Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,033 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by area of lawAll areas of law
Who?
by company- Anonymised companies €1.33bn 23 % · 100 cases
- TD Bank, N.A. und TD Bank USA, N.A. €1.19bn 21 % · 1 case
- HSBC Bank plc €267.5m 5 % · 1 case
- GVA Capital Ltd. €186.3m 3 % · 1 case
- Union Standard International Group Pty Ltd; Maxi EFX Global AU Pty Ltd (EuropeFX); BrightAU Capital Pty Ltd (TradeFred) €182.1m 3 % · 1 case
- KB Kookmin Bank, Shinhan Bank, Woori Bank, Hana Bank €158.2m 3 % · 1 case
- Royal Bank of Canada, Morgan Stanley, HSBC u. a. (5 Banken; Deutsche Bank als Kronzeugin bußgeldfrei) €126.2m 2 % · 1 case
- UBS Financial Services Inc. €115.3m 2 % · 2 cases
- The Toronto-Dominion Bank €113m 2 % · 1 case
- Xeltox Enterprises Ltd. (Cryptomus) €108.1m 2 % · 1 case
- 375 more€1.97bn
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q4 2023 | 0 | – |
| Q1 2024 | 0 | – |
| Q2 2024 | 0 | – |
| Q3 2024 | 0 | – |
| Q4 2024 | 0 | – |
| Q1 2025 | 0 | – |
| Q2 2025 | 0 | – |
| Q3 2025 | 0 | – |
| Q4 2025 | 1 | €2.7m |
| Q1 2026 | 0 | – |
| Q2 2026 | 0 | – |
| Q3 2026 | 0 | – |
| Q4 2026 | 0 | – |
1 case
16 Oct 2025 Experian Nederland B.V.AP: €2.7m fine for Experian Nederland over credit data processed without legal basis €2.7m
For its Credit Check service, offered until the end of 2024, Experian Nederland B.V. processed data on consumers' creditworthiness without being able to rely validly on legitimate interest, and did not inform the individuals concerned sufficiently. In the objection procedure the AP (Autoriteit Persoonsgegevens, Dutch data protection authority) revoked its original fining decision of 6 December 2023 and set a new fine of 2,700,000 EUR; Experian admitted both infringements.
Anyone collecting credit data on people they have never contacted directly must properly substantiate their legitimate interest and actively inform those concerned.
Legitimate interest and information duties at credit reference agencies
- Authority / court
- Autoriteit Persoonsgegevens (AP)
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- Art. 5 Abs. 1 lit. a i. V. m. Art. 6 Abs. 1 sowie Art. 12 Abs. 1 i. V. m. Art. 14 Abs. 1 und 2 DSGVO (AVG)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Published
- 17 Oct 2025
- AP – Beslissing op bezwaar Experian (Dokumentseite) Decision of an authority
- AP – Beslissing op bezwaar Experian Nederland B.V., 16 oktober 2025 Decision of an authority
Checked against the official source on 2 Oct 2026 · Direct link