Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,033 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

1case from 1 jurisdiction
€8,438Total of monetary amounts
€8,438Largest single case: City of Boardman (Oregon)
€8,438Median per case with an amount

Click a bar to drill down one level.

When?

per quarter, by date of decision
Trend
PeriodCasesTotal
Q4 20230–
Q1 20240–
Q2 20240–
Q3 20240–
Q4 20240–
Q1 20251€8,438
Q2 20250–
Q3 20250–
Q4 20250–
Q1 20260–
Q2 20260–
Q3 20260–
Q4 20260–

1 case

7 Jan 2025 City of Boardman (Oregon)City of Boardman: 8,770 USD – water system's risk assessment was an empty template USACritical infrastructure €8,438

The U.S. Environmental Protection Agency (EPA, Region 10) imposed a civil penalty of 8,770 USD by consent agreement and final order on the City of Boardman (Oregon), whose drinking water system serves around 4,490 people. According to the EPA, the city had not prepared the risk and resilience assessment and emergency response plan required by the Safe Drinking Water Act on time and had not complied with a 2022 EPA order: at an inspection in April 2024 the assessment was an empty template, and the emergency response plan dated from 2005 and contained no cybersecurity section. The city admitted jurisdiction without admitting or denying the factual allegations and waived its right to appeal. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Mandatory assessments of physical and cyber security must be substantively prepared and kept up to date – a template that has merely been certified does not meet the obligation.

Relevance to training and awareness

Actually prepare the risk and resilience assessment, including cybersecurity, and keep the emergency response plan current

Authority / court
U.S. Environmental Protection Agency (EPA), Region 10
Area of law
Information security and cyber · Critical infrastructure
Legal basis
Safe Drinking Water Act Section 1433(a) und (b) (42 U.S.C. § 300i-2) sowie Section 1414(g)(3)(A); Strafe nach Section 1414(g)(3)(B) (42 U.S.C. § 300g-3(g)(3)(B))
Action
Fine
Status of proceedings
final
Sector
Energy and utilities
Repeat case
yes
Published
7 Jan 2025

Original amount 8,770 USD, converted at the ECB reference rate of 7 Jan 2025.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

Ready for training that actually lands?

Try the combination for free: automated administration for you, learning formats that fit your team, with no minimum or credit card.

Start 14-day free trial