Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,207 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

Other Clear all filters
210cases from 33 jurisdictions
€1.65bnTotal of monetary amounts (173 cases with an amount)
€463.2mLargest single case: a UK tobacco group
€190,000Median per case with an amount

Click a bar to drill down one level.

Where?

by region

All jurisdictions

  1. USA €1.04bn 63 % · 22 cases
  2. Australia €314.8m 19 % · 4 cases
  3. United Kingdom €124.6m 8 % · 74 cases
  4. Switzerland €82.3m 5 % · 2 cases
  5. EU €75.9m 5 % · 66 cases
  6. South Korea €5.12m 0 % · 1 case
  7. Canada €3.08m 0 % · 13 cases
  8. Hong Kong €2.77m 0 % · 3 cases
  9. New Zealand €595,577 0 % · 2 cases
  10. United Arab Emirates €384,254 0 % · 9 cases
  11. 5 more€466,947

What for?

by area of law

All areas of law

  1. Sanctions and export control €472.1m 29 % · 11 cases
  2. Consumer protection and online retail €449.2m 27 % · 16 cases
  3. Money laundering and terrorist financing €398.5m 24 % · 43 cases
  4. Bribery and corruption €226.5m 14 % · 4 cases
  5. Data protection €44.5m 3 % · 80 cases
  6. Capital markets and financial supervision €21.3m 1 % · 8 cases
  7. Competition law €19.8m 1 % · 13 cases
  8. Environment and sustainability €12.4m 1 % · 9 cases
  9. Health and safety and employment law €8.58m 1 % · 15 cases
  10. Whistleblower protection €82,264 0 % · 2 cases
  11. 2 more€0

Who?

by company
  1. Anonymised companies €1.37bn 83 % · 81 cases
  2. McKinsey and Company Africa (Pty) Ltd €116.6m 7 % · 1 case
  3. SURYS SAS (Gruppe Imprimerie Nationale) €18.4m 1 % · 1 case
  4. Capita plc und Capita Pension Solutions Limited €16.1m 1 % · 1 case
  5. Ö Aktiengesellschaft (in der Entscheidung abgekürzt; Adressverlag und Direktwerbeunternehmen) €13m 1 % · 1 case
  6. Platinum Gaming Limited €11.5m 1 % · 1 case
  7. BIT Mining Ltd. (vormals 500.com) €9.48m 1 % · 1 case
  8. Stericycle, Inc. €9.23m 1 % · 1 case
  9. Philip Morris Italia S.r.l. €7m 0 % · 1 case
  10. Società Cooperativa Culture (CoopCulture) €7m 0 % · 1 case
  11. 115 more€75.6m

When?

per year, by date of decision
Trend
PeriodCasesTotal
202210€4.26m
202344€1.29bn
202446€201.8m
202559€98.6m
202651€53.7m

210 cases

18 Sep 2026 Kinpodo Co., Ltd. (株式会社金宝堂)Kinpodo: order over a bait price 'from 104,500 JPY' for family funerals JapanMisleading advertising and pricing Order

From March to May 2025, Kinpodo advertised family funerals in exclusively rented halls under the name 'Chiisana Mori no Ie' in television commercials at a price 'from 104,500 JPY'. In fact, apart from a few cases, customers had to pay at least 308,000 JPY; the order required a corrective notice, measures to prevent recurrence and cessation.

What organisations can take from it

A 'from' price may only be advertised if customers can realistically obtain it.

Relevance to training and awareness

'From' prices and bait offers

Authority / court
Consumer Affairs Agency (消費者庁, CAA)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Art. 7 Abs. 1 i. V. m. Art. 5 Nr. 2 Act against Unjustifiable Premiums and Misleading Representations (不当景品類及び不当表示防止法, Gesetz Nr. 134/1962)
Action
Order
Status of proceedings
unknown
Sector
Other
Published
18 Sep 2026

Checked against the official source on 4 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

14 Sep 2026 Fire Protection Recycling LimitedFire extinguisher explodes fatally during recycling – 40,000 GBP fine United KingdomWorkplace safety and accidents €46,730

While decommissioned powder extinguishers were being discharged in Oldbury in 2023, a cartridge-type extinguisher exploded and struck a 37-year-old employee on the head, fatally injuring him. There was no risk assessment, no safe system of work, no suitable storage and no restraint system for discharging; the recycling business (20 employees according to its annual accounts) was fined 40,000 GBP plus 17,034.25 GBP in costs.

What organisations can take from it

Carry out a documented risk assessment even for routine work with pressurised containers and provide technical restraints – experience is no substitute for a safeguard.

Authority / court
Birmingham Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2(1) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Published
17 Sep 2026

Original amount 40,000 GBP, converted at the ECB reference rate of 14 Sep 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Aug 2026 Fitnessstudiokette in Amsterdam (anonymisiert)Labour Authority: €316,875 in fines for Amsterdam gym chain NetherlandsMinimum wage and undeclared work €316,875

The Nederlandse Arbeidsinspectie (Netherlands Labour Authority) imposed fines totalling 316,875 EUR on a gym chain in Amsterdam that is not named in the release. For 25 foreign workers the required work permit or combined residence and work permit was missing, and for three people identity had not been established (Wav, Foreign Nationals Employment Act, 234,375 EUR); because of deficient records it could not be verified whether the minimum wage had been paid for all hours worked (WML, Minimum Wage and Minimum Holiday Allowance Act, 60,000 EUR), plus a breach of the Arbeidstijdenwet (Working Hours Act, 22,500 EUR). The company also received two warnings that work may be preventively halted if the same or similar breaches recur.

What organisations can take from it

Before anyone starts work, their right to work and identity must be checked and working hours must be fully recorded.

Relevance to training and awareness

Checking the right to work and recording working hours

Authority / court
Nederlandse Arbeidsinspectie
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
Wet arbeid vreemdelingen (Wav); Wet minimumloon en minimumvakantiebijslag (WML); Arbeidstijdenwet (ATW)
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
24 Aug 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Aug 2026 QuinnBet (Gibraltar) LimitedQuinnBet: £415,986 over anti-money laundering and financial vulnerability check failings United KingdomInternal controls €485,256

The operator of quinnbet.com will pay £415,986 in lieu of a financial penalty to the Consolidated Fund (the UK Government's general account) under a settlement and contribute to the Commission's investigation costs. The settlement also includes a disgorgement of £193,118, which is not included in the amount shown. A compliance assessment found breaches of the anti-money laundering licence condition LC 12.1.1 paras. 2 and 3 (March 2023 to August 2025) and of the customer interaction requirements under SRCP 3.4.3; following an error during a platform migration, some of the required financial vulnerability checks under SRCP 3.4.4 were also not carried out between February and May 2025. It is the first enforcement action against the company.

What organisations can take from it

Financial vulnerability checks are a licence requirement that must continue without gaps, including during technical changeovers.

Relevance to training and awareness

Financial vulnerability checks and AML controls in online betting

Authority / court
Gambling Commission
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
s. 116 Gambling Act 2005; LC 12.1.1 Abs. 2 und 3, SRCP 3.4.3 und SRCP 3.4.4 Abs. 1 der Licence Conditions and Codes of Practice (LCCP)
Action
Fine
Status of proceedings
final
Sector
Other
Repeat case
no
Mitigating circumstances
No previous enforcement action, a swift action plan, full cooperation, early voluntary reporting of some of the failings, voluntary divestment of the funds gained from them and early acceptance of the failings.
Published
20 Aug 2026

Original amount 415,986 GBP, converted at the ECB reference rate of 20 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Aug 2026 Truro Sawmills LimitedCornwall sawmill ignores three improvement notices: 20,000 GBP United KingdomWorkplace safety and accidents €23,330

According to the HSE, the sawmill failed to protect employees from wood dust (no face-fit testing for respiratory protective equipment, no health surveillance) and let staff drive lift trucks without training; three improvement notices from the HSE (Health and Safety Executive, Britain's workplace safety regulator) were not complied with. The court fined the company, a micro-entity, 20,000 GBP plus 5,000 GBP in costs.

