Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 1,370 cases from 35 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by countryWhat for?
by area of lawAll areas of law
Who?
by company- Eni S.p.A., Kuwait Petroleum Italia S.p.A. (Q8), Italiana Petroli S.p.A. (IP) u. a. (6 Unternehmen) €936.7m 74 % · 1 case
- TotalEnergies Marketing France, Rubis Énergie, Rubis Terminal, EG Retail €187.5m 15 % · 1 case
- Anonymised companies €120.8m 9 % · 11 cases
- Repsol Soluciones Energéticas (vormals Repsol Comercial de Productos Petrolíferos), Solred, Campsa Estaciones de Servicio u. a. (5 Gesellschaften) €20.5m 2 % · 1 case
- Acea Energia S.p.A. €3m 0 % · 1 case
- Repsol Comercializadora de Electricidad y Gas, S.L. €1.38m 0 % · 1 case
- RASEMA s.r.o.; M – D – J, spol. s.r.o.; SIMA plus Krompachy, s.r.o.; BarCom spol. s.r.o. €1.1m 0 % · 1 case
- UAB „Emsi“ €1.02m 0 % · 1 case
- Curenergía Comercializador de Último Recurso, S.A.U. €500,000 0 % · 1 case
- HEP-Toplinarstvo d.o.o. €320,000 0 % · 1 case
- 20 more€1.39m
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 0 | — |
| Q1 2024 | 0 | — |
| Q2 2024 | 0 | — |
| Q3 2024 | 0 | — |
| Q4 2024 | 0 | — |
| Q1 2025 | 0 | — |
| Q2 2025 | 1 | €1.38m |
| Q3 2025 | 0 | — |
| Q4 2025 | 0 | — |
| Q1 2026 | 0 | — |
| Q2 2026 | 0 | — |
| Q3 2026 | 0 | — |
1 case
26 May 2025 Repsol Comercializadora de Electricidad y Gas, S.L.AEPD: €1.38m fine for Repsol retail arm over contracts under mixed-up customer data €1.38m
Because another customer's switching request with an almost identical name was recorded in the complainant's customer account, gas and electricity contracts for a supply point unknown to her ran under her data, and a third party, as contract holder, gained access to that data. The AEPD imposed 130,000 EUR for breaching the accuracy principle (Art. 5(1)(d)) and 1,250,000 EUR for inadequate security measures (Art. 32), 1,380,000 EUR in total.
Where names are similar, customer data must be matched against unique identifiers before any contract change so that no contracts are created under someone else's data.
Unambiguous matching of customer data when concluding contracts
- Authority / court
- Agencia Española de Protección de Datos (AEPD)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 5 Abs. 1 lit. d, Art. 32 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Energy and utilities
- AEPD, Resolución PS/00090/2024 (EXP202207990), Repsol Comercializadora de Electricidad y Gas Decision of an authority
- AEPD, Memoria 2025 (Tabelle der 2025 unterzeichneten Bußgelder über 1 Mio. Euro) Official register or notice
Checked against the official source on 28 Sep 2026 · Direct link