H&M – €50,000 Fine (Italy, 2023)

€50,000Garante per la protezione dei dati personali2 March 2023Italy
final
ePrivacy
Fine

H&M was fined for not properly handling video surveillance data in line with privacy laws. This matters because it shows that companies must respect privacy regulations, especially when monitoring employees. Businesses should review their surveillance practices to avoid similar penalties.

What happened

H&M was fined for placing cookies before obtaining user consent in their video surveillance practices.

Who was affected

Employees and customers monitored by H&M's surveillance systems were affected.

What the authority found

The authority found that H&M violated GDPR by not obtaining proper consent for their surveillance practices.

Why this matters

This case serves as a warning for companies to ensure compliance with privacy laws regarding surveillance. It highlights the need for clear consent mechanisms in data collection.

GDPR Articles Cited

AI-verified

Art. 5(1)(a) GDPR
Art. 88(GDPR)
View original scraped data
Art. 5(1)(a) GDPR
Art. 88(GDPR)

Original data from scraper before AI verification against source document.

Source verified 4 April 2026
national law identified
scope corrected
Full Legal Summary
Detailed

The investigation focused on video surveillance practices at H&M, assessing compliance with GDPR and national labor laws, unrelated to cookies or consent mechanisms.

Violations (1)

Cookies Placed Before Consent
critical

Non-essential cookies (tracking, advertising) are placed on the user's device before obtaining valid consent.

Art. 6(1) GDPR

Related Enforcement Actions (0)

No other enforcement actions found for H&M in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

2 March 2023

Authority

Garante per la protezione dei dati personali

Fine Amount

€50,000

GDPRhub ID

gdprhub-6032

About this data

Data: GDPRhub (noyb.eu)
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. H&M - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: