Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe and North America: 1,370 cases from 35 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

1case from 1 jurisdiction
€18,745Total of monetary amounts
€18,745Largest single case: Lab Pharma AS
€18,745Median per case with an amount

Click a bar to drill down one level.

Where?

by authority
  1. Datatilsynet €18,745 100 % · 1 case

What for?

by area of law

All areas of law

  1. Data protection €18,745 100 % · 1 case

Who?

by company
  1. Anonymised companies €421.7m 100 % · 1 case
  2. Elkjøp Nordic AS, Elkjøp Norge AS €1.85m 0 % · 1 case
  3. Lab Pharma AS €18,745 0 % · 1 case

When?

per quarter, by date of decision
Trend
PeriodCasesTotal
Q3 20230—
Q4 20230—
Q1 20240—
Q2 20240—
Q3 20240—
Q4 20240—
Q1 20250—
Q2 20250—
Q3 20250—
Q4 20250—
Q1 20260—
Q2 20260—
Q3 20261€18,745

1 case

12 Aug 2026 Lab Pharma ASLab Pharma AS: NOK 205,000 for threatening Datatilsynet staff NorwayData subject rights and transparency €18,745

Datatilsynet (Norwegian Data Protection Authority) fined the online dietary supplement retailer Lab Pharma AS NOK 205,000 for breaching its duty to cooperate with the supervisory authority (Art. 31 GDPR): the company had threatened case handlers with police reports and lawsuits in order to end the investigation of a complaint, and submitted requested documents late. The authority also ordered the company to delete the name and images of a former advertising partner (an influencer) from all its websites and to stop using her data for marketing until it can demonstrate a legal basis, as the underlying contract had already expired in March 2017.

What organisations can take from it

Anyone who considers a supervisory order unlawful must use the available appeal routes – threats against case handlers and missed deadlines become a sanctionable breach in their own right.

Relevance to training and awareness

Dealing with supervisory authorities and the duty to cooperate

Authority / court
Datatilsynet
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 31, Art. 58 Abs. 2 lit. f, g und i, Art. 83 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Culpability
intentional
Liability of senior managers
Datatilsynet attributed the intentional conduct of the company's management to the company.
Published
17 Aug 2026

Original amount 205,000 NOK, converted at the ECB reference rate of 12 Aug 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

Ready for training that sticks?

Try it free for 14 days — from 1 user, no credit card, ends automatically.

Start free trial