What organisations can take from it

Treat improvement notices from the regulator as binding deadlines, not recommendations; ignoring them risks a fine.

Relevance to training and awareness

Lift truck training and protection against wood dust

Missing or inadequate training played a role in the decision.

Authority / court
Truro Crown Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2(1) und Section 33(1)(g) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Liability of senior managers
Measures against individuals are not reported here.
Published
21 Aug 2026

Original amount 20,000 GBP, converted at the ECB reference rate of 20 Aug 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Aug 2026 Poliserv JG (PJG) SRLPhishing on admin account – Poliserv JG must pay 3,000 EUR RomaniaData breaches and data security €2,998

Attackers obtained the credentials of a user account with administrator rights through phishing and accessed customer data. The Romanian data protection authority (ANSPDCP) criticised the lack of technical and organisational measures and of regular effectiveness testing, imposed 15,728 lei (3,000 EUR) and ordered regular employee training, including on recognising phishing e-mails. Date = publication of the press release; according to the authority, the investigation was concluded in the previous month.

What organisations can take from it

Admin accounts need MFA, and all employees must be able to recognise phishing – the supervisory authority now expressly orders training.

Relevance to training and awareness

Phishing recognition, protection of privileged accounts

Missing or inadequate training played a role in the decision.

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 32 Abs. 1 lit. b und Abs. 2 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
19 Aug 2026

Original amount 15,728 RON, converted at the ECB reference rate of 19 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Aug 2026 Panzer Norge ASPanzer Norge AS: NOK 100,000 for AML failures at an accounting firm NorwayCustomer due diligence €9,115

Finanstilsynet (Norwegian Financial Supervisory Authority) fined the accounting firm Panzer Norge AS, based in Alta, NOK 100,000 under the Anti-Money Laundering Act. The inspection found shortcomings in the firm-wide risk assessment and in customer due diligence, as well as further breaches in risk and quality management and in engagement agreements; the company, which had five employees, essentially did not dispute the breaches.

What organisations can take from it

Small accounting firms are also subject to anti-money laundering obligations and need a documented risk assessment and demonstrable customer due diligence for every engagement.

Relevance to training and awareness

Anti-money laundering obligations for accounting and advisory firms

Authority / court
Finanstilsynet
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
§§ 7, 8, 9, 12 Abs. 4, 13 Abs. 1, 3 und 4, 14, 24 und 49 hvitvaskingsloven
Action
Fine
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Culpability
negligent
Published
17 Sep 2026

Original amount 100,000 NOK, converted at the ECB reference rate of 11 Aug 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Aug 2026 AMATO BESTSELLER S.R.L.AMATO BESTSELLER: 45,000 EUR plus 50,000 lei for data access and robocalls RomaniaMarketing and consent €54,316

Following several complaints, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (Romanian data protection authority, ANSPDCP) found that current and former employees, untrained and without procedural rules, had access to extensive data (including health, family and income data), that data subjects were not informed under Art. 14 GDPR, that excessive data were collected and that automated advertising calls were made without consent. Fines: 78,465 lei (15,000 EUR, Art. 32(4)), 52,310 lei (10,000 EUR, Art. 14), 104,620 lei (20,000 EUR, Art. 5/9 GDPR) and 50,000 lei (Law 506/2004); in addition, an order to provide regular employee training. Date = publication of the press release; according to the authority, the investigation was concluded in June 2026.

What organisations can take from it

Anyone giving employees access to sensitive customer data must train them and limit access on a need-to-know basis.

Relevance to training and awareness

Training employees in handling customer data; consent for advertising calls

Missing or inadequate training played a role in the decision.

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection · Marketing and consent
Legal basis
Art. 5 Abs. 1 lit. c i. V. m. Art. 9, Art. 14, Art. 32 Abs. 4 DSGVO; Art. 12 Abs. 1 Gesetz 506/2004
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
6 Aug 2026

Original amount 285,395 RON, converted at the ECB reference rate of 6 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Aug 2026 GmbH (im Urteil anonymisiert)Illegal dumping of construction waste: company must pay €375,000 forfeiture AustriaWaste and hazardous substances €375,000

The Oberlandesgericht (OLG, Higher Regional Court) Linz added a forfeiture of 375,000 EUR to the conviction of a limited company under the Verbandsverantwortlichkeitsgesetz (VbVG, Austrian Corporate Criminal Liability Act) for intentionally handling and moving waste in a way that endangered the environment; the suspended corporate fine of 30 daily rates of 500 EUR (15,000 EUR) imposed by the Landesgericht (Regional Court) Salzburg remained in place. From May 2021 to May 2024 and again from May 2025 to February 2026, contrary to the AWG 2002 (Waste Management Act) and partly to an official decision, the company had excavated soil, construction waste, asphalt and concrete rubble accepted for payment and deposited on a plot; removal costs were put at around 3.24 million EUR. Only the forfeiture of EUR 375,000 is recorded as the amount; the corporate fine of EUR 15,000 was conditionally suspended.

What organisations can take from it

Anyone accepting and depositing waste without a permit risks not only a corporate fine but also forfeiture of the fees received for it, which can far exceed the fine.

Relevance to training and awareness

Waste law and official conditions for excavated soil and construction waste

Authority / court
Oberlandesgericht Linz (Berufung gegen Urteil des Landesgerichts Salzburg vom 06.03.2026)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
§ 181b Abs. 1 und 2 StGB; §§ 3, 4 Abs. 1 und 3, § 6 Abs. 1, § 14 Abs. 1 VbVG; § 20 Abs. 3 StGB; AWG 2002
Action
Disgorgement of profits
Status of proceedings
final
Sector
Other
Culpability
intentional
Repeat case
no
Mitigating circumstances
No previous convictions of the company; rather low environmental risk. Further circumstances taken into account by the court concern a natural person and are not reported here.
Liability of senior managers
Under the VbVG, the company's liability is linked to the conduct of its managing director.

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Aug 2026 Shandong Weiqiao Pioneering Group Co., Ltd.UFLPA list: textile group Shandong Weiqiao Pioneering Group over Xinjiang cotton USAForced and child labour Order

The U.S. Forced Labor Enforcement Task Force (FLETF) added the cotton and textile producer to the Uyghur Forced Labor Prevention Act (UFLPA) Entity List because it sources cotton from Xinjiang. The company's goods are therefore presumed to have been produced with forced labour on import into the US unless the importer rebuts this.

What organisations can take from it

Textile retailers need proof of origin for cotton down to the fibre, for example through isotope or traceability testing.

Authority / court
U.S. Department of Homeland Security (Forced Labor Enforcement Task Force)
Area of law
Supply chain and human rights · Forced and child labour
Legal basis
Uyghur Forced Labor Prevention Act, Section 2(d)(2)(B)(v)
Action
Order
Status of proceedings
unknown
Sector
Other
Published
3 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jul 2026 The New Brunswick Lotteries and Gaming CorporationFINTRAC: CAD 399,712.50 penalty on The New Brunswick Lotteries and Gaming Corporation for one violation of anti-money laundering obligations CanadaSuspicious activity reports €249,415

According to FINTRAC, The New Brunswick Lotteries and Gaming Corporation is a reporting entity in the casino sector based in Fredericton, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 399,712.50 on the company on 24 July 2026. According to FINTRAC's findings, made during a compliance examination, the company committed one violation of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violation concerned suspicious transaction reporting. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on the New Brunswick Lotteries and Gaming Corporation", published 3 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-03-2-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
PCMLTFA s. 7; Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Other
Published
3 Sep 2026

Original amount 399,712.5 CAD, converted at the ECB reference rate of 24 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jul 2026 Callcenter (anonymisiert)BNetzA: €34,327 fine on call centre, including for incomplete records of consent GermanyMarketing and consent €34,327

The Bundesnetzagentur (Federal Network Agency) imposed fines totalling 34,327 EUR on a call centre that mainly marketed telecoms products: 32,000 EUR for unlawful telephone advertising and 2,327 EUR because consents to sales calls had not been fully documented. The campaign continued despite the gaps and requests to stop calling were sometimes ignored; the company has appealed.

