H&M Hennes & Mauritz s.r.l. EUR 50,000 – €50,000 Fine (Italy, 2023)

€50,000Garante per la protezione dei dati personali2 March 2023Italy
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

H&M was fined EUR 50,000 for using video cameras in its stores without proper authorization. This is important because it shows that businesses must get the right permissions before monitoring employees and customers. Store owners should review their surveillance practices to ensure compliance with privacy laws.

What happened

H&M operated video surveillance systems in its stores without the required authorization.

Who was affected

Employees and customers in H&M stores where unauthorized video surveillance was conducted.

What the authority found

The Italian DPA determined that H&M's use of video surveillance without proper authorization was unlawful.

Why this matters

This case highlights the need for businesses to obtain necessary permissions before using surveillance systems. It serves as a reminder to review and update privacy practices to avoid legal issues.

GDPR Articles Cited

Art. 5(1)(a) GDPR
Art. 114 Codice della privacy GDPR
Full Legal Summary
Detailed

The Italian DPA has fined H&M Hennes & Mauritz s.r.l. EUR 50,000. H&M had installed numerous video surveillance systems in its Italian stores for the purpose of preventing theft and ensuring the safety of its employees. Each store was equipped with at least three video surveillance cameras that were active 24/7 and also covered employee areas. During its investigation, the DPA found that the video surveillance systems were being operated without the required authorization and therefore unlawfully.

Related Enforcement Actions (0)

No other enforcement actions found for H&M Hennes & Mauritz s.r.l. EUR 50,000 in IT

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

2 March 2023

Authority

Garante per la protezione dei dati personali

Fine Amount

€50,000

Enforcement Tracker ID

ETid-1869

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. H&M Hennes & Mauritz s.r.l. EUR 50,000 - Italy (2023). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: