Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,207 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

Other Clear all filters
210cases from 33 jurisdictions
€1.65bnTotal of monetary amounts (173 cases with an amount)
€463.2mLargest single case: a UK tobacco group
€190,000Median per case with an amount

Click a bar to drill down one level.

Where?

by region

All jurisdictions

  1. USA €1.04bn 63 % · 22 cases
  2. Australia €314.8m 19 % · 4 cases
  3. United Kingdom €124.6m 8 % · 74 cases
  4. Switzerland €82.3m 5 % · 2 cases
  5. EU €75.9m 5 % · 66 cases
  6. South Korea €5.12m 0 % · 1 case
  7. Canada €3.08m 0 % · 13 cases
  8. Hong Kong €2.77m 0 % · 3 cases
  9. New Zealand €595,577 0 % · 2 cases
  10. United Arab Emirates €384,254 0 % · 9 cases
  11. 5 more€466,947

What for?

by area of law

All areas of law

  1. Sanctions and export control €472.1m 29 % · 11 cases
  2. Consumer protection and online retail €449.2m 27 % · 16 cases
  3. Money laundering and terrorist financing €398.5m 24 % · 43 cases
  4. Bribery and corruption €226.5m 14 % · 4 cases
  5. Data protection €44.5m 3 % · 80 cases
  6. Capital markets and financial supervision €21.3m 1 % · 8 cases
  7. Competition law €19.8m 1 % · 13 cases
  8. Environment and sustainability €12.4m 1 % · 9 cases
  9. Health and safety and employment law €8.58m 1 % · 15 cases
  10. Whistleblower protection €82,264 0 % · 2 cases
  11. 2 more€0

Who?

by company
  1. Anonymised companies €1.37bn 83 % · 81 cases
  2. McKinsey and Company Africa (Pty) Ltd €116.6m 7 % · 1 case
  3. SURYS SAS (Gruppe Imprimerie Nationale) €18.4m 1 % · 1 case
  4. Capita plc und Capita Pension Solutions Limited €16.1m 1 % · 1 case
  5. Ö Aktiengesellschaft (in der Entscheidung abgekürzt; Adressverlag und Direktwerbeunternehmen) €13m 1 % · 1 case
  6. Platinum Gaming Limited €11.5m 1 % · 1 case
  7. BIT Mining Ltd. (vormals 500.com) €9.48m 1 % · 1 case
  8. Stericycle, Inc. €9.23m 1 % · 1 case
  9. Philip Morris Italia S.r.l. €7m 0 % · 1 case
  10. Società Cooperativa Culture (CoopCulture) €7m 0 % · 1 case
  11. 115 more€75.6m

When?

per year, by date of decision
Trend
PeriodCasesTotal
202210€4.26m
202344€1.29bn
202446€201.8m
202559€98.6m
202651€53.7m

210 cases

18 Sep 2026 Kinpodo Co., Ltd. (株式会社金宝堂)Kinpodo: order over a bait price 'from 104,500 JPY' for family funerals JapanMisleading advertising and pricing Order

From March to May 2025, Kinpodo advertised family funerals in exclusively rented halls under the name 'Chiisana Mori no Ie' in television commercials at a price 'from 104,500 JPY'. In fact, apart from a few cases, customers had to pay at least 308,000 JPY; the order required a corrective notice, measures to prevent recurrence and cessation.

What organisations can take from it

A 'from' price may only be advertised if customers can realistically obtain it.

Relevance to training and awareness

'From' prices and bait offers

Authority / court
Consumer Affairs Agency (消費者庁, CAA)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Art. 7 Abs. 1 i. V. m. Art. 5 Nr. 2 Act against Unjustifiable Premiums and Misleading Representations (不当景品類及び不当表示防止法, Gesetz Nr. 134/1962)
Action
Order
Status of proceedings
unknown
Sector
Other
Published
18 Sep 2026

Checked against the official source on 4 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

14 Sep 2026 Fire Protection Recycling LimitedFire extinguisher explodes fatally during recycling – 40,000 GBP fine United KingdomWorkplace safety and accidents €46,730

While decommissioned powder extinguishers were being discharged in Oldbury in 2023, a cartridge-type extinguisher exploded and struck a 37-year-old employee on the head, fatally injuring him. There was no risk assessment, no safe system of work, no suitable storage and no restraint system for discharging; the recycling business (20 employees according to its annual accounts) was fined 40,000 GBP plus 17,034.25 GBP in costs.

What organisations can take from it

Carry out a documented risk assessment even for routine work with pressurised containers and provide technical restraints – experience is no substitute for a safeguard.

Authority / court
Birmingham Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2(1) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Published
17 Sep 2026

Original amount 40,000 GBP, converted at the ECB reference rate of 14 Sep 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Aug 2026 Fitnessstudiokette in Amsterdam (anonymisiert)Labour Authority: €316,875 in fines for Amsterdam gym chain NetherlandsMinimum wage and undeclared work €316,875

The Nederlandse Arbeidsinspectie (Netherlands Labour Authority) imposed fines totalling 316,875 EUR on a gym chain in Amsterdam that is not named in the release. For 25 foreign workers the required work permit or combined residence and work permit was missing, and for three people identity had not been established (Wav, Foreign Nationals Employment Act, 234,375 EUR); because of deficient records it could not be verified whether the minimum wage had been paid for all hours worked (WML, Minimum Wage and Minimum Holiday Allowance Act, 60,000 EUR), plus a breach of the Arbeidstijdenwet (Working Hours Act, 22,500 EUR). The company also received two warnings that work may be preventively halted if the same or similar breaches recur.

What organisations can take from it

Before anyone starts work, their right to work and identity must be checked and working hours must be fully recorded.

