Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America and Asia-Pacific: 1,838 cases from 37 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by area of lawAll areas of law
Who?
by company- Anonymised companies €403.5m 80 % · 17 cases
- Archer-Daniels-Midland Company (ADM) €33.5m 7 % · 1 case
- Amica Chips S.p.A., Pata S.p.A., Preziosi Food S.p.A. €23.3m 5 % · 1 case
- Synadis Bio, Greenweez (mit Carrefour SA), ITM Entreprises (mit Les Mousquetaires), Les Comptoirs de la Bio €12.7m 3 % · 1 case
- The Scoular Company €8.91m 2 % · 1 case
- Alco Harvesting LLC dba Bonipak Produce Inc. und verbundene Unternehmen €5.22m 1 % · 1 case
- VAFO PRAHA, s.r.o. €4.74m 1 % · 1 case
- McDonald’s Polska sp. z o.o.; 24/7 Communication sp. z o.o. (Auftragsverarbeiter) €4m 1 % · 1 case
- Risham Nominees Pty Ltd (Centenary Bakehouse) €2.07m 0 % · 1 case
- Taylor Farms New Jersey Inc. €974,951 0 % · 1 case
- 34 more€5.98m
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q4 2023 | 0 | – |
| Q1 2024 | 0 | – |
| Q2 2024 | 0 | – |
| Q3 2024 | 0 | – |
| Q4 2024 | 0 | – |
| Q1 2025 | 0 | – |
| Q2 2025 | 1 | €4m |
| Q3 2025 | 0 | – |
| Q4 2025 | 0 | – |
| Q1 2026 | 0 | – |
| Q2 2026 | 0 | – |
| Q3 2026 | 0 | – |
| Q4 2026 | 0 | – |
1 case
23 Jun 2025 McDonald’s Polska sp. z o.o.; 24/7 Communication sp. z o.o. (Auftragsverarbeiter)McDonald’s Polska and service provider: PLN 17.1m after staff rotas were publicly accessible €4m
Data of employees of McDonald’s and its franchisees from the rota module (including names, PESEL or passport numbers, working hours, positions) sat in a publicly accessible directory. UODO found that McDonald’s Polska had carried out no risk analysis, implemented no appropriate safeguards and not effectively supervised its processor, and imposed fines of PLN 1,632,063, 13,600,528 and 1,700,066 (PLN 16,932,657 in total) and a reprimand; the processor 24/7 Communication received PLN 94,286, 42,429 and 47,143 (PLN 183,858), making PLN 17,116,515 overall. The decision is not final.
Outsourcing HR processes does not shift responsibility: a risk analysis, access to the system configuration and audits actually carried out at the provider are mandatory.
Protecting employee data in outsourced HR systems
- Authority / court
- Prezes Urzędu Ochrony Danych Osobowych (UODO)
- Area of law
- Data protection · Employee data
- Legal basis
- Art. 5 Abs. 1 lit. c und f, Art. 5 Abs. 2, Art. 25 Abs. 1, Art. 28 Abs. 1, Art. 32 Abs. 1 und 2, Art. 38 Abs. 1 DSGVO sowie Art. 34 Abs. 1 und 3 lit. c DSGVO (Verwarnung) (Verantwortlicher); Art. 28 Abs. 3 lit. c, Abs. 4 und 9, Art. 32 Abs. 1 und 2, Art. 38 Abs. 1 DSGVO (Auftragsverarbeiter)
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Food and agriculture
- Published
- 21 Jul 2025
Original amount 17,116,515 PLN, converted at the ECB reference rate of 23 Jun 2025.
- Decyzja Prezesa UODO DKN.5130.4179.2020 vom 23.06.2025 (pseudonymisiert) Decision of an authority
- UODO: Za ochronę danych osobowych są odpowiedzialni zarówno administrator, jak i podmiot przetwarzający Press release of an authority
Checked against the official source on 28 Sep 2026 · Direct link