What organisations can take from it

Consents to telephone marketing must be fully documented – if the proof is missing, the campaign must not continue.

Relevance to training and awareness

Consent and proof of consent for telephone marketing

Authority / court
Bundesnetzagentur (BNetzA)
Area of law
Data protection · Marketing and consent
Legal basis
UWG – Verbot unerlaubter Telefonwerbung gegenüber Verbraucherinnen und Verbrauchern; § 7a UWG (Dokumentation und Aufbewahrung von Einwilligungen)
Action
Fine
Status of proceedings
under appeal
Sector
Other

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 Evolution Malta Holding LimitedEvolution: £4.75m because its own games ran on unlicensed sites accessible in GB United KingdomInternal controls €5.57m

The games supplier will pay £4,750,000 in lieu of a financial penalty under a regulatory settlement, contribute to the Commission's investigation costs and accept an additional licence condition requiring an independent audit within twelve months. Five genuine Evolution games were accessible at scale to consumers in Great Britain via six websites of two operators not licensed by the Gambling Commission; between April 2024 and January 2025, its risk assessment and its anti-money laundering policies and controls did not adequately address risks arising from business partners in particular (LC 12.1.1, LC 12.1.2). After the Commission notified it in December 2024, Evolution immediately and permanently blocked the games for users in Great Britain.

What organisations can take from it

B2B suppliers must monitor where their products are actually offered and stop their use by unlicensed operators.

Relevance to training and awareness

Control over the distribution of own products to unlicensed operators

Authority / court
Gambling Commission
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
s. 116 Gambling Act 2005; LC 12.1.1 Abs. 1–3 und LC 12.1.2 der Licence Conditions and Codes of Practice (LCCP); Reg. 18, 19(1)(a) und 28(1) Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017
Action
Fine
Status of proceedings
final
Sector
Other
Mitigating circumstances
A swift action plan with progress updates, full cooperation with the investigation and early acceptance of the failings.
Published
23 Jul 2026

Original amount 4,750,000 GBP, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 Nova Scotia Gaming CorporationFINTRAC: 231,826 CAD against Nova Scotia Gaming over missing suspicious transaction reports CanadaSuspicious activity reports €144,584

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) imposed 231,826 CAD on the Halifax gaming corporation (casino sector) because it failed to file suspicious transaction reports on attempted transactions despite reasonable grounds for suspicion, did not keep its compliance policies up to date and approved by a senior officer, and did not assess the money laundering risk as required. The penalty was paid in full.

What organisations can take from it

Even aborted or merely attempted transactions can be reportable – cashier staff must know this.

Relevance to training and awareness

Suspicious transaction reports even for merely attempted transactions

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
Proceeds of Crime (Money Laundering) and Terrorist Financing Act, Part 1, und zugehörige Verordnungen
Action
Fine
Status of proceedings
final
Sector
Other
Published
3 Sep 2026

Original amount 231,826 CAD, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jul 2026 BGH: online cancellation page must not offer a "pause contract" alternative GermanyInformation duties in online retail Order

On the confirmation page of its online cancellation process, a gym operator displayed a highlighted notice with the button "Pause contract via self-service"; in addition, the confirmation button was labelled "Find contract", which the defendant had already acknowledged. In an action brought by the Federation of German Consumer Organisations (Verbraucherzentrale Bundesverband), the BGH ruled that the confirmation page may only contain the information required for the cancellation and the confirmation button, set aside the judgment of the Higher Regional Court of Düsseldorf (OLG Düsseldorf) dismissing the action to that extent and ordered the operator to cease and desist.

What organisations can take from it

Keep retention or pause offers off the confirmation page of the online cancellation process.

Relevance to training and awareness

Design of the cancellation process (cancellation button, retention offers)

Authority / court
Bundesgerichtshof (I. Zivilsenat), Az. I ZR 200/25
Area of law
Consumer protection and online retail · Information duties in online retail
Legal basis
§ 312k Abs. 1 Satz 1, Abs. 2 BGB (Kündigungsbutton)
Action
Order
Status of proceedings
final
Sector
Other
Published
16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

14 Jul 2026 Goldwin LtdMalta: 80,907 EUR against online casino Goldwin for missing customer risk assessment MaltaCustomer due diligence €80,907

The 2022 examination revealed that for more than two years the remote gaming operator had had no proper customer risk assessment for almost its entire player base; the assessments submitted had been prepared specifically for the examination. In addition, once players reached the deposit threshold of 2,000 EUR, it did not check in good time whether they were politically exposed persons. The Financial Intelligence Analysis Unit (FIAU) imposed 80,907 EUR; the fine was still open to appeal at the time of publication.

What organisations can take from it

Supervisory authorities see through risk assessments prepared only for the examination – they must be applied in day-to-day business.

Relevance to training and awareness

Risk-based customer assessment in gambling

Authority / court
Financial Intelligence Analysis Unit (FIAU)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Reg. 5(5)(a)(ii), 11(5), 21 PMLFTR; FIAU Implementing Procedures Part I und II (Remote Gaming)
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 Jul 2026 Hutchison Technologies LtdTribunal: Hutchison Technologies dismissed employee after she raised holiday pay concerns United KingdomRetaliation against whistleblowers Other

An employee of the Dundee-based electrical services provider for gyms (around 140 employees) had pointed out that the technicians' holiday pay was being calculated incorrectly; a few days later her home working arrangement was withdrawn, and on 11 June 2025 she was dismissed. The Employment Tribunal upheld her claims for automatically unfair dismissal (s. 103A) and detriment (s. 47B); compensation will be decided separately.

What organisations can take from it

Employers who worsen working conditions shortly after a disclosure must be able to prove a documented reason unrelated to the disclosure.

Relevance to training and awareness

How managers handle internal reports

Authority / court
Employment Tribunal
Area of law
Whistleblower protection · Retaliation against whistleblowers
Legal basis
Employment Rights Act 1996, ss. 43B, 47B, 103A
Action
Other
Status of proceedings
unknown
Sector
Other
Employees
50 to 249
Published
23 Jul 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Jun 2026 Petfre (Gibraltar) LimitedPetfre (Gibraltar): £900,000 over inadequate customer interaction in online gambling United KingdomConsumer protection and online retail €1.04m

Following a compliance assessment in May and June 2024, the operator of betfred.com will pay £900,000 in lieu of a financial penalty to the Consolidated Fund (the UK Government's general account) under a settlement and contribute to the Commission's investigation costs. The Commission found breaches of the remote customer interaction requirements under SRCP 3.4.3: automated processes to identify signs of harm and to act immediately on strong indicators were lacking, so that one customer lost a further £17,900 within 24 hours of a review without being contacted again. The Commission had already announced sanctions against Petfre in 2022 and 2025.

What organisations can take from it

After a sanction, customer interaction must be improved lastingly and demonstrably, or the next case follows.

Relevance to training and awareness

Lasting improvement of customer interaction after earlier sanctions

Authority / court
Gambling Commission
Area of law
Consumer protection and online retail
Legal basis
s. 116 Gambling Act 2005; SRCP 3.4.3 Abs. 1, 2, 4, 7 und 11 der Licence Conditions and Codes of Practice (LCCP)
Action
Fine
Status of proceedings
final
Sector
Other
Repeat case
yes
Mitigating circumstances
A swift action plan with progress updates and full cooperation with the investigation.
Published
30 Jun 2026

Original amount 900,000 GBP, converted at the ECB reference rate of 30 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Jun 2026 One Way Environmental Services LLC; Coastal Environmental Solutions Inc.; BWC Terminals LLCSulphuric acid spill in Channelview: USD 3.52m in OSHA penalties against three employers USAWorkplace safety and accidents €3.09m

After around one million gallons of sulphuric acid were released at the BWC Terminals site in Channelview (Texas) in December 2025, OSHA proposed penalties totalling 3,520,703 USD against three employers. Staffing contractor One Way Environmental Services accounts for 3,045,452 USD for 18 violations classed as wilful and egregious and five as serious, because it sent workers to the clean-up without adequate training, respirator fit tests and safety measures; the hazardous waste contractor Coastal Environmental Solutions faces 392,501 USD and BWC Terminals, which had mixed fresh and spent acid despite warnings, 82,750 USD. The authority allegedly made the findings set out here; this account is not based on a final judgment. The decision is not final.

What organisations can take from it

Companies that outsource clean-up after a chemical incident must check their contractors' training, respiratory protection and emergency planning.

Relevance to training and awareness

Health and safety during clean-up after chemical incidents

Missing or inadequate training played a role in the decision.

Authority / court
U.S. Department of Labor – Occupational Safety and Health Administration (OSHA)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Occupational Safety and Health Act (u. a. Vorschriften zu Gefahrstoffeinsätzen und Notfallmaßnahmen sowie Atemschutz)
Action
Fine
Status of proceedings
not yet final
Sector
Other
Published
26 Jun 2026

Original amount 3,520,703 USD, converted at the ECB reference rate of 26 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jun 2026 Ö Aktiengesellschaft (in der Entscheidung abgekürzt; Adressverlag und Direktwerbeunternehmen)VwGH sets data protection fine for party affinities definitively at 13 million EUR AustriaMarketing and consent €13m

The company had stored statistically calculated ‘party affinities’ for around 2.2 million people and in some cases sold them to advertising clients – special categories of personal data without consent; in addition, parcel frequency data was further processed for incompatible purposes. The Austrian Data Protection Authority (Datenschutzbehörde, DSB) had imposed 18 million EUR in 2019 and the Federal Administrative Court (Bundesverwaltungsgericht, BVwG) 16 million EUR in 2024; Austria's Supreme Administrative Court (Verwaltungsgerichtshof, VwGH) has now set the fine with final effect at 13 million EUR (plus 100,000 EUR in procedural costs).

What organisations can take from it

Calculated characteristics such as political leanings are themselves special categories – companies that derive them for advertising need explicit consent.

Authority / court
Verwaltungsgerichtshof (Ausgangsbescheid: Datenschutzbehörde)
Area of law
Data protection · Marketing and consent
Legal basis
DSGVO Art. 5 Abs. 1 lit. a und b, Art. 6 Abs. 4, Art. 9 Abs. 1 (VwGH Ro 2025/04/0007)
Action
Fine
Status of proceedings
reduced
Sector
Other
Culpability
negligent
Mitigating circumstances
Comprehensive cooperation, deletion of the party affinities, settlements with data subjects, long duration of proceedings (5 years, 10 months).
Published
16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jun 2026 Needle Craft Ltd.; Casual Wear Apparel LLCCBP import stop for textiles from Jordan's Needle Craft and Casual Wear Apparel USAForced and child labour Order

U.S. Customs and Border Protection (CBP) issued a Withhold Release Order: clothing from Needle Craft Ltd.; Casual Wear Apparel LLC (Jordan) is being detained at all US ports of entry because there are indications of forced labour (ILO indicators including physical and sexual violence, retention of identity documents, restriction of movement and withholding of wages). These are two parallel orders against both manufacturers.

What organisations can take from it

Fashion brands should supplement social audits at garment makers with confidential worker interviews, because violence and confiscation of identity documents remain invisible in paper-based checks.

Authority / court
U.S. Customs and Border Protection
Area of law
Supply chain and human rights · Forced and child labour
Legal basis
19 U.S.C. § 1307 (Tariff Act of 1930, Section 307)
Action
Order
Status of proceedings
unknown
Sector
Other
Published
23 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Jun 2026 SSG SELECT SOLUTIONS S.R.L.Stranger in Kaufland CCTV room – service provider SSG Select Solutions pays 2,000 EUR RomaniaVideo surveillance €1,948

An employee of the service provider acting as processor for Kaufland România let a third party into a store’s video surveillance room; that person filmed the images and distributed them on social media. Kaufland reported the incident. The Romanian data protection authority (ANSPDCP) imposed 10,200 lei (2,000 EUR) on the processor and ordered additional checks of the work instructions; the fine has been paid. Date = publication of the press release; according to the authority, the investigation was concluded in April 2026.

What organisations can take from it

Anyone with access to surveillance rooms must know: video footage is confidential, and third parties have no access there.

Relevance to training and awareness

Access to surveillance rooms; staff bound by instructions

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection · Video surveillance
Legal basis
Art. 29, Art. 32 Abs. 1 lit. b, Abs. 2 und 4 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
15 Jun 2026

Original amount 10,200 RON, converted at the ECB reference rate of 15 Jun 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Jun 2026 Philip Morris Italia S.r.l.AGCM fines Philip Morris Italia €7m over "senza fumo" (smoke-free) advertising ItalyMisleading advertising and pricing €7m

Philip Morris Italia widely promoted heated tobacco devices, e-cigarettes and nicotine products for oral use with phrases such as "senza fumo" (smoke-free) and a "smoke-free future"; the AGCM considered this misleading because it suggested that the products were harmless or less harmful, although they can endanger health and safety. The authority imposed a fine of 7,000,000 EUR and prohibited continuation; the proceedings were triggered by a report from the Ministry of Health.

What organisations can take from it

Health-related advertising claims must be complete and substantiated, and a slogan such as "smoke-free" must not imply that a product is harmless.

Relevance to training and awareness

Health-related advertising claims for tobacco and nicotine products

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Art. 20, 21 Abs. 1 und 3, 22 Codice del consumo (D.lgs. 206/2005)
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
10 Jun 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Jun 2026 Xponential Fitness, Inc. u. a. (Franchisegesellschaften der Marken AKT, BFT, Club Pilates, CycleBar, Pure Barre, Rumble, StretchLab, YogaSix)New York: Xponential Fitness pays 3.97 million USD over misleading franchise disclosures USA, NYConsumer protection and online retail €3.43m

According to the Attorney General's office, the fitness franchisor stated three to six months until studio opening in the disclosure documents filed in New York, although it took more than 13 months on average and its own SEC reports showed longer periods. The Assurance of Discontinuance requires 3,971,250 USD: 3 million USD for 70 harmed franchisees (of which 300,000 USD is a civil penalty) and 971,250 USD in fee refunds to 25 franchisees who never opened. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Statements in franchise disclosures must match the company's own capital market reports – discrepancies count as evidence of deception.

Relevance to training and awareness

Realistic statements in franchise disclosure documents

Authority / court
Office of the New York State Attorney General (Investor Protection Bureau, Franchise Section)
Area of law
Consumer protection and online retail
Legal basis
New York Franchise Sales Act (General Business Law §§ 680 ff., insb. § 687); Executive Law § 63(12)
Action
Disgorgement of profits
Status of proceedings
final
Sector
Other
Published
9 Jun 2026

Original amount 3,971,250 USD, converted at the ECB reference rate of 9 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 Jun 2026 A. Tsokkos Hotels Public LimitedCyprus: 16,500 EUR against A. Tsokkos Hotels for late annual financial report CyprusDisclosure and reporting obligations €16,500

The listed hotel group did not publish its 2024 annual financial report on time; the Cyprus Securities and Exchange Commission (CySEC) imposed a total of 16,500 EUR. At the same meeting, eleven other issuers were fined between 1,500 and 17,000 EUR for the same reason; a fine of 13,500 EUR had already been imposed on the company under the same law in 2025.

What organisations can take from it

Publication deadlines for financial reports are not negotiable – repeated delays lead to fines and, in extreme cases, to suspension of trading.

Authority / court
Cyprus Securities and Exchange Commission (CySEC)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Sec. 9(1), 37(2)(a) Transparency Requirements (Securities Admitted to Trading on a Regulated Market) Law 2007
Action
Fine
Status of proceedings
unknown
Sector
Other
Repeat case
yes
Published
7 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Jun 2026 CityFitness Group LimitedCityFitness: 1,120,000 NZD for a price rise disguised as a “transaction fee” New ZealandMisleading advertising and pricing €565,485

New Zealand's largest gym chain kept advertising a membership at 6.99 NZD a week on its website, Instagram and Google ads, although all new members had to pay a compulsory 3% surcharge that it presented as a “transaction fee” but which in fact served to raise revenue generally. After pleading guilty to eight representative charges (offending period 21 December 2023 to 30 April 2025), the company was sentenced on 5 June 2026 to a fine of 1,120,000 NZD. According to the Commerce Commission (ComCom, New Zealand's competition and consumer authority), the surcharge affected more than 125,000 members and generated around 1.6 million NZD in additional revenue.

What organisations can take from it

Unavoidable surcharges belong in the advertised price and must not be passed off as a payment-related fee.

Relevance to training and awareness

Transparent total prices and honestly labelled surcharges

Authority / court
Strafgericht, in der Quelle nicht benannt (Anklage: Commerce Commission)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Fair Trading Act 1986, ss 11, 40(1)
Action
Fine
Status of proceedings
unknown
Sector
Other
Culpability
intentional
Liability of senior managers
According to the court, the labels “transaction fee” and “Payment Authority Fee” were approved at the highest level; the fee increase was decided by senior executives.
Published
9 Jun 2026

Original amount 1,120,000 NZD, converted at the ECB reference rate of 5 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Jun 2026 Sonus Public Relations LtdTribunal: PR agency Sonus must pay £71,052 after subjecting whistleblower to detriment United KingdomRetaliation against whistleblowers €82,264

The PR agency, which did not appear, lost on all claims: detriment on grounds of whistleblowing (£20,000 for injury to feelings), wrongful termination without notice pay (£3,547.60) and constructive unfair dismissal (basic and compensatory award including a 25 % ACAS uplift). A total of £71,051.82 was awarded.

What organisations can take from it

Employers who do not take part in the proceedings risk, in addition to whistleblower compensation, an uplift for failing to follow the ACAS Code of Practice.

Relevance to training and awareness

How managers handle internal reports

Authority / court
Employment Tribunal
Area of law
Whistleblower protection · Retaliation against whistleblowers
Legal basis
Employment Rights Act 1996, s. 47B (Benachteiligung wegen geschützter Offenlegung); konstruktive unfaire Kündigung; wrongful dismissal
Action
Other
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Published
22 Jul 2026

Original amount 71,051.82 GBP, converted at the ECB reference rate of 3 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 4 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 Jun 2026 FTI Consulting, Inc.OFAC: USD 1.05 million settlement with FTI Consulting over prohibited extension of credit to a Russian state-owned bank USABreaches of sanctions and embargoes €901,597

Consulting firm FTI Consulting, Inc. of Washington, D.C. is paying USD 1,050,000 under a settlement with OFAC for apparent violations of the Russia financial sector sanctions. According to OFAC's findings, between April 2019 and May 2021 FTI indirectly extended prohibited debt on six occasions to a Russian state-owned bank subject to Directive 1 under Executive Order 13662: invoices remained unpaid beyond the permitted 14 days or were paid long afterwards while FTI continued to provide services. OFAC treated the apparent violations as non-egregious and not voluntarily self-disclosed; the base penalty was USD 525,000. The settlement amount is above the base penalty; OFAC cited in particular the anticipated impact on future compliance by similarly situated firms. Source: U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), enforcement release "FTI Consulting, Inc., a Global Business Advisory Firm, Settles with OFAC for $1,050,000 Related to Apparent Violations of Dealing in Prohibited Debt of Sanctioned Russian Bank", 1 June 2026, https://ofac.treasury.gov/media/935651/download?inline; summarised in our own words.

Authority / court
U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Ukraine-/Russia-Related Sanctions Regulations, 31 C.F.R. §§ 589.202, 589.213 i. V. m. Directive 1 zu E.O. 13662 (sechs mutmaßliche Verstöße); Vergleich nach den Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A
Action
Fine
Status of proceedings
final
Sector
Other
Published
1 Jun 2026

Original amount 1,050,000 USD, converted at the ECB reference rate of 1 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

29 May 2026 Atlantic Lottery Corporation Inc.FINTRAC: CAD 212,025 penalty on Atlantic Lottery Corporation Inc. for 3 violations of anti-money laundering obligations CanadaSuspicious activity reports €131,906

According to FINTRAC, Atlantic Lottery Corporation Inc. is a reporting entity in the casino sector based in Moncton, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 212,025 on the company on 29 May 2026. According to FINTRAC's findings, made during a compliance examination, the company committed 3 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned suspicious transaction reporting, written compliance policies and procedures and assessing and documenting money laundering and terrorist financing risks. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Atlantic Lottery Corporation Inc.", published 9 July 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-07-09-1-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
PCMLTFA s. 7, 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Other
Published
9 Jul 2026

Original amount 212,025 CAD, converted at the ECB reference rate of 29 May 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 May 2026 Marketing-Unternehmen, UK (anonymisiert)ICO: £300,000 fine for a marketing firm over spam and fake bailiff texts United KingdomMarketing and consent €346,600

The ICO fined a UK marketing company £300,000 and issued an enforcement notice. The ICO found that the company had sent more than 5.5 million unsolicited marketing text messages, including messages styled as if they came from bailiffs. The 7726 spam reporting service received over 60,000 complaints. The ICO relied on regulations 22 and 23 of PECR (electronic marketing without consent and concealed sender identity).

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Marketing and consent
Legal basis
Regulations 22 und 23 PECR; section 55A DPA 1998
Action
Fine
Status of proceedings
unknown
Sector
Other

Original amount 300,000 GBP, converted at the ECB reference rate of 20 May 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Apr 2026 Anwaltskanzlei aus Hamilton (anonymisiert)Hamilton law firm: 60,000 NZD fine for anti-money laundering breaches New ZealandInternal controls €30,092

Between March 2022 and March 2025 a Hamilton law firm repeatedly breached the AML/CFT Act: it lacked a proper risk assessment, an implemented anti-money laundering programme and adequate records. It also failed to respond, or responded only in part, to information notices from the Department of Internal Affairs (DIA, the AML/CFT supervisor for law firms), thereby obstructing its investigators. After the firm pleaded guilty, the court imposed a fine of 60,000 NZD, taking the firm's size and financial capacity into account.

What organisations can take from it

Even small law firms must actually implement their risk assessment, AML programme and record keeping and answer supervisory information requests in full.

Relevance to training and awareness

Anti-money laundering duties in law firms and cooperation with the supervisor

Authority / court
Strafgericht, in der Quelle nicht benannt (Anklage: Department of Internal Affairs)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
Anti-Money Laundering and Countering Financing of Terrorism Act 2009
Action
Fine
Status of proceedings
unknown
Sector
Other
Culpability
intentional
Liability of senior managers
According to the Department of Internal Affairs, the firm's partners, as lawyers, also had professional obligations to uphold the law.
Published
24 Apr 2026

Original amount 60,000 NZD, converted at the ECB reference rate of 24 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Apr 2026 12066424 Canada Inc.Temporary staffing agency: CA$100,000 over unpaid wages Canada, ONMinimum wage and undeclared work €62,555

Following complaints, the labour inspectorate found, among other things, outstanding minimum wages at the temporary staffing agency in Leamington; an audit for 2022 showed that hundreds of employees were owed a total of CA$234,212 in regular wages, public holiday pay and vacation pay. The company did not comply with the 2023 orders to pay; in proceedings held in its absence, the court imposed CA$100,000 on the company (plus victim fine surcharge).

What organisations can take from it

Companies that ignore regulatory orders to pay outstanding wages risk a substantial fine.

Authority / court
Provincial Offences Court Windsor (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
Employment Standards Act, 2000 (Ontario), ss. 103(8), 106, 132, 136
Action
Fine
Status of proceedings
unknown
Sector
Other
Liability of senior managers
Measures against individuals are not reported here.
Published
3 Jun 2026

Original amount 100,000 CAD, converted at the ECB reference rate of 23 Apr 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Apr 2026 PricewaterhouseCoopers Hong KongPwC Hong Kong: HKD 1bn compensation for Evergrande shareholders under SFC agreement Hong KongMarket abuse and insider dealing Other

Under an agreement with the Securities and Futures Commission (SFC, Hong Kong's securities regulator), PricewaterhouseCoopers Hong Kong has undertaken to set aside 1,000,000,000 HKD to compensate independent minority shareholders of China Evergrande Group; in return the regulator will take no further action, without any admission of liability. China Evergrande's audited revenue was allegedly overstated by 44.79% for 2019 and 69.03% for 2020, and PwC Hong Kong, as auditor, was allegedly concerned in the dissemination of false information, allegedly did not maintain its independence and allegedly acquiesced in management's manipulation of audit samples and site inspections.

What organisations can take from it

Auditors who tolerate manipulation of their audit procedures face a considerable risk of having to compensate investors.

Relevance to training and awareness

Independence and professional scepticism in auditing

Authority / court
Securities and Futures Commission (SFC)
Area of law
Capital markets and financial supervision · Market abuse and insider dealing
Legal basis
s. 277 SFO (Cap. 571) (Auffassung der SFC, von PwC HK nicht anerkannt)
Action
Other
Status of proceedings
final
Sector
Other
Published
23 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Apr 2026 Yau Yat Chuen Garden City Club LimitedRansomware via remote maintenance access: enforcement notice against private club Hong KongData breaches and data security Order

In a ransomware attack on the membership management system of Yau Yat Chuen Garden City Club Limited, a private, non-profit recreational club, reported on 31 October 2025, data of 9,045 current and former members and supplementary card holders were affected, including identity card or passport numbers. The attacker exploited a known vulnerability in outdated remote access software of the external service provider and reached the server, which had been left logged in, without further authentication; antivirus software and firewall were outdated, and personal data had been kept longer than necessary. In its investigation report published on 23 April 2026 the PCPD (Privacy Commissioner for Personal Data, Hong Kong's data protection authority) found breaches of DPP 4(1) and DPP 2(2) and served an enforcement notice.

What organisations can take from it

Service providers' remote maintenance access belongs in an organisation's own security concept: current software, additional authentication and no servers left permanently logged in.

Relevance to training and awareness

Service providers' remote access, patch management and retention periods

Authority / court
Privacy Commissioner for Personal Data (PCPD), Hongkong
Area of law
Data protection · Data breaches and data security
Legal basis
Personal Data (Privacy) Ordinance, Data Protection Principles 4(1) und 2(2); Enforcement Notice
Action
Order
Status of proceedings
unknown
Sector
Other
Published
23 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Apr 2026 Automobile Association Developments Limited (AA Driving School, BSM Driving School)AA and BSM driving schools: 4.2 million GBP for drip pricing – CMA's first consumer fine United KingdomMisleading advertising and pricing €4.83m

For online bookings, the driving schools only showed a mandatory booking fee at checkout instead of in the initial price. Following an admission and settlement, the CMA imposed a penalty of 4.2 million GBP (40 % discount on 7 million GBP) and ordered refunds of more than 760,000 GBP to more than 80,000 customers. According to the annual accounts filed with the UK companies register for financial year 2026, the company had around 6,776 employees.

What organisations can take from it

Mandatory fees must be included from the very first price – in the United Kingdom, the CMA has been able to impose fines for this itself since 2025.

Relevance to training and awareness

Price disclosures and mandatory fees at online checkout

Authority / court
Competition and Markets Authority (CMA)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Digital Markets, Competition and Consumers Act 2024
Action
Fine
Status of proceedings
final
Sector
Other
Employees
1,000 to 9,999
Mitigating circumstances
Admission and early settlement (40 % discount).
Published
15 Apr 2026

Original amount 4,200,000 GBP, converted at the ECB reference rate of 15 Apr 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Apr 2026 Arbeitgeber (in der Mitteilung nicht namentlich genannt)Slovenia: 71,474 EUR for covert monitoring of employees using spyware SloveniaEmployee data €71,474

An employer installed the software Spyrix Employee Monitoring on the work computers of individual employees, which for months recorded screen content, audio and even private e-mails and conversations without informing the employees. The supervisory authority, the Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia, IP), imposed 71,474 EUR on the company.

What organisations can take from it

Covert employee monitoring by software is practically never permissible – IT and managers must know this before tools are installed.

Relevance to training and awareness

Permissible monitoring of employees and IT use

Authority / court
Informacijski pooblaščenec Republike Slovenije (IP)
Area of law
Data protection · Employee data
Legal basis
Art. 5 und Art. 6 Abs. 1 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Culpability
intentional
Liability of senior managers
Measures against individuals are not reported here.
Published
9 Apr 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Mar 2026 3R Technology UK Ltd3R Technology UK: penalty for exporting contaminated plastic waste despite prohibition United KingdomWaste and hazardous substances €92,442

From 2022 to 2025, the company exported containers of supposedly clean plastic that was in fact contaminated with electronic waste such as cables and circuit boards; in some cases, the waste was hidden at the back of the container, and further containers were shipped despite prohibition notices from August 2024. The company pleaded guilty and was fined 80,000 GBP; in addition, it was ordered to pay 45,000 GBP in costs and a 2,000 GBP surcharge. According to the annual accounts filed with the UK companies register for financial year 2025, the company had around 19 employees.

What organisations can take from it

Incorrectly declared waste exports are detected during port inspections; those who ignore regulatory prohibitions risk a criminal conviction.

Relevance to training and awareness

Correct classification and declaration of waste for export

Authority / court
Preston Magistrates' Court (Anklage: Environment Agency)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Vorschriften zur grenzüberschreitenden Abfallverbringung (Notifizierung und Zustimmung); Verstoß gegen Untersagungsverfügungen
Action
Fine
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Culpability
intentional
Repeat case
yes
Mitigating circumstances
Guilty plea.
Published
2 Apr 2026

Original amount 80,000 GBP, converted at the ECB reference rate of 24 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 5 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Mar 2026 SIA "Fitsypro"Fitsypro fails to answer access request and DVI enquiries – 1,500 EUR LatviaData subject rights and transparency €1,500

A person complained that Fitsypro had not responded to their request for access, rectification and erasure of November 2023. Three requests for information from the Datu valsts inspekcija (Latvian Data State Inspectorate, DVI) between 2024 and 2026 went unanswered, and nobody attended the hearing. The DVI imposed 1,500 EUR and requested the information by 21 April 2026.

What organisations can take from it

Official mailboxes (eAdrese) and data protection e-mail addresses must be monitored – silence towards the supervisory authority costs money.

Relevance to training and awareness

Handling data subject requests and correspondence from authorities

Authority / court
Datu valsts inspekcija (DVI)
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 58 Abs. 1 lit. e, Art. 83 Abs. 5 lit. e DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Culpability
intentional

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Mar 2026 Stanleybet Malta LimitedMalta: 225,730 EUR against betting operator Stanleybet over lack of customer checks in betting shops MaltaCustomer due diligence €225,730

Malta's Financial Intelligence Analysis Unit (FIAU) imposed 225,730 EUR, a penalty payment of 2,000 EUR per day and a follow-up directive on the licensed gambling operator, which works through a network of independently operated betting shops in an EU member state. The company was unable to link customers' cumulative deposits across different shops and only checked customers from a single deposit of 2,000 EUR upwards, so the threshold could be circumvented. The company has appealed.

What organisations can take from it

Thresholds must be aggregated per customer across all channels and branches – otherwise the system invites structuring.

Relevance to training and awareness

Recognising structured deposits below the checking threshold

Authority / court
Financial Intelligence Analysis Unit (FIAU)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Regulation 21 PMLFTR; Verstöße gegen Regulations 5(5)(a)(ii), 7, 9(1) PMLFTR und FIAU Implementing Procedures
Action
Fine
Status of proceedings
under appeal
Sector
Other
Published
16 Apr 2026
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Mar 2026 Busy Bees Nurseries LimitedBusy Bees: £485,374 in minimum wage arrears owed to 9,056 nursery staff United KingdomMinimum wage and undeclared work €561,854

The UK Department for Business and Trade publicly named the nursery operator Busy Bees Nurseries Limited in round 23 of the National Minimum Wage Naming Scheme. According to investigations by HM Revenue & Customs (HMRC), the company had paid a total of 9,056 workers less than the statutory minimum wage between April 2017 and October 2022 and had to repay £485,374.05 – on average around £54 per person. According to the ministry, the 389 employers named in this round also received penalties totalling around £12.6 million; the amount per company is not published.

What organisations can take from it

Where many employees earn close to the minimum wage, regularly checking payroll against the applicable minimum rates is a must – small shortfalls per person add up to large arrears and public naming.

Relevance to training and awareness

Minimum wage compliance in payroll

Authority / court
Department for Business and Trade (DBT) und HM Revenue & Customs (HMRC), National Minimum Wage Naming Scheme
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
Britisches Mindestlohnrecht (National Minimum Wage / National Living Wage); National Minimum Wage Naming Scheme
Action
Order
Status of proceedings
unknown
Sector
Other
Employees
1,000 to 9,999
Published
19 Mar 2026

Original amount 485,374.05 GBP, converted at the ECB reference rate of 19 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Mar 2026 Syndicat National des Moniteurs du Ski Français (SNMSF)Ski instructors’ union SNMSF: EUR 3.4 million for exclusivity duty of ESF instructors FranceCartels and collusion €3.4m

From 12 May 2006 to 4 February 2025, the model agreement of France’s largest ski instructors’ union prohibited instructors of the Écoles du Ski Français from teaching for competing ski schools or their own clients and threatened exclusion for breaches; the Autorité de la concurrence (French Competition Authority) regarded this as a restriction of competition by object on the market for ski tuition. It imposed EUR 3.4 million, for the first time in an ordinary procedure calculated on the basis of the members’ turnover, and ordered the union to amend the rules, publish the decision and, if it cannot pay, call on its members for contributions.

What organisations can take from it

Professional associations are also liable under competition law for statutes and model rules that forbid their members from working for competitors.

Relevance to training and awareness

Anti-competitive rules in professional associations

Authority / court
Autorité de la concurrence
Area of law
Competition law · Cartels and collusion
Legal basis
Art. 101 Abs. 1 AEUV; Art. L. 420-1 Code de commerce; Bemessung nach Art. L. 464-2 Code de commerce (Umsetzung der ECN+-Richtlinie)
Action
Fine
Status of proceedings
under appeal
Sector
Other
Published
17 Mar 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Mar 2026 Associação Portuguesa das Empresas do Setor Privado de Emprego e de Recursos Humanos (APESPE)Portugal: 4.5 million EUR against temporary work association APESPE for no-poach rule PortugalCartels and collusion €4.52m

From 1987 to March 2025, the association of temporary work agencies (around 40 members) obliged its members in its code of ethics not to poach each other’s temporary workers. The Autoridade da Concorrência (Portuguese Competition Authority, AdC) regarded this as an anticompetitive decision by an association in the labour market and imposed 4,519,000 EUR, calculated on the basis of the members’ turnover; the decision can be appealed (date = press release).

What organisations can take from it

An association’s code of ethics can also be a cartel – no-poach agreements between competitors are off limits.

Relevance to training and awareness

No-poach agreements in association rules

Authority / court
Autoridade da Concorrência (AdC)
Area of law
Competition law · Cartels and collusion
Legal basis
Lei da Concorrência (Lei n.º 19/2012), Art. 9.º
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
12 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Mar 2026 Direktmarketing-Unternehmen, UK (anonymisiert)ICO: £130,000 fine for a direct marketing firm over calls to TPS numbers United KingdomMarketing and consent €150,737

In March 2026 the ICO fined a small UK direct marketing company £130,000 and also served an enforcement notice. According to the ICO, over almost eleven months in 2024 the company had staff make more than 230,000 marketing calls to lines that had been on the UK's opt-out register for sales calls (Telephone Preference Service, TPS) for over 28 days, prompting 12 complaints. The ICO treated this as a breach of regulation 21 of PECR.

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Marketing and consent
Legal basis
Regulations 21 und 24 PECR; section 55A DPA 1998
Action
Fine
Status of proceedings
unknown
Sector
Other

Original amount 130,000 GBP, converted at the ECB reference rate of 12 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Mar 2026 Vier Unternehmen eines Bodenaufbereitungskonzerns aus Barneveld (anonymisiert)OM: €1.125m against four soil firms from Barneveld over environmental fraud NetherlandsWaste and hazardous substances €1.13m

The Openbaar Ministerie (OM, Dutch Public Prosecution Service) imposed penalty orders totalling 1,125,000 EUR on four companies from Barneveld that belonged to the same group at the time and are not named in the releases, consisting of 660,000 EUR in fines and 465,000 EUR in confiscation of unlawfully obtained gains. According to the OM, between 2013 and 2016 the firms accepted excessively contaminated sand, cleaned it inadequately or incorrectly and deliberately mixed it with cleaner sand for reuse, in breach of permit conditions and the Wet milieubeheer (Environmental Management Act) and involving forgery. The companies initially lodged an objection (verzet) but withdrew it, so the penalty orders are final (release of 2 July 2026).

What organisations can take from it

In certified recycling chains no stage may bypass acceptance or testing criteria; mixing to conceal contamination turns a permit breach into environmental fraud.

Relevance to training and awareness

Integrity in certified recycling chains for soil and waste

Authority / court
Openbaar Ministerie (OM), Functioneel Parket
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Vorschriften der Umgebungsgenehmigungen (omgevingsvergunningen); Wet milieubeheer; valsheid in geschrift; Strafbefehle des OM
Action
Fine
Status of proceedings
final
Sector
Other
Culpability
intentional
Mitigating circumstances
The companies have adapted or ceased their activities, and measures have been taken within the group.
Published
10 Mar 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Mar 2026 World Anti-Doping Agency (WADA)WADA: compliance agreement with Canada's Privacy Commissioner on athletes' data CanadaData protection Other

The Montreal-based World Anti-Doping Agency (WADA), a foundation under Swiss private law, entered into a compliance agreement under PIPEDA with the Privacy Commissioner of Canada, under which an investigation opened in November 2024 following a complaint is held in abeyance and will be discontinued once the agreement is fulfilled. WADA must ensure that anti-doping organisations use athletes' personal information in the ADAMS system only for anti-doping purposes from 1 January 2027, amend the World Anti-Doping Code and the ADAMS agreements accordingly, document a control mechanism and report quarterly. WADA disputes any contravention and the Commissioner's jurisdiction; if it fails to comply, the Commissioner may apply to the Federal Court for an order.