Relevance to training and awareness

Checking the right to work and recording working hours

Authority / court
Nederlandse Arbeidsinspectie
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
Wet arbeid vreemdelingen (Wav); Wet minimumloon en minimumvakantiebijslag (WML); Arbeidstijdenwet (ATW)
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
24 Aug 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Aug 2026 QuinnBet (Gibraltar) LimitedQuinnBet: £415,986 over anti-money laundering and financial vulnerability check failings United KingdomInternal controls €485,256

The operator of quinnbet.com will pay £415,986 in lieu of a financial penalty to the Consolidated Fund (the UK Government's general account) under a settlement and contribute to the Commission's investigation costs. The settlement also includes a disgorgement of £193,118, which is not included in the amount shown. A compliance assessment found breaches of the anti-money laundering licence condition LC 12.1.1 paras. 2 and 3 (March 2023 to August 2025) and of the customer interaction requirements under SRCP 3.4.3; following an error during a platform migration, some of the required financial vulnerability checks under SRCP 3.4.4 were also not carried out between February and May 2025. It is the first enforcement action against the company.

What organisations can take from it

Financial vulnerability checks are a licence requirement that must continue without gaps, including during technical changeovers.

Relevance to training and awareness

Financial vulnerability checks and AML controls in online betting

Authority / court
Gambling Commission
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
s. 116 Gambling Act 2005; LC 12.1.1 Abs. 2 und 3, SRCP 3.4.3 und SRCP 3.4.4 Abs. 1 der Licence Conditions and Codes of Practice (LCCP)
Action
Fine
Status of proceedings
final
Sector
Other
Repeat case
no
Mitigating circumstances
No previous enforcement action, a swift action plan, full cooperation, early voluntary reporting of some of the failings, voluntary divestment of the funds gained from them and early acceptance of the failings.
Published
20 Aug 2026

Original amount 415,986 GBP, converted at the ECB reference rate of 20 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Aug 2026 Truro Sawmills LimitedCornwall sawmill ignores three improvement notices: 20,000 GBP United KingdomWorkplace safety and accidents €23,330

According to the HSE, the sawmill failed to protect employees from wood dust (no face-fit testing for respiratory protective equipment, no health surveillance) and let staff drive lift trucks without training; three improvement notices from the HSE (Health and Safety Executive, Britain's workplace safety regulator) were not complied with. The court fined the company, a micro-entity, 20,000 GBP plus 5,000 GBP in costs.

What organisations can take from it

Treat improvement notices from the regulator as binding deadlines, not recommendations; ignoring them risks a fine.

Relevance to training and awareness

Lift truck training and protection against wood dust

Missing or inadequate training played a role in the decision.

Authority / court
Truro Crown Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2(1) und Section 33(1)(g) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Liability of senior managers
Measures against individuals are not reported here.
Published
21 Aug 2026

Original amount 20,000 GBP, converted at the ECB reference rate of 20 Aug 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Aug 2026 Poliserv JG (PJG) SRLPhishing on admin account – Poliserv JG must pay 3,000 EUR RomaniaData breaches and data security €2,998

Attackers obtained the credentials of a user account with administrator rights through phishing and accessed customer data. The Romanian data protection authority (ANSPDCP) criticised the lack of technical and organisational measures and of regular effectiveness testing, imposed 15,728 lei (3,000 EUR) and ordered regular employee training, including on recognising phishing e-mails. Date = publication of the press release; according to the authority, the investigation was concluded in the previous month.

What organisations can take from it

Admin accounts need MFA, and all employees must be able to recognise phishing – the supervisory authority now expressly orders training.

Relevance to training and awareness

Phishing recognition, protection of privileged accounts

Missing or inadequate training played a role in the decision.

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 32 Abs. 1 lit. b und Abs. 2 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
19 Aug 2026

Original amount 15,728 RON, converted at the ECB reference rate of 19 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Aug 2026 Panzer Norge ASPanzer Norge AS: NOK 100,000 for AML failures at an accounting firm NorwayCustomer due diligence €9,115

Finanstilsynet (Norwegian Financial Supervisory Authority) fined the accounting firm Panzer Norge AS, based in Alta, NOK 100,000 under the Anti-Money Laundering Act. The inspection found shortcomings in the firm-wide risk assessment and in customer due diligence, as well as further breaches in risk and quality management and in engagement agreements; the company, which had five employees, essentially did not dispute the breaches.

What organisations can take from it

Small accounting firms are also subject to anti-money laundering obligations and need a documented risk assessment and demonstrable customer due diligence for every engagement.

Relevance to training and awareness

Anti-money laundering obligations for accounting and advisory firms

Authority / court
Finanstilsynet
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
§§ 7, 8, 9, 12 Abs. 4, 13 Abs. 1, 3 und 4, 14, 24 und 49 hvitvaskingsloven
Action
Fine
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Culpability
negligent
Published
17 Sep 2026

Original amount 100,000 NOK, converted at the ECB reference rate of 11 Aug 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Aug 2026 AMATO BESTSELLER S.R.L.AMATO BESTSELLER: 45,000 EUR plus 50,000 lei for data access and robocalls RomaniaMarketing and consent €54,316

Following several complaints, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (Romanian data protection authority, ANSPDCP) found that current and former employees, untrained and without procedural rules, had access to extensive data (including health, family and income data), that data subjects were not informed under Art. 14 GDPR, that excessive data were collected and that automated advertising calls were made without consent. Fines: 78,465 lei (15,000 EUR, Art. 32(4)), 52,310 lei (10,000 EUR, Art. 14), 104,620 lei (20,000 EUR, Art. 5/9 GDPR) and 50,000 lei (Law 506/2004); in addition, an order to provide regular employee training. Date = publication of the press release; according to the authority, the investigation was concluded in June 2026.

What organisations can take from it

Anyone giving employees access to sensitive customer data must train them and limit access on a need-to-know basis.

Relevance to training and awareness

Training employees in handling customer data; consent for advertising calls

Missing or inadequate training played a role in the decision.

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection · Marketing and consent
Legal basis
Art. 5 Abs. 1 lit. c i. V. m. Art. 9, Art. 14, Art. 32 Abs. 4 DSGVO; Art. 12 Abs. 1 Gesetz 506/2004
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
6 Aug 2026

Original amount 285,395 RON, converted at the ECB reference rate of 6 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Aug 2026 GmbH (im Urteil anonymisiert)Illegal dumping of construction waste: company must pay €375,000 forfeiture AustriaWaste and hazardous substances €375,000

The Oberlandesgericht (OLG, Higher Regional Court) Linz added a forfeiture of 375,000 EUR to the conviction of a limited company under the Verbandsverantwortlichkeitsgesetz (VbVG, Austrian Corporate Criminal Liability Act) for intentionally handling and moving waste in a way that endangered the environment; the suspended corporate fine of 30 daily rates of 500 EUR (15,000 EUR) imposed by the Landesgericht (Regional Court) Salzburg remained in place. From May 2021 to May 2024 and again from May 2025 to February 2026, contrary to the AWG 2002 (Waste Management Act) and partly to an official decision, the company had excavated soil, construction waste, asphalt and concrete rubble accepted for payment and deposited on a plot; removal costs were put at around 3.24 million EUR. Only the forfeiture of EUR 375,000 is recorded as the amount; the corporate fine of EUR 15,000 was conditionally suspended.

