Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,207 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

Public sector Stichting Hogeschool van Arnhem en Nijmegen (HAN University of Applied Sciences) Clear all filters

1case from 1 jurisdiction

€175,000Total of monetary amounts

€175,000Largest single case: Stichting Hogeschool van Arnhem en Nijmegen (HAN University of Applied Sciences)

€175,000Median per case with an amount

Click a bar to drill down one level.

by amount by number of cases

Where?

by region

All jurisdictions

EU €175,000 100 % · 1 case

What for?

by area of law

All areas of law

Data protection €175,000 100 % · 1 case

Who?

by company

When?

per year, by date of decision

Trend
Period	Cases	Total
2025	1	€175,000
2026	0	–

1 case

Newest first Highest amounts

15 Dec 2025 Stichting Hogeschool van Arnhem en Nijmegen (HAN University of Applied Sciences)Netherlands: 175,000 EUR against HAN university over inadequate security after hack NetherlandsData breaches and data security €175,000

In 2021, a hacker gained access via a web form to a web server and a database server of the university, obtained, among other things, names with passwords and citizen service numbers of students and staff, and unsuccessfully demanded a ransom. According to the Dutch data protection authority (Autoriteit Persoonsgegevens, AP), security was not aligned with the risks, and the rights of a database account were not restricted.

What organisations can take from it

Give database accounts of web applications minimal rights so that a single vulnerability does not expose the entire data set.

Authority / court: Autoriteit Persoonsgegevens (AP)
Area of law: Data protection · Data breaches and data security
Legal basis: DSGVO Art. 32
Action: Fine
Status of proceedings: final
Sector: Public sector
Culpability: negligent
Mitigating circumstances: Settlement without objection; active damage limitation, strengthened resilience and sharing of lessons learned with other organisations.
Published: 17 Dec 2025

Sources

HAN krijgt boete van 175.000 euro voor onvoldoende beveiliging van persoonsgegevens Press release of an authority
Boete HAN Decision of an authority
AP: Besluit tot oplegging van een bestuurlijke boete aan Stichting Hogeschool van Arnhem en Nijmegen Decision of an authority

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

How the radar is compiled

Official sources only

Every case is based on a decision, press release or database of an authority or a court. Press and law-firm reports count at most as additional references.

Four-eyes check

Whoever enters a case may not approve it. A second, independent check compares company, date, amount and area of law with the source. Only then is the case published.

Comparable amounts

Amounts are converted at the ECB reference rate on the day of the decision. Each case also shows the original amount.

Corrections on record

A correction is a new version that is checked again. Every change is logged. You can report errors directly on each case.

Case texts are translated from the German original. Where a translation is not yet available, the German text is shown and marked “(German original)”. Names of authorities, laws and companies are given as in the source (company names until they are anonymised).

Company names are anonymised two years after the decision in a case, in line with the practice of many supervisory authorities. The official sources remain linked.

The radar reports on published decisions and is not legal advice. Decisions that are not yet final are marked as such where the status is known.

Embed the radar on your website

Ready for training that actually lands?