Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,207 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by topicWho?
by sectorAll sectors
When?
per year, by date of decision| Period | Cases | Total |
|---|---|---|
| 2023 | 1 | – |
| 2024 | 8 | €31.2m |
| 2025 | 14 | €839.4m |
| 2026 | 4 | €1.64bn |
27 cases
23 Jul 2026 GoogleDMA: 890 million EUR against Google over self-preferencing and Play steering €890m
In two decisions, the European Commission found that Google favours its own services in search (460 million EUR) and prevents app developers on Google Play from steering customers to alternative offers (430 million EUR). Google was ordered to bring the infringements to an end.
Platforms' ranking rules and fee models must be demonstrably non-discriminatory and designed in compliance with the Digital Markets Act (DMA).
- Authority / court
- Europäische Kommission
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Verordnung (EU) 2022/1925 (DMA), Selbstbevorzugungsverbot und Anti-Steering-Pflicht
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Employees
- 10,000 or more
- Published
- 23 Jul 2026
- Commission fines Google €890 million for breaches of the Digital Markets Act Press release of an authority
- IP/26/1670: Commission fines Google €890 million for breaches of the Digital Markets Act Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
20 Jul 2026 AliExpressDSA: 550 million EUR against AliExpress over illegal and unsafe products €550m
AliExpress did not diligently assess the risks posed by illegal, unsafe and counterfeit products (including insufficient moderation capacity, recommender and advertising systems) and did not take effective countermeasures (including deficient enforcement of sanctions against traders, product checks that could be circumvented). The European Commission imposed 550 million EUR under the Digital Services Act (DSA) and required an action plan by 20 October 2026.
The size of a marketplace does not justify gaps: moderation capacity and sanctions against traders must match the actual risk.
- Authority / court
- Europäische Kommission
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Verordnung (EU) 2022/2065 (DSA), Risikobewertung und Risikominderung
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Mitigating circumstances
- Novelty of the Digital Services Act (taken into account by the Commission when setting the fine)
- Published
- 20 Jul 2026
- Commission fines AliExpress €550 million for breaching the Digital Services Act Press release of an authority
- IP/26/1654: Commission fines AliExpress €550 million for breaching the Digital Services Act Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
24 Jun 2026 Meta Platforms Ireland LimitedMeta: infringement of the P2B Regulation after fashion retailer’s Facebook page was hacked Order
After the Facebook page of the Danish fashion retailer Clothing By Ros ApS was hacked in 2023, Meta failed to respond appropriately for almost two years, gave no reasons for the de facto suspension and offered no effective complaint-handling procedure. The Konkurrencerådet (Danish Competition Council) found infringements of the P2B Regulation and ordered Meta to comply with the rules on statements of reasons and complaint handling in future.
Platform operators must give reasons for suspending business users and handle complaints promptly – silence counts as a decision in its own right.
- Authority / court
- Konkurrencerådet (Danish Competition Council)
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Verordnung (EU) 2019/1150 (P2B) Art. 4, Art. 11
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Media and online platforms
- Employees
- 10,000 or more
- Published
- 24 Jun 2026
- KFST – The Competition Council rules against Meta (24.06.2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
28 May 2026 TemuDSA: 200 million EUR against Temu over deficient risk assessment of illegal products €200m
Temu's 2024 risk assessment was based on general industry data rather than on findings about its own service and underestimated how often EU consumers encounter illegal products; test purchases revealed unsafe chargers and baby toys. The European Commission imposed 200 million EUR under the Digital Services Act (DSA) and required an action plan by 28 August 2026.
Risk assessments must be based on the company's own, service-specific evidence – generic industry analyses are not sufficient.
- Authority / court
- Europäische Kommission
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Verordnung (EU) 2022/2065 (DSA), Risikobewertungspflichten sehr großer Online-Plattformen; Art. 75
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Published
- 28 May 2026
- Commission fines Temu €200 million for breaching the Digital Services Act Press release of an authority
- IP/26/1178 Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
29 Dec 2025 Cloudflare, Inc.AGCOM: €14.2m fine for Cloudflare for ignoring an anti-piracy blocking order €14.2m
In February 2025 (Delibera 49/25/CONS), AGCOM (Italian communications regulator) had required Cloudflare, as a service provider involved in making unlawful content accessible, to stop DNS resolution and the routing of traffic to domains and IP addresses reported via the "Piracy Shield" platform. Because the company took no measures even after the order had been served, the authority imposed a fine of 14,247,698.56 EUR – 1% of worldwide turnover, within a statutory range of up to 2%.