What organisations can take from it

Anyone accepting and depositing waste without a permit risks not only a corporate fine but also forfeiture of the fees received for it, which can far exceed the fine.

Relevance to training and awareness

Waste law and official conditions for excavated soil and construction waste

Authority / court
Oberlandesgericht Linz (Berufung gegen Urteil des Landesgerichts Salzburg vom 06.03.2026)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
§ 181b Abs. 1 und 2 StGB; §§ 3, 4 Abs. 1 und 3, § 6 Abs. 1, § 14 Abs. 1 VbVG; § 20 Abs. 3 StGB; AWG 2002
Action
Disgorgement of profits
Status of proceedings
final
Sector
Other
Culpability
intentional
Repeat case
no
Mitigating circumstances
No previous convictions of the company; rather low environmental risk. Further circumstances taken into account by the court concern a natural person and are not reported here.
Liability of senior managers
Under the VbVG, the company's liability is linked to the conduct of its managing director.

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Aug 2026 Shandong Weiqiao Pioneering Group Co., Ltd.UFLPA list: textile group Shandong Weiqiao Pioneering Group over Xinjiang cotton USAForced and child labour Order

The U.S. Forced Labor Enforcement Task Force (FLETF) added the cotton and textile producer to the Uyghur Forced Labor Prevention Act (UFLPA) Entity List because it sources cotton from Xinjiang. The company's goods are therefore presumed to have been produced with forced labour on import into the US unless the importer rebuts this.

What organisations can take from it

Textile retailers need proof of origin for cotton down to the fibre, for example through isotope or traceability testing.

Authority / court
U.S. Department of Homeland Security (Forced Labor Enforcement Task Force)
Area of law
Supply chain and human rights · Forced and child labour
Legal basis
Uyghur Forced Labor Prevention Act, Section 2(d)(2)(B)(v)
Action
Order
Status of proceedings
unknown
Sector
Other
Published
3 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jul 2026 The New Brunswick Lotteries and Gaming CorporationFINTRAC: CAD 399,712.50 penalty on The New Brunswick Lotteries and Gaming Corporation for one violation of anti-money laundering obligations CanadaSuspicious activity reports €249,415

According to FINTRAC, The New Brunswick Lotteries and Gaming Corporation is a reporting entity in the casino sector based in Fredericton, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 399,712.50 on the company on 24 July 2026. According to FINTRAC's findings, made during a compliance examination, the company committed one violation of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violation concerned suspicious transaction reporting. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on the New Brunswick Lotteries and Gaming Corporation", published 3 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-03-2-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
PCMLTFA s. 7; Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Other
Published
3 Sep 2026

Original amount 399,712.5 CAD, converted at the ECB reference rate of 24 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jul 2026 Callcenter (anonymisiert)BNetzA: €34,327 fine on call centre, including for incomplete records of consent GermanyMarketing and consent €34,327

The Bundesnetzagentur (Federal Network Agency) imposed fines totalling 34,327 EUR on a call centre that mainly marketed telecoms products: 32,000 EUR for unlawful telephone advertising and 2,327 EUR because consents to sales calls had not been fully documented. The campaign continued despite the gaps and requests to stop calling were sometimes ignored; the company has appealed.

What organisations can take from it

Consents to telephone marketing must be fully documented – if the proof is missing, the campaign must not continue.

Relevance to training and awareness

Consent and proof of consent for telephone marketing

Authority / court
Bundesnetzagentur (BNetzA)
Area of law
Data protection · Marketing and consent
Legal basis
UWG – Verbot unerlaubter Telefonwerbung gegenüber Verbraucherinnen und Verbrauchern; § 7a UWG (Dokumentation und Aufbewahrung von Einwilligungen)
Action
Fine
Status of proceedings
under appeal
Sector
Other

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 Evolution Malta Holding LimitedEvolution: £4.75m because its own games ran on unlicensed sites accessible in GB United KingdomInternal controls €5.57m

The games supplier will pay £4,750,000 in lieu of a financial penalty under a regulatory settlement, contribute to the Commission's investigation costs and accept an additional licence condition requiring an independent audit within twelve months. Five genuine Evolution games were accessible at scale to consumers in Great Britain via six websites of two operators not licensed by the Gambling Commission; between April 2024 and January 2025, its risk assessment and its anti-money laundering policies and controls did not adequately address risks arising from business partners in particular (LC 12.1.1, LC 12.1.2). After the Commission notified it in December 2024, Evolution immediately and permanently blocked the games for users in Great Britain.

What organisations can take from it

B2B suppliers must monitor where their products are actually offered and stop their use by unlicensed operators.

Relevance to training and awareness

Control over the distribution of own products to unlicensed operators

Authority / court
Gambling Commission
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
s. 116 Gambling Act 2005; LC 12.1.1 Abs. 1–3 und LC 12.1.2 der Licence Conditions and Codes of Practice (LCCP); Reg. 18, 19(1)(a) und 28(1) Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017
Action
Fine
Status of proceedings
final
Sector
Other
Mitigating circumstances
A swift action plan with progress updates, full cooperation with the investigation and early acceptance of the failings.
Published
23 Jul 2026

Original amount 4,750,000 GBP, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 Nova Scotia Gaming CorporationFINTRAC: 231,826 CAD against Nova Scotia Gaming over missing suspicious transaction reports CanadaSuspicious activity reports €144,584

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) imposed 231,826 CAD on the Halifax gaming corporation (casino sector) because it failed to file suspicious transaction reports on attempted transactions despite reasonable grounds for suspicion, did not keep its compliance policies up to date and approved by a senior officer, and did not assess the money laundering risk as required. The penalty was paid in full.

