Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe and North America: 718 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

Canada Healthcare Fraser Health Authority, Provincial Health Services Authority, Vancouver Coastal Health Clear all filters

1case from 1 jurisdiction

—Total of monetary amounts (0 cases with an amount)

—Largest single case

—Median per case with an amount

Click a bar to drill down one level.

by amount by number of cases

Where?

by level

Provinces — 0 % · 1 case

What for?

by area of law

All areas of law

Data protection — 0 % · 1 case

Who?

by company

When?

per quarter, by date of decision

Trend
Period	Cases	Total
Q3 2023	0	—
Q4 2023	0	—
Q1 2024	0	—
Q2 2024	0	—
Q3 2024	0	—
Q4 2024	0	—
Q1 2025	0	—
Q2 2025	0	—
Q3 2025	0	—
Q4 2025	0	—
Q1 2026	1	—
Q2 2026	0	—
Q3 2026	0	—

1 case

Newest first Highest amounts

18 Feb 2026 Fraser Health Authority, Provincial Health Services Authority, Vancouver Coastal HealthBritish Columbia: 36 hospital staff accessed records of Lapu-Lapu Day victims without authorisation Canada, BCData breaches and data security Other

Following the tragedy at the Lapu-Lapu Day festival in 2025, 36 employees of three health authorities accessed patient data of 16 admitted persons without authorisation in 71 instances. Those affected were not informed without undue delay; the Information and Privacy Commissioner for British Columbia (OIPC BC) made nine recommendations, including automated access monitoring and deterrent disciplinary measures.

What organisations can take from it

Curiosity is no reason for access: monitor access to the records of high-profile cases in real time and sanction breaches noticeably.

Relevance to training and awareness

Unauthorised viewing of patient records (snooping)

Authority / court: Office of the Information and Privacy Commissioner for British Columbia (OIPC BC)
Area of law: Data protection · Data breaches and data security
Legal basis: Freedom of Information and Protection of Privacy Act (FIPPA) BC, s. 25.1
Action: Other
Status of proceedings: unknown
Sector: Healthcare
Culpability: intentional
Mitigating circumstances: Appropriate safeguards were in place; the authorities responded quickly and accepted all recommendations.
Published: 18 Feb 2026

Sources

Investigation reveals 71 snooping incidents by 36 healthcare workers following Lapu Lapu Day tragedy Press release of an authority

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

How the radar is compiled

Official sources only

Every case is based on a decision, press release or database of an authority or a court. Press and law-firm reports count at most as additional references.

Four-eyes check

Whoever enters a case may not approve it. A second, independent check compares company, date, amount and area of law with the source. Only then is the case published.

Comparable amounts

Amounts are converted at the ECB reference rate on the day of the decision. Each case also shows the original amount.

Corrections on record

A correction is a new version that is checked again. Every change is logged. You can report errors directly on each case.

Case texts are translated from the German original. Where a translation is not yet available, the German text is shown and marked “(German original)”. Names of authorities, laws and companies are given as in the source.

The radar reports on published decisions and is not legal advice. Decisions that are not yet final are marked as such where the status is known.

Embed the radar on your website

Who was sanctioned, and for what?

Ready for training that sticks?