# H&M Hennes & Mauritz s.r.l. EUR 50,000: Non-compliance with general data processing principles

- Type: Enforcement
- Source: Italian Data Protection Authority (Garante)
- Date: 2023-03-02
- Original: https://www.enforcementtracker.com/ETid-1869
- Canonical: https://overview.legal/posts/47984
- Topics: Video Surveillance, Monitoring, IP Address, Human Resources, Supervisory Authorities, Processing Agreement, Processing, Access Controls, Law Enforcement

## Summary

The Italian DPA has fined H&M Hennes & Mauritz s.r.l. EUR 50,000. H&M had installed numerous video surveillance systems in its Italian stores for the purpose of preventing theft and ensuring the safety of its employees. Each store was equipped with at least three video surveillance cameras that were active 24/7 and also covered employee areas. During its investigation, the DPA found that the video surveillance systems were being operated without the required authorization and therefore unlawfull

## Full text

The Italian DPA has fined H&M Hennes & Mauritz s.r.l. EUR 50,000. H&M had installed numerous video surveillance systems in its Italian stores for the purpose of preventing theft and ensuring the safety of its employees. Each store was equipped with at least three video surveillance cameras that were active 24/7 and also covered employee areas. During its investigation, the DPA found that the video surveillance systems were being operated without the required authorization and therefore unlawfully.

GDPR Articles: Art. 5 (1) a) GDPR, Art. 114 Codice della privacy
Industry: Industry and Commerce

---
Generated by overview.legal · https://overview.legal/posts/47984 · 2026-08-22