Italy

H&M Hennes & Mauritz s.r.l. EUR 50,000

50,000 €

GDPR enforcement action by Italian Data Protection Authority (Garante) on 2023-03-02.

Rank · Sector

#106

of 595 in Industry and Commerce

Rank · Italy

#116

of 543

Rank · All fines

#722

of 3,042

Case details

Authority: Italian Data Protection Authority (Garante)
Date: 2023-03-02
Controller / Processor: H&M Hennes & Mauritz s.r.l. EUR 50,000
Sector: Industry and Commerce
Quoted Articles: Art. 5 (1) a) GDPR, Art. 114 Codice della privacy
Type of violation: Non-compliance with general data processing principles

Summary

The Italian DPA has fined H&M Hennes & Mauritz s.r.l. EUR 50,000. H&M had installed numerous video surveillance systems in its Italian stores for the purpose of preventing theft and ensuring the safety of its employees. Each store was equipped with at least three video surveillance cameras that were active 24/7 and also covered employee areas. During its investigation, the DPA found that the video surveillance systems were being operated without the required authorization and therefore unlawfully.

Open original source Links to the regulator's original publication or another source.