H&M Hennes & Mauritz s.r.l. EUR 50,000
€50,000
Non-compliance with general data processing principles
Decision Date
March 2, 2023
Authority
Italian Data Protection Authority (Garante)
IT
Sector
Industry and Commerce
Country
IT
Law
GDPRStatus
FINALDescription
The Italian DPA has fined H&M Hennes & Mauritz s.r.l. EUR 50,000. H&M had installed numerous video surveillance systems in its Italian stores for the purpose of preventing theft and ensuring the safety of its employees. Each store was equipped with at least three video surveillance cameras that were active 24/7 and also covered employee areas. During its investigation, the DPA found that the video surveillance systems were being operated without the required authorization and therefore unlawfully.
Legal Citations
Art. 5 (1)Art. 114
Issues & Violations
Non-compliance with general data processing principles