Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe and North America: 718 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

EUData protectionFood and agriculture Clear all filters
3cases from 3 jurisdictions
€195,102Total of monetary amounts
€120,000Largest single case: Pioneer Hi-Bred Italia Sementi s.r.l.
€55,102Median per case with an amount

Click a bar to drill down one level.

by amountby number of cases

Where?

by country
  1. Italy €120,000 62 % · 1 case
  2. Poland €55,102 28 % · 1 case
  3. Austria €20,000 10 % · 1 case

What for?

by topic
  1. Employee data €120,000 62 % · 1 case
  2. Data breaches and data security €55,102 28 % · 1 case
  3. Video surveillance €20,000 10 % · 1 case

Who?

by company
  1. Pioneer Hi-Bred Italia Sementi s.r.l. €120,000 69 % · 1 case
  2. Res-Gastro M. Gaweł Sp. k. €55,102 31 % · 1 case

When?

per quarter, by date of decision
Trend
PeriodCasesTotal
Q3 20230—
Q4 20231€20,000
Q1 20240—
Q2 20241€55,102
Q3 20240—
Q4 20240—
Q1 20250—
Q2 20250—
Q3 20250—
Q4 20251€120,000
Q1 20260—
Q2 20260—
Q3 20260—

3 cases

Newest firstHighest amounts
18 Dec 2025 Pioneer Hi-Bred Italia Sementi s.r.l.Pioneer Hi-Bred Italia Sementi: 120,000 EUR for monitoring field staff's driving style ItalyEmployee data €120,000

At the instruction of a group company based in Switzerland, the seed company had telematics devices installed in company cars that also recorded private journeys and assigned employees scores for their driving behaviour. Italy's data protection authority (Garante per la protezione dei dati personali) found breaches of transparency, purpose limitation, data minimisation and employee protection rules, imposed 120,000 EUR and ordered the deletion of the data on private journeys.

What organisations can take from it

Group-wide telematics requirements must be assessed against local employment and data protection law before roll-out – especially where vehicles are also used privately.

Relevance to training and awareness

Employee monitoring through telematics

Authority / court
Garante per la protezione dei dati personali
Area of law
Data protection · Employee data
Legal basis
DSGVO Art. 5 Abs. 1 lit. a-c, 6 Abs. 1 lit. f, 13, 28, 88; Codice privacy Art. 2-quaterdecies, 113, 114
Action
Fine
Status of proceedings
final
Sector
Food and agriculture
Mitigating circumstances
Small number of data subjects (five employees), immediate suspension of the processing.
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

29 Apr 2024 Res-Gastro M. Gaweł Sp. k.UODO: 238,345 PLN against catering company after loss of an unencrypted USB stick PolandData breaches and data security €55,102

An employee of the catering company lost a USB stick containing unencrypted data on a colleague, including PESEL number, passport data and salary. The risk analysis had not provided for the mere loss of data carriers, encryption was left to employees with only an instruction video, and the effectiveness of the measures was not tested; the President of the Polish data protection authority (Prezes Urzędu Ochrony Danych Osobowych, UODO) imposed 238,345 PLN (decision DKN.5131.29.2023, not final).

What organisations can take from it

Encryption of portable data carriers must be technically enforced – a training video alone impermissibly shifts responsibility onto employees.

Relevance to training and awareness

Handling portable data carriers and encryption

Missing or inadequate training played a role in the decision.

Authority / court
Prezes Urzędu Ochrony Danych Osobowych (UODO)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 5 Abs. 1 lit. f, Art. 5 Abs. 2, Art. 24 Abs. 1, Art. 25 Abs. 1, Art. 32 Abs. 1 und 2 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Food and agriculture
Mitigating circumstances
Self-reporting of the incident and cooperation in the proceedings substantially reduced the fine.
Published
17 May 2024

Original amount 238,345 PLN, converted at the ECB reference rate of 29 Apr 2024.

Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

7 Dec 2023 DSB: 20,000 EUR against restaurant business over constant surveillance of kitchen and pick-up area AustriaVideo surveillance €20,000

A restaurant company with a delivery and pick-up service (name pseudonymised) recorded workstations in the kitchen and pick-up area without interruption, even outside opening hours, and stored the recordings for 14 days. In addition, there had been no record of processing activities since 2018; the Austrian data protection authority (Datenschutzbehörde, DSB) imposed 20,000 EUR, and the penalty decision is final.

What organisations can take from it

Even small businesses may not film employees permanently – and they need a record of their processing activities.

Authority / court
Datenschutzbehörde (DSB)
Area of law
Data protection · Video surveillance
Legal basis
Art. 5 Abs. 1 lit. a und c, Art. 6 Abs. 1, Art. 30 Abs. 1 DSGVO
Action
Fine
Status of proceedings
final
Sector
Food and agriculture
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

Ready for training that sticks?

Try it free for 14 days — from 1 user, no credit card, ends automatically.

Start free trial