Orders from supervisory authorities must be implemented or challenged in court – mere inaction leads to turnover-based fines.
- Authority / court
- Autorità per le garanzie nelle comunicazioni (AGCOM)
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Art. 1 Abs. 31 Legge 249/1997 i. V. m. Legge 93/2023 (Anti-Piraterie-Gesetz) und Anordnung Delibera 49/25/CONS
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Repeat case
- no
- Mitigating circumstances
- No previous sanctions of this kind; because the provision was being applied to the company for the first time, the authority stayed below the maximum rate.
- Published
- 8 Jan 2026
- AGCOM, Delibera n. 333/25/CONS del 29 dicembre 2025, Ordinanza ingiunzione alla società Cloudflare Inc. Decision of an authority
- AGCOM, Delibera 333/25/CONS (Registerseite) Official register or notice
- AGCOM, Comunicato stampa 8 gennaio 2026: Sanzione di oltre 14 milioni di euro a Cloudflare Press release of an authority
Checked against the official source on 28 Sep 2026 · Direct link
Report an error
5 Dec 2025 XEuropean Commission: 120 million EUR DSA fine against X over blue checkmark and advertising repository €120m
First non-compliance decision under the Digital Services Act (DSA): the European Commission imposed 120 million EUR on X because the purchasable ‘verified’ checkmark deceives users, the advertising repository lacks essential information (content, topic, advertiser) and researchers are denied access to public data. X must present remedies within 60 working days and an action plan within 90 working days respectively.
Use verification and trust symbols only if verification actually takes place – otherwise they are treated as deceptive design.
- Authority / court
- Europäische Kommission
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Verordnung (EU) 2022/2065 (DSA), Art. 25 Abs. 1, Art. 39, Art. 40 Abs. 12
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Media and online platforms
- Published
- 5 Dec 2025
- Commission fines X €120 million under the Digital Services Act Press release of an authority
- IP/25/2934 (Druckfassung) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
5 Dec 2025 TikTokTikTok: binding DSA commitments for a complete advertising repository Order
Following preliminary findings in May 2025 that TikTok’s advertising repository did not meet the requirements of the Digital Services Act, the European Commission declared commitments binding: complete ad content including links, updates within 24 hours, disclosure of targeting criteria with aggregated reach data and improved search functions. Depending on the commitment, implementation must take place within 2 to 12 months; breaches of the commitments count as breaches of the DSA.
Advertising repositories are a separate platform obligation – they must be complete, up to date and searchable, not merely exist formally.
- Authority / court
- Europäische Kommission
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Digital Services Act (Verordnung (EU) 2022/2065): Pflicht zum Werbearchiv; verbindliche Zusagen nach Art. 71
- Action
- Order
- Status of proceedings
- final
- Sector
- Media and online platforms
- Employees
- 10,000 or more
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
6 Nov 2025 Refurbed Marketplace GmbHAGCOM warns Refurbed Marketplace – first measure under the P2B Regulation in Italy Reprimand or warning
In the first Italian proceedings under the Platform-to-Business Regulation, AGCOM (Italian communications regulator) found that the online marketplace's terms and conditions gave business users insufficient information on ranking criteria, access to data and the internal complaint-handling system and mediation. The authority warned the company not to repeat the infringements and ordered it, within 120 days, to set up timely and transparent complaint handling, supplement its terms and publish reports on the complaint system.
Online marketplaces must disclose ranking criteria, data access and complaint channels for traders clearly in their terms and actually operate them.
