Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific and Middle East: 1,929 cases from 40 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by area of lawAll areas of law
Who?
by company- Anonymised companies 25 cases 36 % · €1.72m
- Glasgow City Council 2 cases 3 % · €92,092
- Greater Manchester Police 2 cases 3 % ·
- ACRO Criminal Records Office 1 case 1 % ·
- AS "Latvijas valsts meži" 1 case 1 % · €7.86m
- ASIS – Azienda Speciale per la gestione degli Impianti Sportivi (Trento) 1 case 1 % · €8,000
- Bristol City Council 1 case 1 % ·
- Canada Revenue Agency (CRA) 1 case 1 % ·
- Cardiff University 1 case 1 % · €323,232
- City of Edinburgh Council 1 case 1 % ·
- 33 more33 cases
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q4 2023 | 0 | – |
| Q1 2024 | 0 | – |
| Q2 2024 | 0 | – |
| Q3 2024 | 0 | – |
| Q4 2024 | 0 | – |
| Q1 2025 | 0 | – |
| Q2 2025 | 0 | – |
| Q3 2025 | 0 | – |
| Q4 2025 | 1 | €75,282 |
| Q1 2026 | 0 | – |
| Q2 2026 | 0 | – |
| Q3 2026 | 0 | – |
| Q4 2026 | 0 | – |
1 case
12 Dec 2025 Police Service of ScotlandICO: £66,000 fine and reprimand for Police Scotland over handling of sensitive data €75,282
The ICO fined the Police Service of Scotland £66,000 and also issued a reprimand. The ICO found that, during a criminal investigation, the police carried out a bulk download of data from the mobile phone of an employee who had made a complaint, without ensuring that this was lawful, fair and limited to what was necessary; it found infringements for the period 18 January to 5 April 2021. For this the ICO issued the reprimand under sections 35 and 37 DPA 2018 (Part 3). The ICO also found that the Professional Standards Department later disclosed this data without authorisation to the person accused, in an internal misconduct investigation. Appropriate technical and organisational measures for compiling such misconduct packs were missing, and the breach was only reported to the ICO on 30 June 2022, although the police had known of it since 17 June 2022. For these infringements the ICO imposed the fine. The combined notice relies, among other provisions, on Articles 5(1)(f) and 32(1) UK GDPR (security of processing), Articles 5(1)(c) and 25 UK GDPR (data minimisation, data protection by design) and Article 33(1) UK GDPR (breach notification).
- Authority / court
- Information Commissioner's Office (ICO)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 5(1)(c), 5(1)(f), 25(1)-(2), 32(1) und 33(1) UK GDPR; section 155 DPA 2018 (Geldbuße); sections 35 und 37 DPA 2018 (Part 3), Verwarnung nach Schedule 13 para 2(c) DPA 2018
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Public sector
Original amount 66,000 GBP, converted at the ECB reference rate of 12 Dec 2025.
- ICO Enforcement: Police Service of Scotland. Enthält Informationen des Information Commissioner's Office, lizenziert unter der Open Government Licence v3.0. Enforcement database of an authority
- Reprimand and Penalty Notice: Police Service of Scotland (12 December 2025) Decision of an authority
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link