Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe and North America: 1,370 cases from 35 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

IcelandOther Clear all filters
1case from 1 jurisdiction
€23,891Total of monetary amounts
€23,891Largest single case: an Icelandic event hall operator
€23,891Median per case with an amount

Click a bar to drill down one level.

Where?

by authority
  1. Persónuvernd 1 case 100 % · €23,891

What for?

by area of law

All areas of law

  1. Data protection 1 case 100 % · €23,891

Who?

by company
  1. Anonymised companies 1 case 100 % · €23,891

When?

per quarter, by date of decision
Trend
PeriodCasesTotal
Q3 20230—
Q4 20231€23,891
Q1 20240—
Q2 20240—
Q3 20240—
Q4 20240—
Q1 20250—
Q2 20250—
Q3 20250—
Q4 20250—
Q1 20260—
Q2 20260—
Q3 20260—

1 case

17 Oct 2023 an Icelandic event hall operatorIceland: event hall operator fined over CCTV surveillance at events IcelandVideo surveillanceanonymised €23,891

Persónuvernd (Icelandic Data Protection Authority) fined the operator of an Icelandic event hall 3,500,000 ISK after finding on 7 February 2023 that video surveillance during events held by third parties took place without a legal basis, without a specified legitimate purpose and without adequate information. Weighing heavily was that the cameras also covered rooms where children and young people stayed overnight as well as Covid-19 mass vaccinations, and that the surveillance had affected a very large number of people since at least 2008.

What organisations can take from it

Video surveillance at event venues needs a clearly defined purpose and a legal basis and must not capture sensitive situations such as children staying overnight or healthcare services.

Relevance to training and awareness

Video surveillance at event venues: purpose, legal basis and sensitive areas

Authority / court
Persónuvernd
Area of law
Data protection · Video surveillance
Legal basis
Art. 5 Abs. 1 Bst. a und b, Art. 5 Abs. 2, Art. 6 Abs. 1 und Art. 13 DSGVO; § 8 Abs. 1 Nr. 1 und 2 und Abs. 2, §§ 9 und 17 Abs. 2 Gesetz Nr. 90/2018 (isländisches Datenschutzgesetz); Geldbuße nach § 46 Abs. 3 Gesetz Nr. 90/2018 i.V.m. Art. 83 Abs. 5 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Mitigating circumstances
There was signage, albeit inadequate; the company cooperated with the authority and partly implemented the earlier orders; no financial damage (given little weight by the authority).
Published
17 Oct 2023

Original amount 3,500,000 ISK, converted at the ECB reference rate of 17 Oct 2023.

Checked against the official source on 28 Sep 2026 · Company name anonymised since 17 Oct 2025 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

Ready for training that sticks?

Try it free for 14 days — from 1 user, no credit card, ends automatically.

Start free trial