Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 1,370 cases from 35 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by authority- Datatilsynet €1.85m 100 % · 1 case
What for?
by action- Fine €1.85m 100 % · 1 case
Who?
by sectorAll sectors
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 0 | — |
| Q1 2024 | 0 | — |
| Q2 2024 | 0 | — |
| Q3 2024 | 0 | — |
| Q4 2024 | 0 | — |
| Q1 2025 | 0 | — |
| Q2 2025 | 0 | — |
| Q3 2025 | 0 | — |
| Q4 2025 | 0 | — |
| Q1 2026 | 0 | — |
| Q2 2026 | 1 | €1.85m |
| Q3 2026 | 0 | — |
1 case
1 Jun 2026 Elkjøp Nordic AS, Elkjøp Norge ASElkjøp: NOK 20m fine over invalid consent in customer club €1.85m
Datatilsynet (Norwegian Data Protection Authority) fined Elkjøp Nordic AS and Elkjøp Norge AS NOK 20,000,000. Following an on-site inspection in June 2022, the authority found that consent for the customer club was neither informed nor specific nor freely given, that club data had been reused without a legal basis for the 'kundematch' (customer match) tool, that the lawfulness of so-called offline conversions had not been assessed and documented, and that rectification requests had not been handled within the deadlines. The decision was adopted under the cooperation mechanism with the supervisory authorities of Sweden, Iceland, Finland and Denmark; more than six million club members across the Nordic countries were affected.
Anyone who ties discounts to club membership must obtain separate, informed and freely given consent in advance for each marketing purpose and must not reuse club data for new purposes such as audience matching without assessment.
Valid consent in customer clubs and loyalty programmes
- Authority / court
- Datatilsynet
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Art. 6 Abs. 1 i. V. m. Art. 4 Nr. 11, Art. 6 Abs. 4, Art. 5 Abs. 2 i. V. m. Art. 5 Abs. 1 lit. a, Art. 12 Abs. 3 DSGVO; Art. 58 Abs. 2 lit. i DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Culpability
- intentional
- Mitigating circumstances
- Improvements made after the inspection, Datatilsynet's long case-handling time and the lack of evidence that sensitive data were processed; the amount is well below the starting point in the EDPB guidelines (0.4–0.8% of group turnover).
- Published
- 4 Jun 2026
Original amount 20,000,000 NOK, converted at the ECB reference rate of 1 Jun 2026.
- Datatilsynet: Overtredelsesgebyr til Elkjøp (04.06.2026) Press release of an authority
- Datatilsynet, Vedtak om overtredelsesgebyr – Kundeklubb og de registrertes rettigheter, 22/00049-13, 01.06.2026 Decision of an authority
Checked against the official source on 28 Sep 2026 · Direct link