Hamburg DPA has initiated an administrative fine proceedings against H&M.
The DPA investigated hard drives containing more than 60GB of data and found ‘massive violations of data protection rights of the employees’.
The data contained detailed and systematic records of employees including health data such as ‘bladder weakness to cancer’, as well as data from people in employees’ social environment, such as family disputes, deaths or holiday experiences. The data contained even records from personal conversations between the employees during cigarette breaks.
According to Hamburg DPA, they have not seen such a serious violation for a long time. https://www.faz.net/aktuell/wirtschaft/unternehmen/datenschuetzer-leiten-verfahren-in-h-m-spitzelaffaere-ein-16598686.html