Focus on the fashion and luxury industry: Key developments regarding antitrust, unfair commercial practices and privacy laws.
European Commission fines three luxury fashion brands for resale price maintenance
(Link source: )
On 14 October 2025, the European Commission imposed fines on three luxury fashion brands for engaging in resale price maintenance (RPM), in violation of EU competition rules. The investigation revealed that the companies (acting independently of each other) restricted independent retailers’ ability to set their own prices, both online and offline, resulting in higher prices and reduced consumer choice.
The Commission found that the brands limited retailers’ pricing freedom across most product categories, including apparel, leather goods, footwear, and accessories. These restrictions included prohibiting deviations from recommended retail prices, capping discounts and sales periods, and, in some cases, temporarily banning discounts altogether.
These practices, carried out between 2015 and 2023 across the European Economic Area (EEA), undermined competition and protected the companies’ direct sales channels. The Commission imposed total fines exceeding €157 million, reduced to reflect cooperation under the antitrust procedure.
This decision sends a clear message to the fashion industry: resale price maintenance that restricts retailers’ pricing autonomy, whether online or offline, will not be tolerated under EU competition law.
Italian Competition Authority fines Man Project S.r.l. €300,000 for misleading outlet practices involving Coveri Tailor brand
(Link source: )
On 5 November 2025, the Italian Competition Authority (ICA) fined Man Project S.r.l. €300,000 for unfair commercial practices related to the outlet sale of garments under the Coveri Tailor brand.
The investigation, triggered by a report from the Livorno Customs Office, revealed that the company marketed clothing items as discounted, despite these products never having been sold in Maison Coveri boutiques or other non-outlet stores. Upon arrival in Italy, the garments already bore price tags showing multiple amounts, the higher one crossed out, creating the illusion of a markdown. In reality, the items were newly manufactured for outlet distribution.
The ICA concluded that these practices misled consumers about the nature and value of the products, violating Articles 20, 21(1)(a)(b)(d) and 22 of the Italian Consumer Code. The decision underscores the ICA’s commitment to tackling deceptive pricing and labelling practices in the fashion and retail sectors.
Retailers and licensees are reminded that transparency in pricing, accurate product information and compliance with consumer protection rules are essential to avoid enforcement risks and reputational damage.
Commission approves Zalando acquisition of About You
(Link source: M.11854 - ZALANDO / ABOUT YOU)
On 22 May 2025, the European Commission received notification of Zalando SE’s proposed acquisition of sole control over ABOUT YOU Holding SE under Article 4 of the EU Merger Regulation.
Zalando, based in Germany, operates as an online fashion and lifestyle retailer across 23 EEA countries and sells six private-label brands exclusively through its own channels: Anna Field, Friboo, Even&Odd, PierOne, Yourturn and ZIGN.
Following its review, the Commission concluded on 1 July 2025 (published on 17 October 2025) that the transaction would not raise competition concerns, given its limited impact on market dynamics and the continued availability of numerous alternatives for consumers and brands. The merger was therefore declared compatible with the internal market and the EEA Agreement under Article 6(1)(b) of the Merger Regulation and Article 57 of the EEA Agreement.
Mango reports data breach involving external marketing service
Fashion retailer Mango recently disclosed a data breach involving one of its external marketing service providers. According to a press release dated 15 October 2025, an unauthorised third party accessed certain personal data used in marketing campaigns. The compromised information included customers’ first name, country, postal code, email address, and phone number. However, Mango confirmed that surnames, banking details, identity documents, login credentials and passwords were not affected.
The company emphasised that its internal systems were not compromised and remain fully operational. Upon discovering the incident, Mango activated its security protocols, notified the relevant Data Protection Authority, and issued precautionary communications to customers. Consumers were advised to remain vigilant against suspicious messages or requests.
This incident highlights the importance of robust vendor due diligence, regular security audits and contractual safeguards requiring third parties to comply with data protection and incident response obligations. The Mango case serves as a reminder that cybersecurity responsibility extends beyond corporate boundaries to every partner in a company’s data ecosystem.