2019 H&M Nuremberg — GDPR fine, employee surveillance
Data compromised
Employee personal data
Technical writeup
H&M Nuremberg service center collected excessive personal data on employees. GDPR fine €35.3M by Hamburg DPA.
Root cause
Excessive data collection; GDPR violation