What organisations can take from it

Even aborted or merely attempted transactions can be reportable – cashier staff must know this.

Relevance to training and awareness

Suspicious transaction reports even for merely attempted transactions

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
Proceeds of Crime (Money Laundering) and Terrorist Financing Act, Part 1, und zugehörige Verordnungen
Action
Fine
Status of proceedings
final
Sector
Other
Published
3 Sep 2026

Original amount 231,826 CAD, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jul 2026 BGH: online cancellation page must not offer a "pause contract" alternative GermanyInformation duties in online retail Order

On the confirmation page of its online cancellation process, a gym operator displayed a highlighted notice with the button "Pause contract via self-service"; in addition, the confirmation button was labelled "Find contract", which the defendant had already acknowledged. In an action brought by the Federation of German Consumer Organisations (Verbraucherzentrale Bundesverband), the BGH ruled that the confirmation page may only contain the information required for the cancellation and the confirmation button, set aside the judgment of the Higher Regional Court of Düsseldorf (OLG Düsseldorf) dismissing the action to that extent and ordered the operator to cease and desist.

What organisations can take from it

Keep retention or pause offers off the confirmation page of the online cancellation process.

Relevance to training and awareness

Design of the cancellation process (cancellation button, retention offers)

Authority / court
Bundesgerichtshof (I. Zivilsenat), Az. I ZR 200/25
Area of law
Consumer protection and online retail · Information duties in online retail
Legal basis
§ 312k Abs. 1 Satz 1, Abs. 2 BGB (Kündigungsbutton)
Action
Order
Status of proceedings
final
Sector
Other
Published
16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

14 Jul 2026 Goldwin LtdMalta: 80,907 EUR against online casino Goldwin for missing customer risk assessment MaltaCustomer due diligence €80,907

The 2022 examination revealed that for more than two years the remote gaming operator had had no proper customer risk assessment for almost its entire player base; the assessments submitted had been prepared specifically for the examination. In addition, once players reached the deposit threshold of 2,000 EUR, it did not check in good time whether they were politically exposed persons. The Financial Intelligence Analysis Unit (FIAU) imposed 80,907 EUR; the fine was still open to appeal at the time of publication.

What organisations can take from it

Supervisory authorities see through risk assessments prepared only for the examination – they must be applied in day-to-day business.

Relevance to training and awareness

Risk-based customer assessment in gambling

Authority / court
Financial Intelligence Analysis Unit (FIAU)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Reg. 5(5)(a)(ii), 11(5), 21 PMLFTR; FIAU Implementing Procedures Part I und II (Remote Gaming)
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 Jul 2026 Hutchison Technologies LtdTribunal: Hutchison Technologies dismissed employee after she raised holiday pay concerns United KingdomRetaliation against whistleblowers Other

An employee of the Dundee-based electrical services provider for gyms (around 140 employees) had pointed out that the technicians' holiday pay was being calculated incorrectly; a few days later her home working arrangement was withdrawn, and on 11 June 2025 she was dismissed. The Employment Tribunal upheld her claims for automatically unfair dismissal (s. 103A) and detriment (s. 47B); compensation will be decided separately.

What organisations can take from it

Employers who worsen working conditions shortly after a disclosure must be able to prove a documented reason unrelated to the disclosure.

Relevance to training and awareness

How managers handle internal reports

Authority / court
Employment Tribunal
Area of law
Whistleblower protection · Retaliation against whistleblowers
Legal basis
Employment Rights Act 1996, ss. 43B, 47B, 103A
Action
Other
Status of proceedings
unknown
Sector
Other
Employees
50 to 249
Published
23 Jul 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Jun 2026 Petfre (Gibraltar) LimitedPetfre (Gibraltar): £900,000 over inadequate customer interaction in online gambling United KingdomConsumer protection and online retail €1.04m

Following a compliance assessment in May and June 2024, the operator of betfred.com will pay £900,000 in lieu of a financial penalty to the Consolidated Fund (the UK Government's general account) under a settlement and contribute to the Commission's investigation costs. The Commission found breaches of the remote customer interaction requirements under SRCP 3.4.3: automated processes to identify signs of harm and to act immediately on strong indicators were lacking, so that one customer lost a further £17,900 within 24 hours of a review without being contacted again. The Commission had already announced sanctions against Petfre in 2022 and 2025.

What organisations can take from it

After a sanction, customer interaction must be improved lastingly and demonstrably, or the next case follows.

Relevance to training and awareness

Lasting improvement of customer interaction after earlier sanctions

Authority / court
Gambling Commission
Area of law
Consumer protection and online retail
Legal basis
s. 116 Gambling Act 2005; SRCP 3.4.3 Abs. 1, 2, 4, 7 und 11 der Licence Conditions and Codes of Practice (LCCP)
Action
Fine
Status of proceedings
final
Sector
Other
Repeat case
yes
Mitigating circumstances
A swift action plan with progress updates and full cooperation with the investigation.
Published
30 Jun 2026

Original amount 900,000 GBP, converted at the ECB reference rate of 30 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Jun 2026 One Way Environmental Services LLC; Coastal Environmental Solutions Inc.; BWC Terminals LLCSulphuric acid spill in Channelview: USD 3.52m in OSHA penalties against three employers USAWorkplace safety and accidents €3.09m

After around one million gallons of sulphuric acid were released at the BWC Terminals site in Channelview (Texas) in December 2025, OSHA proposed penalties totalling 3,520,703 USD against three employers. Staffing contractor One Way Environmental Services accounts for 3,045,452 USD for 18 violations classed as wilful and egregious and five as serious, because it sent workers to the clean-up without adequate training, respirator fit tests and safety measures; the hazardous waste contractor Coastal Environmental Solutions faces 392,501 USD and BWC Terminals, which had mixed fresh and spent acid despite warnings, 82,750 USD. The authority allegedly made the findings set out here; this account is not based on a final judgment. The decision is not final.

What organisations can take from it

Companies that outsource clean-up after a chemical incident must check their contractors' training, respiratory protection and emergency planning.

Relevance to training and awareness

Health and safety during clean-up after chemical incidents

Missing or inadequate training played a role in the decision.

