Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America and Asia-Pacific: 1,846 cases from 39 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by topicWho?
by company- Google LLC €1.19bn 87 % · 1 case
- Orange SA €50m 4 % · 1 case
- Vodafone GmbH €45m 3 % · 1 case
- Free Mobile SAS und Free SAS €42m 3 % · 1 case
- Anonymised companies €16.8m 1 % · 10 cases
- TIM S.p.A. €9.52m 1 % · 1 case
- Betreiber elektronischer Kommunikationsnetze und -dienste (in der Mitteilung nicht namentlich genannt) €4.5m 0 % · 1 case
- Advanced Computer Software Group Ltd €3.68m 0 % · 1 case
- Wind Tre S.p.A. €1.72m 0 % · 1 case
- Nexpublica France €1.7m 0 % · 1 case
- 25 more€6.78m
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q4 2023 | 0 | – |
| Q1 2024 | 0 | – |
| Q2 2024 | 0 | – |
| Q3 2024 | 0 | – |
| Q4 2024 | 1 | €50m |
| Q1 2025 | 0 | – |
| Q2 2025 | 0 | – |
| Q3 2025 | 0 | – |
| Q4 2025 | 0 | – |
| Q1 2026 | 0 | – |
| Q2 2026 | 0 | – |
| Q3 2026 | 0 | – |
| Q4 2026 | 0 | – |
1 case
14 Nov 2024 Orange SACNIL: €50m fine for Orange over adverts between e-mails and cookies €50m
The CNIL (French data protection authority) fined Orange SA EUR 50,000,000 because the group displayed adverts looking like genuine e-mails in the inbox of its e-mail service without consent, seen by more than 7.8 million users (Art. L. 34-5 CPCE, the French Post and Electronic Communications Code). In addition, cookies already placed on orange.fr continued to be read after consent had been withdrawn (Art. 82 of the Loi Informatique et Libertés, the French Data Protection Act); for this the CNIL ordered remedial action within three months, subject to a penalty payment of EUR 100,000 per day. Orange has challenged the decision before the Conseil d'État (French supreme administrative court), which on 17 April 2026 referred to the Conseil constitutionnel (French Constitutional Council) the question whether Art. L. 34-5 CPCE is constitutional.
Advertising slots that look like personal e-mails count as direct marketing by e-mail and require prior consent.
Adverts in the inbox and withdrawal of cookie consent
- Authority / court
- Commission nationale de l'informatique et des libertés (CNIL), formation restreinte
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Art. L. 34-5 Code des postes et des communications électroniques (CPCE); Art. 82 Loi n° 78-17 du 6 janvier 1978 (Loi Informatique et Libertés)
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Telecoms, IT and software
- Employees
- 10,000 or more
- Culpability
- negligent
- Mitigating circumstances
- Orange had discontinued the criticised ad format in November 2023; the new format clearly distinguishes adverts from e-mails.
- Published
- 10 Dec 2024
- CNIL: Publicités insérées entre les courriels : sanction de 50 millions d'euros à l'encontre de la société ORANGE (10.12.2024) Press release of an authority
- Délibération de la formation restreinte n° SAN-2024-019 du 14 novembre 2024 concernant la société ORANGE SA Decision of an authority
- Conseil d'État, 17 avril 2026, n° 501268, société Orange SA (renvoi d'une QPC au Conseil constitutionnel) Court decision
- CNIL: Les sanctions prononcées par la CNIL (Liste, Stand 14.04.2026) Enforcement database of an authority
Checked against the official source on 2 Oct 2026 · Direct link