- Authority / court
- Autorità per le garanzie nelle comunicazioni (AGCOM)
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Art. 5 Abs. 1, 9 Abs. 1 und 2, 11 Abs. 2–4 und 12 Abs. 1 Verordnung (EU) 2019/1150 (P2B-Verordnung); Art. 1 Abs. 31 Legge 249/1997
- Action
- Reprimand or warning
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Published
- 3 Dec 2025
- AGCOM, Delibera n. 263/25/CONS del 6 novembre 2025, Diffida nei confronti della società Refurbed Marketplace GmbH Decision of an authority
- AGCOM, Delibera 263/25/CONS (Registerseite) Official register or notice
- AGCOM, Comunicato stampa 3 dicembre 2025: primo provvedimento di diffida ai sensi del Regolamento platform-to-business Press release of an authority
Checked against the official source on 28 Sep 2026 · Direct link
Report an error
17 Oct 2025 WhatsApp Ireland Limited (Dienst „Channels“) und PinterestWhatsApp (Channels) and Pinterest: designated as ‘exposed to terrorist content’ Order
After both hosting services had received at least two final removal orders from EU authorities within twelve months, Coimisiún na Meán (Ireland’s media and online safety regulator) designated them as exposed to terrorist content under the TCO Regulation. They must take specific protective measures and report on them within three months; the regulator assesses their effectiveness.
Repeated removal orders trigger additional, monitored prevention obligations for platforms – content moderation must be prepared for this.
- Authority / court
- Coimisiún na Meán (irische Medien- und Online-Sicherheitsaufsicht)
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Verordnung (EU) 2021/784 (Terrorist Content Online Regulation): Einstufung als exponiert, spezifische Maßnahmen
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Media and online platforms
- Coimisiún na Meán: Further determinations made under Terrorist Content Online Regulation (TCOR) (17.10.2025) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
18 Jun 2025 AliExpressAliExpress: DSA commitments on illegal products and trader transparency made binding Order
The European Commission declared binding commitments by AliExpress relating, among other things, to the detection of illegal products such as medicines and food supplements (including via hidden links and affiliate programmes), the notice and complaint system, the transparency of advertising and recommender systems, the traceability of traders and data access for researchers; an independent monitoring trustee oversees implementation. In parallel, it made a preliminary finding of a breach of the obligation to carry out a risk assessment.
Marketplaces must systematically detect illegal products – including where they are offered via detours such as affiliate links.
- Authority / court
- Europäische Kommission
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Art. 71 Digital Services Act (Verordnung (EU) 2022/2065)
- Action
- Order
- Status of proceedings
- final
- Sector
- Retail and e-commerce
- Employees
- 10,000 or more
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Apr 2025 AppleDMA: 500 million EUR against Apple over anti-steering in the App Store €500m
In one of the first non-compliance decisions under the Digital Markets Act (DMA), the European Commission found that Apple prevents app developers from informing customers free of charge about cheaper offers outside the App Store and steering them there. In addition to a fine of 500 million EUR, the removal of the restrictions within 60 days was ordered, failing which periodic penalty payments may be imposed.
Gatekeepers must allow business users to communicate freely with their customers; technical or commercial hurdles are treated as circumvention.
- Authority / court
- Europäische Kommission
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Verordnung (EU) 2022/1925 (DMA), Anti-Steering-Pflicht
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Employees
- 10,000 or more
- Published
- 23 Apr 2025
- Commission finds Apple and Meta in breach of the Digital Markets Act Press release of an authority
- IP/25/1085 Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Apr 2025 MetaDMA: 200 million EUR against Meta over ‘consent or pay’ model €200m
Between March and November 2024, Meta offered users of Facebook and Instagram only the choice between consenting to the combination of their data for personalised advertising and a paid subscription. The European Commission saw this as a breach of the obligation under the Digital Markets Act (DMA) to offer an equivalent, less data-intensive alternative, and imposed 200 million EUR.
A binary ‘consent or pay’ is not sufficient where the law requires an equivalent option involving less data processing.
- Authority / court
- Europäische Kommission
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Verordnung (EU) 2022/1925 (DMA), Einwilligung zur Datenzusammenführung
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Media and online platforms
- Employees
- 10,000 or more
- Published
- 23 Apr 2025
- Commission finds Apple and Meta in breach of the Digital Markets Act Press release of an authority
- IP/25/1085 Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
10 Apr 2025 Luka Inc.Garante: 5 million EUR against Replika operator Luka over lack of legal basis €5m
The US operator of the Replika chatbot had not determined a legal basis for the processing, had an inadequate privacy notice and, despite declaring that minors were excluded, had no age verification. Italy's data protection authority (Garante per la protezione dei dati personali) imposed 5 million EUR and opened further proceedings concerning the training of the underlying language model.
A declared exclusion of minors is worthless without effective age verification at registration and during use.
