Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe, North America, Latin America and Asia-Pacific: 1,905 cases from 39 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

Data protection Transport, logistics and shipping AENA, S.M.E., S.A. Clear all filters

1case from 1 jurisdiction

€10mTotal of monetary amounts

€10mLargest single case: AENA, S.M.E., S.A.

€10mMedian per case with an amount

Click a bar to drill down one level.

by amount by number of cases

Where?

by region

All jurisdictions

EU €10m 100 % · 1 case

What for?

by topic

no topic €10m 100 % · 1 case

Who?

by company

When?

per quarter, by date of decision

Trend
Period	Cases	Total
Q4 2023	0	–
Q1 2024	0	–
Q2 2024	0	–
Q3 2024	0	–
Q4 2024	0	–
Q1 2025	0	–
Q2 2025	0	–
Q3 2025	0	–
Q4 2025	1	€10m
Q1 2026	0	–
Q2 2026	0	–
Q3 2026	0	–
Q4 2026	0	–

1 case

Newest first Highest amounts

6 Nov 2025 AENA, S.M.E., S.A.AEPD: €10m fine for AENA over airport facial recognition without a valid DPIA SpainData protection €10m

The airport operator AENA used a biometric facial recognition system for access, transit and boarding at several airports without presenting a data protection impact assessment meeting the legal requirements. The AEPD imposed 10,043,002 EUR for breaching Art. 35 GDPR and confirmed the provisional suspension of all biometric processing until a proper impact assessment is in place.

What organisations can take from it

Anyone introducing biometric identification needs a sound impact assessment beforehand that genuinely tests necessity and proportionality.

Relevance to training and awareness

Data protection impact assessment before introducing biometric systems

Authority / court: Agencia Española de Protección de Datos (AEPD)
Area of law: Data protection
Legal basis: Art. 35 DSGVO (Art. 83 Abs. 4 lit. a DSGVO)
Action: Fine
Status of proceedings: unknown
Sector: Transport, logistics and shipping
Employees: 1,000 to 9,999
Published: 20 Mar 2026

Sources

AEPD, Resolución PS/00431/2024 (EXP202304532), AENA Decision of an authority
BOE: Resolución de 4 de marzo de 2026 der AEPD, Sanktionen über 1 Mio. Euro Official register or notice
AEPD, Memoria 2025 (Tabelle der 2025 unterzeichneten Bußgelder über 1 Mio. Euro) Official register or notice

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

How the radar is compiled

Official sources only

Every case is based on a decision, press release or database of an authority or a court. Press and law-firm reports count at most as additional references.

Four-eyes check

Whoever enters a case may not approve it. A second, independent check compares company, date, amount and area of law with the source. Only then is the case published.

Comparable amounts

Amounts are converted at the ECB reference rate on the day of the decision. Each case also shows the original amount.

Corrections on record

A correction is a new version that is checked again. Every change is logged. You can report errors directly on each case.

Case texts are translated from the German original. Where a translation is not yet available, the German text is shown and marked “(German original)”. Names of authorities, laws and companies are given as in the source (company names until they are anonymised).

Company names are anonymised two years after the decision in a case, in line with the practice of many supervisory authorities. The official sources remain linked.

The radar reports on published decisions and is not legal advice. Decisions that are not yet final are marked as such where the status is known.

Embed the radar on your website

Ready for training that actually lands?