Authority / court
U.S. Department of Labor – Occupational Safety and Health Administration (OSHA)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Occupational Safety and Health Act (u. a. Vorschriften zu Gefahrstoffeinsätzen und Notfallmaßnahmen sowie Atemschutz)
Action
Fine
Status of proceedings
not yet final
Sector
Other
Published
26 Jun 2026

Original amount 3,520,703 USD, converted at the ECB reference rate of 26 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jun 2026 Ö Aktiengesellschaft (in der Entscheidung abgekürzt; Adressverlag und Direktwerbeunternehmen)VwGH sets data protection fine for party affinities definitively at 13 million EUR AustriaMarketing and consent €13m

The company had stored statistically calculated ‘party affinities’ for around 2.2 million people and in some cases sold them to advertising clients – special categories of personal data without consent; in addition, parcel frequency data was further processed for incompatible purposes. The Austrian Data Protection Authority (Datenschutzbehörde, DSB) had imposed 18 million EUR in 2019 and the Federal Administrative Court (Bundesverwaltungsgericht, BVwG) 16 million EUR in 2024; Austria's Supreme Administrative Court (Verwaltungsgerichtshof, VwGH) has now set the fine with final effect at 13 million EUR (plus 100,000 EUR in procedural costs).

What organisations can take from it

Calculated characteristics such as political leanings are themselves special categories – companies that derive them for advertising need explicit consent.

Authority / court
Verwaltungsgerichtshof (Ausgangsbescheid: Datenschutzbehörde)
Area of law
Data protection · Marketing and consent
Legal basis
DSGVO Art. 5 Abs. 1 lit. a und b, Art. 6 Abs. 4, Art. 9 Abs. 1 (VwGH Ro 2025/04/0007)
Action
Fine
Status of proceedings
reduced
Sector
Other
Culpability
negligent
Mitigating circumstances
Comprehensive cooperation, deletion of the party affinities, settlements with data subjects, long duration of proceedings (5 years, 10 months).
Published
16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jun 2026 Needle Craft Ltd.; Casual Wear Apparel LLCCBP import stop for textiles from Jordan's Needle Craft and Casual Wear Apparel USAForced and child labour Order

U.S. Customs and Border Protection (CBP) issued a Withhold Release Order: clothing from Needle Craft Ltd.; Casual Wear Apparel LLC (Jordan) is being detained at all US ports of entry because there are indications of forced labour (ILO indicators including physical and sexual violence, retention of identity documents, restriction of movement and withholding of wages). These are two parallel orders against both manufacturers.

What organisations can take from it

Fashion brands should supplement social audits at garment makers with confidential worker interviews, because violence and confiscation of identity documents remain invisible in paper-based checks.

Authority / court
U.S. Customs and Border Protection
Area of law
Supply chain and human rights · Forced and child labour
Legal basis
19 U.S.C. § 1307 (Tariff Act of 1930, Section 307)
Action
Order
Status of proceedings
unknown
Sector
Other
Published
23 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Jun 2026 SSG SELECT SOLUTIONS S.R.L.Stranger in Kaufland CCTV room – service provider SSG Select Solutions pays 2,000 EUR RomaniaVideo surveillance €1,948

An employee of the service provider acting as processor for Kaufland România let a third party into a store’s video surveillance room; that person filmed the images and distributed them on social media. Kaufland reported the incident. The Romanian data protection authority (ANSPDCP) imposed 10,200 lei (2,000 EUR) on the processor and ordered additional checks of the work instructions; the fine has been paid. Date = publication of the press release; according to the authority, the investigation was concluded in April 2026.

What organisations can take from it

Anyone with access to surveillance rooms must know: video footage is confidential, and third parties have no access there.

Relevance to training and awareness

Access to surveillance rooms; staff bound by instructions

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection · Video surveillance
Legal basis
Art. 29, Art. 32 Abs. 1 lit. b, Abs. 2 und 4 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
15 Jun 2026

Original amount 10,200 RON, converted at the ECB reference rate of 15 Jun 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Jun 2026 Philip Morris Italia S.r.l.AGCM fines Philip Morris Italia €7m over "senza fumo" (smoke-free) advertising ItalyMisleading advertising and pricing €7m

Philip Morris Italia widely promoted heated tobacco devices, e-cigarettes and nicotine products for oral use with phrases such as "senza fumo" (smoke-free) and a "smoke-free future"; the AGCM considered this misleading because it suggested that the products were harmless or less harmful, although they can endanger health and safety. The authority imposed a fine of 7,000,000 EUR and prohibited continuation; the proceedings were triggered by a report from the Ministry of Health.

What organisations can take from it

Health-related advertising claims must be complete and substantiated, and a slogan such as "smoke-free" must not imply that a product is harmless.

Relevance to training and awareness

Health-related advertising claims for tobacco and nicotine products

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Art. 20, 21 Abs. 1 und 3, 22 Codice del consumo (D.lgs. 206/2005)
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
10 Jun 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Jun 2026 Xponential Fitness, Inc. u. a. (Franchisegesellschaften der Marken AKT, BFT, Club Pilates, CycleBar, Pure Barre, Rumble, StretchLab, YogaSix)New York: Xponential Fitness pays 3.97 million USD over misleading franchise disclosures USA, NYConsumer protection and online retail €3.43m

According to the Attorney General's office, the fitness franchisor stated three to six months until studio opening in the disclosure documents filed in New York, although it took more than 13 months on average and its own SEC reports showed longer periods. The Assurance of Discontinuance requires 3,971,250 USD: 3 million USD for 70 harmed franchisees (of which 300,000 USD is a civil penalty) and 971,250 USD in fee refunds to 25 franchisees who never opened. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Statements in franchise disclosures must match the company's own capital market reports – discrepancies count as evidence of deception.

