Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 1,370 cases from 35 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by area of lawAll areas of law
Who?
by company- Anonymised companies 13 cases 20 % · €254.3m
- Yorkshire Water Services Limited 3 cases 5 % · €2.26m
- Acea Energia S.p.A. 1 case 2 % · €3m
- Adani Enterprises Limited 1 case 2 % · €236.1m
- Anglian Water Services Limited 1 case 2 % · €362,319
- Audax Renovables, S.A. – Sucursal em Portugal 1 case 2 % · €22,000
- Avila Energy Corporation 1 case 2 % · €40,005
- Bio Dynamic (UK) Limited 1 case 2 % · €365,964
- Brantner Fatra, s.r.o. 1 case 2 % · €180,200
- Cadent Gas Limited 1 case 2 % · €1.78m
- 42 more42 cases
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 0 | — |
| Q1 2024 | 0 | — |
| Q2 2024 | 0 | — |
| Q3 2024 | 0 | — |
| Q4 2024 | 0 | — |
| Q1 2025 | 0 | — |
| Q2 2025 | 1 | €1.38m |
| Q3 2025 | 0 | — |
| Q4 2025 | 0 | — |
| Q1 2026 | 0 | — |
| Q2 2026 | 0 | — |
| Q3 2026 | 0 | — |
1 case
26 May 2025 Repsol Comercializadora de Electricidad y Gas, S.L.AEPD: €1.38m fine for Repsol retail arm over contracts under mixed-up customer data €1.38m
Because another customer's switching request with an almost identical name was recorded in the complainant's customer account, gas and electricity contracts for a supply point unknown to her ran under her data, and a third party, as contract holder, gained access to that data. The AEPD imposed 130,000 EUR for breaching the accuracy principle (Art. 5(1)(d)) and 1,250,000 EUR for inadequate security measures (Art. 32), 1,380,000 EUR in total.
Where names are similar, customer data must be matched against unique identifiers before any contract change so that no contracts are created under someone else's data.
Unambiguous matching of customer data when concluding contracts
- Authority / court
- Agencia Española de Protección de Datos (AEPD)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 5 Abs. 1 lit. d, Art. 32 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Energy and utilities
- AEPD, Resolución PS/00090/2024 (EXP202207990), Repsol Comercializadora de Electricidad y Gas Decision of an authority
- AEPD, Memoria 2025 (Tabelle der 2025 unterzeichneten Bußgelder über 1 Mio. Euro) Official register or notice
Checked against the official source on 28 Sep 2026 · Direct link