Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America and Asia-Pacific: 1,905 cases from 39 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by area of lawAll areas of law
Who?
by company- Becton, Dickinson and Company (BD) €166.7m 42 % · 1 case
- Anonymised companies €56.6m 14 % · 21 cases
- Access DX Laboratory, LLC €31.7m 8 % · 1 case
- Advanced Pathology Solutions PLLC und APS MSO LLC €25.9m 6 % · 1 case
- C.R. Bard, Inc.; Liberator Medical Supply, Inc.; Liberator Holdings; Rochester Medical Corporation €16.3m 4 % · 1 case
- NUWAY Alliance, Inc. €15.8m 4 % · 1 case
- Medirex s. r. o.; KLINICKÁ BIOCHÉMIA s.r.o.; Unilabs Slovensko, s. r. o.; synlab slovakia s. r. o.; Asociácia laboratórií €14.6m 4 % · 1 case
- Oroville Hospital €9.77m 2 % · 1 case
- NeoGenomics Laboratories Inc. €8.59m 2 % · 1 case
- PHOENIX Zdravotnícke zásobovanie, a.s.; TRANSMEDIC SLOVAKIA, s.r.o. (in Konkurs) €7.8m 2 % · 1 case
- 33 more€46m
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q4 2023 | 0 | – |
| Q1 2024 | 0 | – |
| Q2 2024 | 0 | – |
| Q3 2024 | 0 | – |
| Q4 2024 | 0 | – |
| Q1 2025 | 0 | – |
| Q2 2025 | 0 | – |
| Q3 2025 | 0 | – |
| Q4 2025 | 1 | €1.2m |
| Q1 2026 | 0 | – |
| Q2 2026 | 0 | – |
| Q3 2026 | 0 | – |
| Q4 2026 | 0 | – |
1 case
21 Nov 2025 IDCQ Hospitales y Sanidad, S.L.U.AEPD: €1.2m fine for hospital operator IDCQ over disposed patient scans €1.2m
A hospital of the group had removed from its archive earlier MRI scans that a patient had brought in for comparison once an internal collection period had expired, so that they were no longer available. The AEPD imposed 100,000 EUR each for processing health data without a legal basis (Art. 9 and Art. 6) and 1,000,000 EUR for lack of data protection by design in the procedure (Art. 25), 1,200,000 EUR in total.
Documents handed over by patients are health data and must not be destroyed under internal clear-out deadlines.
Handling health records handed over by patients
- Authority / court
- Agencia Española de Protección de Datos (AEPD)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 6, 9, 25 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Healthcare
- Published
- 20 Mar 2026
- AEPD, Resolución PS/00288/2024 (EXP202402851), IDCQ Hospitales y Sanidad Decision of an authority
- BOE: Resolución de 4 de marzo de 2026 der AEPD, Sanktionen über 1 Mio. Euro Official register or notice
Checked against the official source on 28 Sep 2026 · Direct link