"Germany fines H&M 35 million euros for data protection breaches," 1 Oct 2020

Sweden’s H&M has been fined 35 million euros ($41 million) by the German authorities for internal data security breaches at its customer service centre in Nuremberg, the fashion retailer said on Thursday.

“The regional data protection authority in Hamburg has imposed an administrative fine of 35 million euros. The H&M group admits shortcomings at the service centre and has taken forceful measures to correct this,” it said in its June-August earnings report...

According to the paper, H&M collected information on illnesses and other personal circumstances of employees at the centre. H&M said in January the breaches found were unacceptable and it was cooperating with the authorities.