed cookies on users' devices without obtaining consent first.

Who was affected

Online shoppers who visited H&M's website and had their data tracked without consent.

What the authority found

The Garante found that H&M violated GDPR by not securing consent before placing cookies.

Why this matters

This fine serves as a reminder for all online businesses to prioritize user consent for cookies. Failing to do so can lead to significant financial penalties.

GDPR Articles Cited

AI-verified

Art. 5(1)(a) GDPR
Art. 88(GDPR)
View original scraped data
Art. 5(1)(a) GDPR
Art. 88(GDPR)

Original data from scraper before AI verification against source document.

Source verified 4 April 2026
national law identified
scope corrected
Full Legal Summary
Detailed

The investigation centered on video surveillance systems, not cookies or consent mechanisms.

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for H&M in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

2 March 2023

Authority

Garante per la protezione dei dati personali

Fine Amount

€50,000

GDPRhub ID

gdprhub-6032

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. H&M - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: