FineME
Run assessment
Back to Cases
technologyemployment · 2021

H&M Hennes & Mauritz GBC AB

IMY reviewed Swedish employee-data governance following broader H&M workforce monitoring concerns and emphasized purpose limitation, minimization, and lawful basis under GDPR Articles 5 and 6.

Fine Imposed€350,000.0
Authority

Integritetsskyddsmyndigheten

Styleaggressive
Avg. investigation15 mo
View authority profile
Regulation

Key Takeaways
  • HR analytics and employee profiling require narrow purposes and documented necessity.