Home Legal Advice H&M fined $41.5 million for gathering and storing private data from staff

H&M fined $41.5 million for gathering and storing private data from staff


H&M has been fined a “record” advantageous of 35.26 million euros (41.56 million US money) in reference to the unlawful worker surveillance mannequin in Germany. According to a latest ruling by the Hamburg Data Protection Commission, the fast-moving Swedish hippo is able to monitor a number of hundred staff at its service heart in Nuremberg. Several staff have been the topic of in depth private knowledge logging since 2014. All of this was found within the context of a safety breach that was documented a yr in the past.

The breach that occurred at its Nuremberg service heart in October 2019 highlighted the present H&M data assortment and storage practices for workers who’ve violated at the very least some provisions of the General Data Protection Regulation (GDPR). The European Regulation on the safety of non-public knowledge all through the Union, particularly Article 5, which regulates the processing of non-public knowledge, and Article 6, which establishes a particular objective for the lawful processing of personal data.

“After being absent due to illness and vacation, the heads of the supervisory team at H&M held so-called” Welcome Talks with their staff,” in accordance with a Hamburg Data Protection Commission resolution on October 1. “After this discussion, in most cases, not only were specific experiences with employee holidays” recorded by senior staff at H&M in accordance with the info safety fee however “additionally signs of sickness and analysis. “

Given the gravity of the offense, the advantageous – the very best penalty imposed on Forbes in Germany under the GDPR since its implementation in May 2018, and the second-highest in all the European Union – is acceptable and successfully deters firms from defending their privateness, injuring staff “, stated Prof. Caspar.

The fines themselves are calculated in accordance with an idea developed by the German knowledge safety rules to calculate GDPR fines and take note of, amongst different issues, the revenue of the businesses involved. Although presently solely a purely German idea was launched and mentioned as a part of harmonization efforts on the European stage. 


Please enter your comment!
Please enter your name here