Relevance to training and awareness

Realistic statements in franchise disclosure documents

Authority / court
Office of the New York State Attorney General (Investor Protection Bureau, Franchise Section)
Area of law
Consumer protection and online retail
Legal basis
New York Franchise Sales Act (General Business Law §§ 680 ff., insb. § 687); Executive Law § 63(12)
Action
Disgorgement of profits
Status of proceedings
final
Sector
Other
Published
9 Jun 2026

Original amount 3,971,250 USD, converted at the ECB reference rate of 9 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 Jun 2026 A. Tsokkos Hotels Public LimitedCyprus: 16,500 EUR against A. Tsokkos Hotels for late annual financial report CyprusDisclosure and reporting obligations €16,500

The listed hotel group did not publish its 2024 annual financial report on time; the Cyprus Securities and Exchange Commission (CySEC) imposed a total of 16,500 EUR. At the same meeting, eleven other issuers were fined between 1,500 and 17,000 EUR for the same reason; a fine of 13,500 EUR had already been imposed on the company under the same law in 2025.

What organisations can take from it

Publication deadlines for financial reports are not negotiable – repeated delays lead to fines and, in extreme cases, to suspension of trading.

Authority / court
Cyprus Securities and Exchange Commission (CySEC)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Sec. 9(1), 37(2)(a) Transparency Requirements (Securities Admitted to Trading on a Regulated Market) Law 2007
Action
Fine
Status of proceedings
unknown
Sector
Other
Repeat case
yes
Published
7 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Jun 2026 CityFitness Group LimitedCityFitness: 1,120,000 NZD for a price rise disguised as a “transaction fee” New ZealandMisleading advertising and pricing €565,485

New Zealand's largest gym chain kept advertising a membership at 6.99 NZD a week on its website, Instagram and Google ads, although all new members had to pay a compulsory 3% surcharge that it presented as a “transaction fee” but which in fact served to raise revenue generally. After pleading guilty to eight representative charges (offending period 21 December 2023 to 30 April 2025), the company was sentenced on 5 June 2026 to a fine of 1,120,000 NZD. According to the Commerce Commission (ComCom, New Zealand's competition and consumer authority), the surcharge affected more than 125,000 members and generated around 1.6 million NZD in additional revenue.

What organisations can take from it

Unavoidable surcharges belong in the advertised price and must not be passed off as a payment-related fee.

Relevance to training and awareness

Transparent total prices and honestly labelled surcharges

Authority / court
Strafgericht, in der Quelle nicht benannt (Anklage: Commerce Commission)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Fair Trading Act 1986, ss 11, 40(1)
Action
Fine
Status of proceedings
unknown
Sector
Other
Culpability
intentional
Liability of senior managers
According to the court, the labels “transaction fee” and “Payment Authority Fee” were approved at the highest level; the fee increase was decided by senior executives.
Published
9 Jun 2026

Original amount 1,120,000 NZD, converted at the ECB reference rate of 5 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Jun 2026 Sonus Public Relations LtdTribunal: PR agency Sonus must pay £71,052 after subjecting whistleblower to detriment United KingdomRetaliation against whistleblowers €82,264

The PR agency, which did not appear, lost on all claims: detriment on grounds of whistleblowing (£20,000 for injury to feelings), wrongful termination without notice pay (£3,547.60) and constructive unfair dismissal (basic and compensatory award including a 25 % ACAS uplift). A total of £71,051.82 was awarded.

What organisations can take from it

Employers who do not take part in the proceedings risk, in addition to whistleblower compensation, an uplift for failing to follow the ACAS Code of Practice.

Relevance to training and awareness

How managers handle internal reports

Authority / court
Employment Tribunal
Area of law
Whistleblower protection · Retaliation against whistleblowers
Legal basis
Employment Rights Act 1996, s. 47B (Benachteiligung wegen geschützter Offenlegung); konstruktive unfaire Kündigung; wrongful dismissal
Action
Other
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Published
22 Jul 2026

Original amount 71,051.82 GBP, converted at the ECB reference rate of 3 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 4 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 Jun 2026 FTI Consulting, Inc.OFAC: USD 1.05 million settlement with FTI Consulting over prohibited extension of credit to a Russian state-owned bank USABreaches of sanctions and embargoes €901,597

Consulting firm FTI Consulting, Inc. of Washington, D.C. is paying USD 1,050,000 under a settlement with OFAC for apparent violations of the Russia financial sector sanctions. According to OFAC's findings, between April 2019 and May 2021 FTI indirectly extended prohibited debt on six occasions to a Russian state-owned bank subject to Directive 1 under Executive Order 13662: invoices remained unpaid beyond the permitted 14 days or were paid long afterwards while FTI continued to provide services. OFAC treated the apparent violations as non-egregious and not voluntarily self-disclosed; the base penalty was USD 525,000. The settlement amount is above the base penalty; OFAC cited in particular the anticipated impact on future compliance by similarly situated firms. Source: U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), enforcement release "FTI Consulting, Inc., a Global Business Advisory Firm, Settles with OFAC for $1,050,000 Related to Apparent Violations of Dealing in Prohibited Debt of Sanctioned Russian Bank", 1 June 2026, https://ofac.treasury.gov/media/935651/download?inline; summarised in our own words.

Authority / court
U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Ukraine-/Russia-Related Sanctions Regulations, 31 C.F.R. §§ 589.202, 589.213 i. V. m. Directive 1 zu E.O. 13662 (sechs mutmaßliche Verstöße); Vergleich nach den Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A
Action
Fine
Status of proceedings
final
Sector
Other
Published
1 Jun 2026

Original amount 1,050,000 USD, converted at the ECB reference rate of 1 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

29 May 2026 Atlantic Lottery Corporation Inc.FINTRAC: CAD 212,025 penalty on Atlantic Lottery Corporation Inc. for 3 violations of anti-money laundering obligations CanadaSuspicious activity reports €131,906

According to FINTRAC, Atlantic Lottery Corporation Inc. is a reporting entity in the casino sector based in Moncton, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 212,025 on the company on 29 May 2026. According to FINTRAC's findings, made during a compliance examination, the company committed 3 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned suspicious transaction reporting, written compliance policies and procedures and assessing and documenting money laundering and terrorist financing risks. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Atlantic Lottery Corporation Inc.", published 9 July 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-07-09-1-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
PCMLTFA s. 7, 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Other
Published
9 Jul 2026

Original amount 212,025 CAD, converted at the ECB reference rate of 29 May 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 May 2026 Marketing-Unternehmen, UK (anonymisiert)ICO: £300,000 fine for a marketing firm over spam and fake bailiff texts United KingdomMarketing and consent €346,600

The ICO fined a UK marketing company £300,000 and issued an enforcement notice. The ICO found that the company had sent more than 5.5 million unsolicited marketing text messages, including messages styled as if they came from bailiffs. The 7726 spam reporting service received over 60,000 complaints. The ICO relied on regulations 22 and 23 of PECR (electronic marketing without consent and concealed sender identity).

