Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 1,370 cases from 35 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by topicWho?
by company- Anonymised companies €103.1m 94 % · 6 cases
- Acea Energia S.p.A. €3m 3 % · 1 case
- Repsol Comercializadora de Electricidad y Gas, S.L. €1.38m 1 % · 1 case
- South Staffordshire Plc und South Staffordshire Water Plc €1.12m 1 % · 1 case
- Curenergía Comercializador de Último Recurso, S.A.U. €500,000 0 % · 1 case
- HEP-Toplinarstvo d.o.o. €320,000 0 % · 1 case
- Energy Prices Direct Limited €184,325 0 % · 1 case
- ΗΡΩΝ Α.Ε. Ενεργειακών Υπηρεσιών (Heron), ICOMM Call Center I.K.E. und ein weiteres Callcenter (Einpersonengesellschaft, anonymisiert) €165,000 0 % · 1 case
- Εταιρεία Προμήθειας Αερίου Θεσσαλονίκης Θεσσαλίας Α.Ε. („ZeniΘ“) und Τράπεζα Πειραιώς Α.Ε. (Piraeus Bank) €110,000 0 % · 1 case
- Société Wallonne des Eaux (SWDE) €86,000 0 % · 1 case
- 2 more€6,000
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 0 | — |
| Q1 2024 | 0 | — |
| Q2 2024 | 0 | — |
| Q3 2024 | 0 | — |
| Q4 2024 | 0 | — |
| Q1 2025 | 0 | — |
| Q2 2025 | 1 | €1.38m |
| Q3 2025 | 0 | — |
| Q4 2025 | 0 | — |
| Q1 2026 | 0 | — |
| Q2 2026 | 0 | — |
| Q3 2026 | 0 | — |
1 case
26 May 2025 Repsol Comercializadora de Electricidad y Gas, S.L.AEPD: €1.38m fine for Repsol retail arm over contracts under mixed-up customer data €1.38m
Because another customer's switching request with an almost identical name was recorded in the complainant's customer account, gas and electricity contracts for a supply point unknown to her ran under her data, and a third party, as contract holder, gained access to that data. The AEPD imposed 130,000 EUR for breaching the accuracy principle (Art. 5(1)(d)) and 1,250,000 EUR for inadequate security measures (Art. 32), 1,380,000 EUR in total.
Where names are similar, customer data must be matched against unique identifiers before any contract change so that no contracts are created under someone else's data.
Unambiguous matching of customer data when concluding contracts
- Authority / court
- Agencia Española de Protección de Datos (AEPD)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 5 Abs. 1 lit. d, Art. 32 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Energy and utilities
- AEPD, Resolución PS/00090/2024 (EXP202207990), Repsol Comercializadora de Electricidad y Gas Decision of an authority
- AEPD, Memoria 2025 (Tabelle der 2025 unterzeichneten Bußgelder über 1 Mio. Euro) Official register or notice
Checked against the official source on 28 Sep 2026 · Direct link