Following the decision of the French data protection authority against Spartoo, which we previously discussed, we have seen one of the largest fines ever imposed under the GDPR (€35.2 million). This time against the Germany-based subsidiary of multi-national clothes retailer ‘H&M’.  

In this update, I look at the lessons this provides for ediscovery, particularly…