Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 1,370 cases from 35 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by area of lawAll areas of law
Who?
by company- Anonymised companies 18 cases 29 % · €541.2m
- Google 2 cases 3 % · €2.95bn
- Meta 2 cases 3 % · €200m
- Meta Platforms Ireland Limited 2 cases 3 % · €251m
- A*** GmbH (Werbeagentur, im Bescheid pseudonymisiert) 1 case 2 % · €870
- Airbnb 1 case 2 % · €64.1m
- Autobutler ApS 1 case 2 % · €938,174
- BT, IMG, ITV, BBC (Sky Kronzeuge) 1 case 2 % · €5.06m
- Cineplex 1 case 2 % · €24m
- Disney DTC, LLC und ABC Enterprises, Inc. (The Walt Disney Company) 1 case 2 % · €2.31m
- 33 more33 cases
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 0 | — |
| Q1 2024 | 0 | — |
| Q2 2024 | 0 | — |
| Q3 2024 | 0 | — |
| Q4 2024 | 1 | €310m |
| Q1 2025 | 0 | — |
| Q2 2025 | 0 | — |
| Q3 2025 | 0 | — |
| Q4 2025 | 0 | — |
| Q1 2026 | 0 | — |
| Q2 2026 | 0 | — |
| Q3 2026 | 0 | — |
1 case
22 Oct 2024 LinkedIn Ireland Unlimited CompanyDPC: 310 million EUR against LinkedIn over behavioural advertising without a legal basis €310m
LinkedIn analysed data of its members, including data obtained from third parties, for behavioural analysis and targeted advertising without valid consent; legitimate interests and contractual necessity did not apply either. The Data Protection Commission (DPC, the Irish data protection authority) found infringements of the principles of lawfulness, fairness and transparency, issued a reprimand, ordered the processing to be brought into compliance and imposed fines totalling 310 million EUR.
Obtain genuine consent for profiling for advertising purposes – neither “legitimate interests” nor the user contract can serve as the legal basis.
- Authority / court
- Data Protection Commission (DPC)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- DSGVO Art. 5 Abs. 1 lit. a, Art. 6, Art. 13 Abs. 1 lit. c, Art. 14 Abs. 1 lit. c
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Media and online platforms
- Employees
- 10,000 or more
- Published
- 24 Oct 2024
- Irish Data Protection Commission fines LinkedIn Ireland €310 million Press release of an authority
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link