Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 756 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by authority- Information Commissioner's Office (ICO) 2 cases 50 % · €898,979
- Health and Safety Executive (Glasgow Sheriff Court) 1 case 25 % · €92,092
- Health and Safety Executive (Sheffield Magistrates' Court) 1 case 25 % · €69,196
What for?
by area of lawAll areas of law
Who?
by companyWhen?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 0 | — |
| Q1 2024 | 0 | — |
| Q2 2024 | 0 | — |
| Q3 2024 | 1 | €898,979 |
| Q4 2024 | 0 | — |
| Q1 2025 | 0 | — |
| Q2 2025 | 0 | — |
| Q3 2025 | 0 | — |
| Q4 2025 | 0 | — |
| Q1 2026 | 2 | €161,288 |
| Q2 2026 | 0 | — |
| Q3 2026 | 1 | — |
4 cases
27 Jul 2026 Metropolitan Police ServiceICO: order and reprimand against London's Met Police after disclosure of sensitive data Order
The Metropolitan Police handed a defendant unredacted documents containing the new address and telephone number of a stalking victim, and in a circular e-mail disclosed 18 people with a parliamentary connection in an open recipient list. The UK Information Commissioner's Office (ICO) ordered improvements within 3 and 12 months, including in data protection training completion rates.
Policies are not enough if mandatory training goes uncompleted for years – monitor and enforce training completion rates.
Redacting documents, e-mail distribution lists (BCC), data protection training
Missing or inadequate training played a role in the decision.
- Authority / court
- Information Commissioner's Office (ICO)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Data Protection Act 2018, Section 40
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Public sector
- Employees
- 10,000 or more
- Culpability
- negligent
- Published
- 5 Aug 2026
- Metropolitan Police Service issued with enforcement notice and reprimand following data protection failures Press release of an authority
- ICO Enforcement notice: Metropolitan Police Service Enforcement database of an authority
- ICO Reprimand: Metropolitan Police Service Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
19 Jan 2026 Derbyshire ConstabularyDerbyshire Constabulary: 60,000 GBP after burn injuries during Molotov cocktail training €69,196
During a public order training exercise in February 2021, police officers wearing flame-retardant protective clothing had petrol bombs thrown at them; four officers suffered burns with permanent scarring. There was no information on the service life and testing of the PPE, no risk assessment for the manufacture and use of the petrol bombs, and no safe systems of work. The Health and Safety Executive (HSE) prosecution resulted in a fine of 60,000 GBP plus 9,470 GBP in costs.
Realistic operational training also needs a risk assessment and tested protective equipment.
Safety in high-risk exercises and PPE testing
- Authority / court
- Health and Safety Executive (Sheffield Magistrates' Court)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Health and Safety at Work etc. Act 1974, s. 2(1)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Public sector
- Published
- 20 Jan 2026
Original amount 60,000 GBP, converted at the ECB reference rate of 19 Jan 2026.
- Derbyshire police prosecuted for failing to protect officers Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
8 Jan 2026 Glasgow City CouncilGlasgow City Council: 80,000 GBP after collapse of a rusted-through lamp post €92,092
In June 2023, a lamp post dating from the 1950s/60s, whose steel at the base was at least 60 % rusted through, fell over and seriously injured a pedestrian. The post had been rated as poor in 2022 but was not scheduled for replacement until 2024; the council's visual inspections did not identify the acute risk of collapse. The Health and Safety Executive (HSE) prosecution resulted in a fine of 80,000 GBP.
Inspection regimes for ageing infrastructure must prioritise findings and trigger immediate action where there is acute danger.
- Authority / court
- Health and Safety Executive (Glasgow Sheriff Court)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Health and Safety at Work etc. Act 1974, s. 3(1)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Public sector
- Published
- 12 Jan 2026
Original amount 80,000 GBP, converted at the ECB reference rate of 8 Jan 2026.
- Glasgow City Council fined £80,000 after military veteran struck by collapsing lamppost Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
26 Sep 2024 Police Service of Northern Ireland (PSNI)ICO: £750,000 against Northern Ireland police after spreadsheet error in FOI response €898,979
In its response to a freedom of information request, the Police Service of Northern Ireland (PSNI) published an Excel file whose hidden worksheet contained the surnames, initials, rank and role of all 9,483 employees. The file was visible for just over two hours and was deleted after almost three hours; the police assumed that it had fallen into the hands of dissident republicans.
Before releasing any file, check for hidden sheets, metadata and raw data – a four-eyes approval process prevents such breaches.
Checking files before publication (hidden worksheets)
- Authority / court
- Information Commissioner's Office (ICO)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- UK GDPR Art. 5 Abs. 1 lit. f, Art. 32 Abs. 1 und 2
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Public sector
- Employees
- 1,000 to 9,999
- Culpability
- negligent
- Mitigating circumstances
- Application of the public sector approach; without it, the fine would have been £5.6 million.
- Published
- 3 Oct 2024
Original amount 750,000 GBP, converted at the ECB reference rate of 26 Sep 2024.
- What price privacy? Poor PSNI procedures culminate in £750k fine Press release of an authority
- ICO Enforcement: Police Service of Northern Ireland Enforcement database of an authority
- ICO Penalty Notice: Police Service of Northern Ireland Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link