Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,207 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by topicWho?
by company- Anonymised companies €1.38m 100 % · 1 case
When?
per year, by date of decision| Period | Cases | Total |
|---|---|---|
| 2023 | 1 | €1.38m |
| 2024 | 0 | – |
| 2025 | 0 | – |
| 2026 | 0 | – |
1 case
1 Feb 2023 a US telehealth and discount platformTelehealth platform: 1.5 million USD – first penalty under the Health Breach Notification Rule €1.38m
For years, the telehealth and discount platform passed its users’ health data to three large advertising and technology companies and other advertising partners and did not notify these unauthorised disclosures as required by the Health Breach Notification Rule. In the first proceedings under this rule, the platform agreed to a civil penalty of 1.5 million USD and a ban on sharing for advertising purposes; the settlement was still subject to court approval.
Sharing health data via tracking pixels can itself be a notifiable ‘breach’ – include tracking integrations in the incident assessment.
- Authority / court
- Federal Trade Commission (FTC) / U.S. Department of Justice
- Area of law
- Information security and cyber · Incident reporting obligations
- Legal basis
- FTC Health Breach Notification Rule (16 CFR Part 318); Section 5 FTC Act
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Healthcare
Original amount 1,500,000 USD, converted at the ECB reference rate of 1 Feb 2023.
- FTC, Pressemitteilungen (Übersicht) (Entscheidung 2023) Press release of an authority
Checked against the official source on 28 Sep 2026 · Version 4 · Company name anonymised since 1 Feb 2025 · Direct link