- Authority / court
- Garante per la protezione dei dati personali
- Area of law
- AI and digital regulation · AI systems
- Legal basis
- DSGVO (Rechtmäßigkeit, Transparenz, Schutz Minderjähriger)
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Telecoms, IT and software
- Published
- 19 May 2025
- AI: Il Garante sanziona la società che gestisce il chatbot “Replika” Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
19 Mar 2025 AppleApple: Commission sets out specific interoperability obligations for iOS by DMA decision Order
In two specification decisions under the Digital Markets Act, the European Commission set out which interoperability measures Apple must take: access for manufacturers of connected devices to nine iOS features (such as notifications on smartwatches, peer-to-peer Wi-Fi, NFC, pairing) and a more transparent and faster procedure for developers’ interoperability requests.
Gatekeepers must actively open interfaces – anyone handling third-party requests sluggishly risks detailed regulatory requirements.
- Authority / court
- Europäische Kommission
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Digital Markets Act (Verordnung (EU) 2022/1925): Interoperabilitätspflicht, Spezifizierungsbeschlüsse
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Employees
- 10,000 or more
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
30 Jan 2025 Hangzhou DeepSeek Artificial Intelligence Co., Ltd.; Beijing DeepSeek Artificial Intelligence Co., Ltd.Garante blocks DeepSeek: immediate limitation of processing for Italian users Order
After the Chinese providers had declared that they did not operate in Italy and were not subject to the GDPR, Italy's data protection authority (Garante per la protezione dei dati personali) ordered, as a matter of urgency and with immediate effect, the limitation of the processing of Italian users' data and opened an investigation.
Companies that offer AI services to European users are subject to the GDPR – regardless of where they are headquartered.
- Authority / court
- Garante per la protezione dei dati personali
- Area of law
- AI and digital regulation · AI systems
- Legal basis
- DSGVO, Art. 58 Abs. 2 lit. f (Beschränkung der Verarbeitung)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Published
- 30 Jan 2025
- Intelligenza artificiale: il Garante privacy blocca DeepSeek Press release of an authority
- Garante, Provvedimento del 30 gennaio 2025 [10098477] (DeepSeek) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Jan 2025 DoNotPay, Inc.FTC: “robot lawyer” DoNotPay pays 193,000 USD for untested AI promises €187,889
According to the complaint of the Federal Trade Commission (FTC, the US consumer protection authority), DoNotPay advertised its AI chatbot as “the world’s first robot lawyer” that could replace a human lawyer, without ever having tested its performance against lawyers or having it reviewed by legal professionals. The final settlement order (5–0 vote) prohibits such claims without evidence and requires 193,000 USD and notification of subscribers from 2021 to 2023 about the limitations of the legal features.
Back performance claims for AI products with tests that prove exactly the advertised capability – “replaces the professional” is a verifiable promise.
Substantiating advertising claims about AI capabilities
- Authority / court
- Federal Trade Commission (FTC)
- Area of law
- AI and digital regulation · AI systems
- Legal basis
- Section 5 FTC Act (irreführende Geschäftspraktiken)
- Action
- Order
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Published
- 11 Feb 2025
Original amount 193,000 USD, converted at the ECB reference rate of 16 Jan 2025.
- FTC Finalizes Order with DoNotPay That Prohibits Deceptive 'AI Lawyer' Claims, Imposes Monetary Relief, and Requires Notice to Past Subscribers Press release of an authority
- FTC Cases and Proceedings: DoNotPay Enforcement database of an authority
Checked against the official source on 28 Sep 2026 · Direct link
Report an error
14 Jan 2025 Presto Automation Inc.SEC: “AI washing” – Presto Automation overstated the automation of its drive-thru AI Order
According to the Securities and Exchange Commission (SEC, the US securities regulator), the restaurant technology company, which was listed at the time, made misleading statements about its voice AI product “Presto Voice” from 2021 to 2023: it concealed that the speech recognition initially belonged to a third party and claimed that the AI eliminated the need for human order-taking, although the vast majority of orders required human intervention. The SEC issued a cease-and-desist order without a fine.
Disclose in investor communications on AI how much human work is in the product and who owns the technology – exaggeration is a capital markets violation.
Capital markets communication on AI products (“AI washing”)
- Authority / court
- U.S. Securities and Exchange Commission (SEC)
- Area of law
- AI and digital regulation · AI systems
- Legal basis
- Section 17(a)(2) Securities Act 1933; Section 13(a) Securities Exchange Act 1934
- Action
- Order
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Mitigating circumstances
- No fine owing to cooperation and remedial measures.
