Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe and North America: 756 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

Media and online platformsMeta Platforms Ireland Limited Clear all filters
3cases from 2 jurisdictions
€342mTotal of monetary amounts (2 cases with an amount)
€251mLargest single case: Meta Platforms Ireland Limited
€171mMedian per case with an amount

Click a bar to drill down one level.

by amountby number of cases

Where?

by region

All jurisdictions

  1. EU €342m 100 % · 3 cases

What for?

by area of law

All areas of law

  1. Data protection €342m 100 % · 2 cases
  2. AI and digital regulation — 0 % · 1 case

Who?

by company
  1. TikTok Technology Limited €530m 26 % · 1 case
  2. Booking.com €413.2m 20 % · 1 case
  3. Meta Platforms Ireland Limited €342m 17 % · 3 cases
  4. Google LLC und Google Ireland Limited €325m 16 % · 1 case
  5. Meta €200m 10 % · 1 case
  6. X €120m 6 % · 1 case
  7. Clear Channel Outdoor Holdings Inc. €24.8m 1 % · 1 case
  8. Cineplex €24m 1 % · 1 case
  9. DPG Media nv; Mediahuis nv; PPP Belgium bv; bpost nv (Kronzeuge) €11.9m 1 % · 1 case
  10. MM Grupp OÜ €7.51m 0 % · 1 case
  11. 31 more€27.8m

When?

per quarter, by date of decision
Trend
PeriodCasesTotal
Q3 20230—
Q4 20230—
Q1 20240—
Q2 20240—
Q3 20241€91m
Q4 20241€251m
Q1 20250—
Q2 20250—
Q3 20250—
Q4 20250—
Q1 20260—
Q2 20261—
Q3 20260—

3 cases

Newest firstHighest amounts
17 Dec 2024 Meta Platforms Ireland LimitedIreland: 251 million EUR against Meta over data breach and deficient notification IrelandData breaches and data security €251m

In 2018, attackers exploited a flaw in the ‘View As’ feature and gained access to around 29 million accounts, of which around 3 million were in the EEA. Ireland's Data Protection Commission (DPC) imposed 8 million EUR (Art. 33(3)) and 3 million EUR (Art. 33(5)) for incomplete notification and documentation, as well as 130 million EUR and 110 million EUR for infringements of data protection by design (Art. 25(1) and (2)).

What organisations can take from it

Make data breach notifications complete, and document every breach internally in a traceable manner.

Authority / court
Data Protection Commission (DPC)
Area of law
Data protection · Data breaches and data security
Legal basis
DSGVO Art. 33 Abs. 3 und 5, Art. 25 Abs. 1 und 2
Action
Fine
Status of proceedings
unknown
Sector
Media and online platforms
Employees
10,000 or more
Published
17 Dec 2024
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

24 Jun 2026 Meta Platforms Ireland LimitedMeta: infringement of the P2B Regulation after fashion retailer’s Facebook page was hacked DenmarkPlatform obligations Order

After the Facebook page of the Danish fashion retailer Clothing By Ros ApS was hacked in 2023, Meta failed to respond appropriately for almost two years, gave no reasons for the de facto suspension and offered no effective complaint-handling procedure. The Konkurrencerådet (Danish Competition Council) found infringements of the P2B Regulation and ordered Meta to comply with the rules on statements of reasons and complaint handling in future.

What organisations can take from it

Platform operators must give reasons for suspending business users and handle complaints promptly – silence counts as a decision in its own right.

Authority / court
Konkurrencerådet (Danish Competition Council)
Area of law
AI and digital regulation · Platform obligations
Legal basis
Verordnung (EU) 2019/1150 (P2B) Art. 4, Art. 11
Action
Order
Status of proceedings
unknown
Sector
Media and online platforms
Employees
10,000 or more
Published
24 Jun 2026
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

26 Sep 2024 Meta Platforms Ireland LimitedIreland: 91 million EUR against Meta over plaintext passwords IrelandData breaches and data security €91m

Meta stored users' passwords unencrypted in plaintext in internal systems and reported this to Ireland's Data Protection Commission (DPC) in March 2019. The DPC found infringements of the security obligations (Art. 5(1)(f), Art. 32(1)) and of the notification and documentation obligations (Art. 33(1) and (5)), and additionally issued a reprimand.

What organisations can take from it

Never store or log passwords in plaintext – not even in internal systems.

Authority / court
Data Protection Commission (DPC)
Area of law
Data protection · Data breaches and data security
Legal basis
DSGVO Art. 5 Abs. 1 lit. f, Art. 32 Abs. 1, Art. 33 Abs. 1 und 5
Action
Fine
Status of proceedings
unknown
Sector
Media and online platforms
Employees
10,000 or more
Mitigating circumstances
According to the DPC, the passwords were not disclosed to external third parties.
Published
27 Sep 2024
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

Ready for training that sticks?

Try it free for 14 days — from 1 user, no credit card, ends automatically.

Start free trial