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Marketing and consent
Legal basis
Regulations 22 und 23 PECR; section 55A DPA 1998
Action
Fine
Status of proceedings
unknown
Sector
Other

Original amount 300,000 GBP, converted at the ECB reference rate of 20 May 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Apr 2026 Anwaltskanzlei aus Hamilton (anonymisiert)Hamilton law firm: 60,000 NZD fine for anti-money laundering breaches New ZealandInternal controls €30,092

Between March 2022 and March 2025 a Hamilton law firm repeatedly breached the AML/CFT Act: it lacked a proper risk assessment, an implemented anti-money laundering programme and adequate records. It also failed to respond, or responded only in part, to information notices from the Department of Internal Affairs (DIA, the AML/CFT supervisor for law firms), thereby obstructing its investigators. After the firm pleaded guilty, the court imposed a fine of 60,000 NZD, taking the firm's size and financial capacity into account.

What organisations can take from it

Even small law firms must actually implement their risk assessment, AML programme and record keeping and answer supervisory information requests in full.

Relevance to training and awareness

Anti-money laundering duties in law firms and cooperation with the supervisor

Authority / court
Strafgericht, in der Quelle nicht benannt (Anklage: Department of Internal Affairs)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
Anti-Money Laundering and Countering Financing of Terrorism Act 2009
Action
Fine
Status of proceedings
unknown
Sector
Other
Culpability
intentional
Liability of senior managers
According to the Department of Internal Affairs, the firm's partners, as lawyers, also had professional obligations to uphold the law.
Published
24 Apr 2026

Original amount 60,000 NZD, converted at the ECB reference rate of 24 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Apr 2026 12066424 Canada Inc.Temporary staffing agency: CA$100,000 over unpaid wages Canada, ONMinimum wage and undeclared work €62,555

Following complaints, the labour inspectorate found, among other things, outstanding minimum wages at the temporary staffing agency in Leamington; an audit for 2022 showed that hundreds of employees were owed a total of CA$234,212 in regular wages, public holiday pay and vacation pay. The company did not comply with the 2023 orders to pay; in proceedings held in its absence, the court imposed CA$100,000 on the company (plus victim fine surcharge).

What organisations can take from it

Companies that ignore regulatory orders to pay outstanding wages risk a substantial fine.

Authority / court
Provincial Offences Court Windsor (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
Employment Standards Act, 2000 (Ontario), ss. 103(8), 106, 132, 136
Action
Fine
Status of proceedings
unknown
Sector
Other
Liability of senior managers
Measures against individuals are not reported here.
Published
3 Jun 2026

Original amount 100,000 CAD, converted at the ECB reference rate of 23 Apr 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Apr 2026 PricewaterhouseCoopers Hong KongPwC Hong Kong: HKD 1bn compensation for Evergrande shareholders under SFC agreement Hong KongMarket abuse and insider dealing Other

Under an agreement with the Securities and Futures Commission (SFC, Hong Kong's securities regulator), PricewaterhouseCoopers Hong Kong has undertaken to set aside 1,000,000,000 HKD to compensate independent minority shareholders of China Evergrande Group; in return the regulator will take no further action, without any admission of liability. China Evergrande's audited revenue was allegedly overstated by 44.79% for 2019 and 69.03% for 2020, and PwC Hong Kong, as auditor, was allegedly concerned in the dissemination of false information, allegedly did not maintain its independence and allegedly acquiesced in management's manipulation of audit samples and site inspections.

What organisations can take from it

Auditors who tolerate manipulation of their audit procedures face a considerable risk of having to compensate investors.

Relevance to training and awareness

Independence and professional scepticism in auditing

Authority / court
Securities and Futures Commission (SFC)
Area of law
Capital markets and financial supervision · Market abuse and insider dealing
Legal basis
s. 277 SFO (Cap. 571) (Auffassung der SFC, von PwC HK nicht anerkannt)
Action
Other
Status of proceedings
final
Sector
Other
Published
23 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Apr 2026 Yau Yat Chuen Garden City Club LimitedRansomware via remote maintenance access: enforcement notice against private club Hong KongData breaches and data security Order

In a ransomware attack on the membership management system of Yau Yat Chuen Garden City Club Limited, a private, non-profit recreational club, reported on 31 October 2025, data of 9,045 current and former members and supplementary card holders were affected, including identity card or passport numbers. The attacker exploited a known vulnerability in outdated remote access software of the external service provider and reached the server, which had been left logged in, without further authentication; antivirus software and firewall were outdated, and personal data had been kept longer than necessary. In its investigation report published on 23 April 2026 the PCPD (Privacy Commissioner for Personal Data, Hong Kong's data protection authority) found breaches of DPP 4(1) and DPP 2(2) and served an enforcement notice.

What organisations can take from it

Service providers' remote maintenance access belongs in an organisation's own security concept: current software, additional authentication and no servers left permanently logged in.

Relevance to training and awareness

Service providers' remote access, patch management and retention periods

Authority / court
Privacy Commissioner for Personal Data (PCPD), Hongkong
Area of law
Data protection · Data breaches and data security
Legal basis
Personal Data (Privacy) Ordinance, Data Protection Principles 4(1) und 2(2); Enforcement Notice
Action
Order
Status of proceedings
unknown
Sector
Other
Published
23 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Apr 2026 Automobile Association Developments Limited (AA Driving School, BSM Driving School)AA and BSM driving schools: 4.2 million GBP for drip pricing – CMA's first consumer fine United KingdomMisleading advertising and pricing €4.83m

For online bookings, the driving schools only showed a mandatory booking fee at checkout instead of in the initial price. Following an admission and settlement, the CMA imposed a penalty of 4.2 million GBP (40 % discount on 7 million GBP) and ordered refunds of more than 760,000 GBP to more than 80,000 customers. According to the annual accounts filed with the UK companies register for financial year 2026, the company had around 6,776 employees.