- Published
- 14 Jan 2025
- In the Matter of Presto Automation Inc. (Securities Act Release No. 11352) Decision of an authority
Checked against the official source on 28 Sep 2026 · Direct link
Report an error
13 Jan 2025 IntelliVision Technologies Corp.FTC: IntelliVision may no longer advertise facial recognition as “free of bias” Order
According to the complaint of the Federal Trade Commission (FTC, the US consumer protection authority), the provider of AI facial recognition claimed without sufficient evidence that its software was among the most accurate on the market and performed without gender or skin-colour bias; contrary to its advertising, it had not been trained on millions of faces, and there was no evidence for the claim that it could not be fooled by photos or videos. The final settlement order prohibits false statements on accuracy, demographic performance and spoofing detection, as well as such statements without reliable testing.
Treat statements on the fairness and accuracy of an AI model as advertising claims – anyone promising “bias-free” must have tested performance for each population group.
Verifiable statements on the accuracy and fairness of AI models
- Authority / court
- Federal Trade Commission (FTC)
- Area of law
- AI and digital regulation · AI systems
- Legal basis
- Section 5 FTC Act (irreführende Geschäftspraktiken)
- Action
- Order
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Published
- 13 Jan 2025
- FTC Finalizes Order Prohibiting IntelliVision from Making Deceptive Claims About Its Facial Recognition Software Press release of an authority
- FTC Cases and Proceedings: Intellivision Technologies Corp. Enforcement database of an authority
Checked against the official source on 28 Sep 2026 · Direct link
Report an error
30 Dec 2024 Techpump Solutions, S.L.CNMC: €308,529 fine on Techpump for lack of age checks on video platforms €308,529
The Comisión Nacional de los Mercados y la Competencia (CNMC, Spanish competition and markets authority) imposed seven fines totalling 308,529 EUR (five of 44,829 and two of 42,192 EUR) on Techpump Solutions because seven video-sharing platforms with pornographic content operated by the company lacked effective age verification and minors could gain access simply by declaring themselves to be adults. According to the CNMC, the company did not adequately remedy the shortcomings despite requests to do so.
Platforms with age-restricted content need genuine age verification; a mere click-through self-declaration does not meet Spanish requirements.
Protection of minors and age verification on platforms
- Authority / court
- Comisión Nacional de los Mercados y la Competencia (CNMC)
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Art. 89.1.e) und Art. 157.8 Ley 13/2022 General de Comunicación Audiovisual
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Media and online platforms
- Published
- 17 Jan 2025
- CNMC, Resolución SNC/DTSA/008/24 (Techpump Solutions, 30.12.2024) Decision of an authority
- CNMC Expediente SNC/DTSA/008/24 Enforcement database of an authority
- La CNMC sanciona a Techpump por no verificar de manera eficaz la mayoría de edad de sus usuarios Press release of an authority
Checked against the official source on 28 Sep 2026 · Direct link
Report an error
26 Nov 2024 Evolv Technologies Holdings, Inc.FTC: Evolv to let schools exit contracts – alleged overstated advertising for AI weapons scanners Order
According to the complaint of the Federal Trade Commission (FTC, the US consumer protection authority), Evolv advertised that its AI-powered security scanners would detect all weapons, ignore harmless items and be more accurate and faster than metal detectors; according to the complaint, the devices at one school missed a knife in October 2022 that was used to stab a student. The settlement order filed together with the complaint at the federal court in Massachusetts is to allow schools with contracts from April 2022 to June 2023 to cancel and to prohibit unsubstantiated claims about detection performance, false alarms and staffing costs; according to the FTC case page, court approval was still pending in March 2025.
Keep performance claims for safety-critical AI accurate – overstated claims become a contractual risk, and customers can be released from contracts based on them.
Performance claims for AI security technology
- Authority / court
- Federal Trade Commission (FTC)
- Area of law
- AI and digital regulation · AI systems
- Legal basis
- Section 5 FTC Act; Stipulated Order for Permanent Injunction
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Defence and security
- Published
- 26 Nov 2024
- FTC Takes Action Against Evolv Technologies for Deceiving Users About its AI-Powered Security Screening Systems Press release of an authority
- FTC v. Evolv Technologies Holdings, Inc. Enforcement database of an authority
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link