Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 1,370 cases from 35 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by authority- Persónuvernd €10,087 100 % · 1 case
What for?
by action- Fine €10,087 100 % · 1 case
Who?
by sectorAll sectors
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 0 | — |
| Q1 2024 | 1 | €10,087 |
| Q2 2024 | 0 | — |
| Q3 2024 | 0 | — |
| Q4 2024 | 0 | — |
| Q1 2025 | 0 | — |
| Q2 2025 | 0 | — |
| Q3 2025 | 0 | — |
| Q4 2025 | 0 | — |
| Q1 2026 | 0 | — |
| Q2 2026 | 0 | — |
| Q3 2026 | 0 | — |
1 case
12 Mar 2024 an Icelandic operator of a fast-food restaurant chainIceland: fast-food chain operator fined for using CCTV to monitor staff performance €10,087
Persónuvernd (Icelandic Data Protection Authority) fined the operator of a fast-food restaurant chain in Iceland 1,500,000 ISK because the manager of one outlet had used footage from the surveillance cameras to check an employee's work and had produced annotated screenshots for that purpose. The authority found this to be unlawful processing outside the declared purpose of the surveillance and also criticised signs that did not name the controller and inadequate information for employees; it ordered the company to delete the screenshots, put up compliant signs in its outlets, inform employees and keep a record of processing activities.
Footage from security cameras must not be used on the side to monitor staff performance, and anyone with access to it must know what they may use it for.
Workplace video surveillance: no performance monitoring without a separate legal basis
Missing or inadequate training played a role in the decision.
- Authority / court
- Persónuvernd
- Area of law
- Data protection · Employee data
- Legal basis
- Art. 5 Abs. 1 Bst. a–c, Art. 6 Abs. 1, Art. 12 und 13 DSGVO; §§ 8, 9, 14 Abs. 1 und 4 und 17 Gesetz Nr. 90/2018 (isländisches Datenschutzgesetz); Regeln Nr. 837/2006 über elektronische Überwachung; Geldbuße nach § 46 Abs. 3 Gesetz Nr. 90/2018 i.V.m. Art. 83 Abs. 5 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Food and agriculture
- Culpability
- negligent
- Mitigating circumstances
- Only one outlet and relatively few people affected, no proven direct damage, only one documented instance of performance monitoring.
- Liability of senior managers
- The monitoring was carried out by the manager of one outlet; the authority stated that companies must instruct employees who have access to footage. The fine was imposed on the operating company.
- Published
- 20 Mar 2024
Original amount 1,500,000 ISK, converted at the ECB reference rate of 12 Mar 2024.
- Persónuvernd, Entscheidungen (Übersicht) (Entscheidung 2024) Decision of an authority
Checked against the official source on 28 Sep 2026 · Company name anonymised since 12 Mar 2026 · Direct link