What organisations can take from it

Mandatory fees must be included from the very first price – in the United Kingdom, the CMA has been able to impose fines for this itself since 2025.

Relevance to training and awareness

Price disclosures and mandatory fees at online checkout

Authority / court
Competition and Markets Authority (CMA)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Digital Markets, Competition and Consumers Act 2024
Action
Fine
Status of proceedings
final
Sector
Other
Employees
1,000 to 9,999
Mitigating circumstances
Admission and early settlement (40 % discount).
Published
15 Apr 2026

Original amount 4,200,000 GBP, converted at the ECB reference rate of 15 Apr 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Apr 2026 Arbeitgeber (in der Mitteilung nicht namentlich genannt)Slovenia: 71,474 EUR for covert monitoring of employees using spyware SloveniaEmployee data €71,474

An employer installed the software Spyrix Employee Monitoring on the work computers of individual employees, which for months recorded screen content, audio and even private e-mails and conversations without informing the employees. The supervisory authority, the Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia, IP), imposed 71,474 EUR on the company.

What organisations can take from it

Covert employee monitoring by software is practically never permissible – IT and managers must know this before tools are installed.

Relevance to training and awareness

Permissible monitoring of employees and IT use

Authority / court
Informacijski pooblaščenec Republike Slovenije (IP)
Area of law
Data protection · Employee data
Legal basis
Art. 5 und Art. 6 Abs. 1 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Culpability
intentional
Liability of senior managers
Measures against individuals are not reported here.
Published
9 Apr 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Mar 2026 3R Technology UK Ltd3R Technology UK: penalty for exporting contaminated plastic waste despite prohibition United KingdomWaste and hazardous substances €92,442

From 2022 to 2025, the company exported containers of supposedly clean plastic that was in fact contaminated with electronic waste such as cables and circuit boards; in some cases, the waste was hidden at the back of the container, and further containers were shipped despite prohibition notices from August 2024. The company pleaded guilty and was fined 80,000 GBP; in addition, it was ordered to pay 45,000 GBP in costs and a 2,000 GBP surcharge. According to the annual accounts filed with the UK companies register for financial year 2025, the company had around 19 employees.

What organisations can take from it

Incorrectly declared waste exports are detected during port inspections; those who ignore regulatory prohibitions risk a criminal conviction.

Relevance to training and awareness

Correct classification and declaration of waste for export

Authority / court
Preston Magistrates' Court (Anklage: Environment Agency)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Vorschriften zur grenzüberschreitenden Abfallverbringung (Notifizierung und Zustimmung); Verstoß gegen Untersagungsverfügungen
Action
Fine
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Culpability
intentional
Repeat case
yes
Mitigating circumstances
Guilty plea.
Published
2 Apr 2026

Original amount 80,000 GBP, converted at the ECB reference rate of 24 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 5 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Mar 2026 SIA "Fitsypro"Fitsypro fails to answer access request and DVI enquiries – 1,500 EUR LatviaData subject rights and transparency €1,500

A person complained that Fitsypro had not responded to their request for access, rectification and erasure of November 2023. Three requests for information from the Datu valsts inspekcija (Latvian Data State Inspectorate, DVI) between 2024 and 2026 went unanswered, and nobody attended the hearing. The DVI imposed 1,500 EUR and requested the information by 21 April 2026.

What organisations can take from it

Official mailboxes (eAdrese) and data protection e-mail addresses must be monitored – silence towards the supervisory authority costs money.

Relevance to training and awareness

Handling data subject requests and correspondence from authorities

Authority / court
Datu valsts inspekcija (DVI)
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 58 Abs. 1 lit. e, Art. 83 Abs. 5 lit. e DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Culpability
intentional

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Mar 2026 Stanleybet Malta LimitedMalta: 225,730 EUR against betting operator Stanleybet over lack of customer checks in betting shops MaltaCustomer due diligence €225,730

Malta's Financial Intelligence Analysis Unit (FIAU) imposed 225,730 EUR, a penalty payment of 2,000 EUR per day and a follow-up directive on the licensed gambling operator, which works through a network of independently operated betting shops in an EU member state. The company was unable to link customers' cumulative deposits across different shops and only checked customers from a single deposit of 2,000 EUR upwards, so the threshold could be circumvented. The company has appealed.

What organisations can take from it

Thresholds must be aggregated per customer across all channels and branches – otherwise the system invites structuring.

Relevance to training and awareness

Recognising structured deposits below the checking threshold

Authority / court
Financial Intelligence Analysis Unit (FIAU)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Regulation 21 PMLFTR; Verstöße gegen Regulations 5(5)(a)(ii), 7, 9(1) PMLFTR und FIAU Implementing Procedures
Action
Fine
Status of proceedings
under appeal
Sector
Other
Published
16 Apr 2026
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Mar 2026 Busy Bees Nurseries LimitedBusy Bees: £485,374 in minimum wage arrears owed to 9,056 nursery staff United KingdomMinimum wage and undeclared work €561,854

The UK Department for Business and Trade publicly named the nursery operator Busy Bees Nurseries Limited in round 23 of the National Minimum Wage Naming Scheme. According to investigations by HM Revenue & Customs (HMRC), the company had paid a total of 9,056 workers less than the statutory minimum wage between April 2017 and October 2022 and had to repay £485,374.05 – on average around £54 per person. According to the ministry, the 389 employers named in this round also received penalties totalling around £12.6 million; the amount per company is not published.

What organisations can take from it

Where many employees earn close to the minimum wage, regularly checking payroll against the applicable minimum rates is a must – small shortfalls per person add up to large arrears and public naming.

Relevance to training and awareness

Minimum wage compliance in payroll

Authority / court
Department for Business and Trade (DBT) und HM Revenue & Customs (HMRC), National Minimum Wage Naming Scheme
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
Britisches Mindestlohnrecht (National Minimum Wage / National Living Wage); National Minimum Wage Naming Scheme
Action
Order
Status of proceedings
unknown
Sector
Other
Employees
1,000 to 9,999
Published
19 Mar 2026

Original amount 485,374.05 GBP, converted at the ECB reference rate of 19 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

Load 20 more of 170

Ready for training that actually lands?

Try the combination for free: automated administration for you, learning formats that fit your team, with no minimum or credit card.

Start 14-day free trial