Data Protection Commissioner

Hamburg’s data protection commissioner has stated that H&M in Nuremberg had collected private information about employees including family issues and religious beliefs. The data had been collected on a network drive and had been accessible for up to 50 managers. The incident got public when the data had been briefly visible for all people on the network.
H&M has been fined €35.3 million and the company stated that the practices uncovered in Nuremberg did not align with the guidelines of the company.