The operator of the La Samaritaine department store has been fined €100,000 for breaching the EU's General Data Protection Regulation. France’s data watchdog, CNIL, found it had improperly used hidden cameras, failing to safeguard employees’ privacy.
On 18 September 2025, France’s data regulator CNIL announced it had fined La Samaritaine, the company employing 650 people to run the Paris department store, for breaching GDPR rules. In August 2023, the company had installed cameras disguised as smoke detectors to punish theft of goods from its stockrooms. CNIL’s sanctioning body considered that the subsidiary of the luxury group LVMH had failed to comply with the ‘principle of accountability’ (the ability to demonstrate that data has been...
Do you have information to share with us?
Article authors
Antoine Piel
Section Head at Mind HR