What organisations can take from it

Operators of data platforms used by partners must enforce, contractually and technically, that partners use the data only for the intended purpose.

Relevance to training and awareness

Purpose limitation on shared data platforms

Authority / court
Office of the Privacy Commissioner of Canada (OPC)
Area of law
Data protection
Legal basis
Personal Information Protection and Electronic Documents Act (PIPEDA), Sections 17.1 und 17.2 (Compliance Agreement)
Action
Other
Status of proceedings
unknown
Sector
Other
Published
17 Mar 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Mar 2026 Northern Isga FoundationFINTRAC: CAD 91,162.50 penalty on Northern Isga Foundation for 4 violations of anti-money laundering obligations CanadaInternal controls €57,009

According to FINTRAC, Northern Isga Foundation is a non-profit charitable organisation based in Glenevis, Alberta, that receives a portion of a casino's revenues and is therefore a reporting entity. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 91,162.50 on the foundation on 2 March 2026. According to FINTRAC's findings, made during a compliance examination, the foundation committed 4 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned written compliance policies and procedures, assessing and documenting money laundering and terrorist financing risks, the compliance training programme and the prescribed review of the compliance programme. According to FINTRAC, the foundation has appealed the decision to the Federal Court. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Northern Isga Foundation", published 26 March 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-03-26-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
PCMLTFA s. 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c), 156(1)(d), 156(1)(e), 156(1)(f); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
under appeal
Sector
Other
Published
26 Mar 2026

Original amount 91,162.5 CAD, converted at the ECB reference rate of 2 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Mar 2026 Nordic Cleaning ApSNordic Cleaning: fine for leaving access request unanswered despite an order DenmarkData subject rights and transparency €8,031

Despite repeated follow-ups by the trade union, the cleaning company did not respond to a union member’s access request and also failed to comply with the order of the Danish Data Protection Agency (Datatilsynet) to decide on the request. Datatilsynet reported the company; the case was closed on 2 March 2026 with a fine notice of 60,000 DKK.

What organisations can take from it

Access requests and orders from authorities need a fixed intake channel and a responsible person – ignoring them leads straight to a criminal complaint.

Relevance to training and awareness

Handling access requests (Art. 15 GDPR)

Authority / court
Anklagemyndigheden (Bødeforelæg) auf Anzeige der Datatilsynet
Area of law
Data protection · Data subject rights and transparency
Legal basis
DSGVO Art. 15; Nichtbefolgung einer Anordnung der Datatilsynet; databeskyttelsesloven
Action
Fine
Status of proceedings
final
Sector
Other

Original amount 60,000 DKK, converted at the ECB reference rate of 2 Mar 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Feb 2026 IMG Academy, LLCOFAC: USD 1.72 million settlement with IMG Academy over school contracts with two sanctioned individuals USABreaches of sanctions and embargoes €1.45m

School and sports academy IMG Academy, LLC of Bradenton, Florida, is paying USD 1,720,000 under a settlement with OFAC for apparent violations of the counternarcotics sanctions. According to OFAC's findings, between 2019 and 2025 IMG Academy entered into tuition agreements for the children of two individuals on the SDN List because of their ties to a sanctioned Mexican drug cartel and processed the related payments; 89 dealings were involved in total. OFAC treated the apparent violations as non-egregious and not voluntarily self-disclosed because an investigation was already under way when the academy reported them; the settlement amount equals the base penalty. Source: U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), enforcement release "IMG Academy, LLC Settles with OFAC for $1.7 Million Related to Apparent Violations of Counternarcotics Sanctions", 12 February 2026, https://ofac.treasury.gov/media/935006/download?inline; summarised in our own words.

Authority / court
U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Foreign Narcotics Kingpin Sanctions Regulations, 31 C.F.R. § 598.202 (89 mutmaßliche Verstöße); Vergleich nach den Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A
Action
Fine
Status of proceedings
final
Sector
Other
Published
12 Feb 2026

Original amount 1,720,000 USD, converted at the ECB reference rate of 12 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Feb 2026 TMAC LtdICO: £100,000 fine for TMAC over marketing calls to TPS numbers United KingdomMarketing and consent €115,969

The ICO fined TMAC Ltd £100,000 and issued an enforcement notice. The ICO found that between 8 February and 24 September 2024 the company made 260,332 unsolicited marketing calls to numbers registered with the Telephone Preference Service (TPS). Recipients were also not given the caller details required by regulation 24 of PECR. The legal basis is regulations 21 and 24 of PECR.

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Marketing and consent
Legal basis
Regulations 21(1)(b) und 24 PECR; section 55A DPA 1998
Action
Fine
Status of proceedings
unknown
Sector
Other

Original amount 100,000 GBP, converted at the ECB reference rate of 3 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

29 Jan 2026 Associação de Guias de Informação Turística dos Açores (AGITA)Portugal: 8,200 EUR against Azores tour guide association for minimum price list PortugalCartels and collusion €8,200

Since 2020, the only association of tour guides in the Azores (57 active members, around 43% of active guides) had recommended a fee table to its members by e-mail as minimum prices. Following a complaint, the Autoridade da Concorrência (Portuguese Competition Authority, AdC) imposed 8,200 EUR, taking the economic situation into account (date = press release).

What organisations can take from it

Even small professional associations must not circulate fee tables as minimum prices – an e-mail is sufficient evidence.

Relevance to training and awareness

No price recommendations by professional associations

Authority / court
Autoridade da Concorrência (AdC)
Area of law
Competition law · Cartels and collusion
Legal basis
Lei da Concorrência (Lei n.º 19/2012), Art. 9.º; Art. 101 AEUV
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
29 Jan 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Jan 2026 D*** GmbH (Digitalmarketing- und Recruitingagentur, anonymisiert)Recruitment agency: 25,500 EUR for secretly recorded calls with applicants AustriaData subject rights and transparency €25,500

The agency conducted telephone pre-screening interviews with applicants on behalf of client companies, recorded them without valid consent, stored them indefinitely and presented itself as the client company in doing so. The Austrian Data Protection Authority (Datenschutzbehörde, DSB) imposed 25,500 EUR (plus 2,550 EUR in costs) for lack of a legal basis and transparency; the company has lodged an appeal against the amount of the fine with the Federal Administrative Court (Bundesverwaltungsgericht).

What organisations can take from it

Call recordings in recruitment need a genuine legal basis and clear information about who is actually responsible.

Relevance to training and awareness

Recording of telephone calls and applicant data

Authority / court
Datenschutzbehörde
Area of law
Data protection · Data subject rights and transparency
Legal basis
DSGVO Art. 5 Abs. 1 lit. a, c und e, Art. 6 Abs. 1, Art. 12, 13
Action
Fine
Status of proceedings
under appeal
Sector
Other
Employees
Under 50
Mitigating circumstances
No relevant previous violations, cooperation in the proceedings; adjustment of the starting amount to the company's small size.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

31 Dec 2025 ONE WAY PRIVATE COMPANYGreece: 80,000 EUR against call centre One Way over marketing calls for gas supplier GreeceMarketing and consent €80,000

Following numerous complaints about marketing calls for the gas supplier ZENITH, the Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority) found that the call centre engaged had insufficient security measures and called persons without valid consent. By Decision 44/2025, One Way received 40,000 EUR each as processor and as controller, together with an order to delete the data of persons without valid consent; ZENITH and two other service providers were also held liable (10,000, 10,000 and 5,000 EUR).

What organisations can take from it

Anyone outsourcing telemarketing must regularly carry out sample checks on call centres – and call centres are themselves liable for calls made without consent.

Relevance to training and awareness

Checking consent before telemarketing

Authority / court
Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority)
Area of law
Data protection · Marketing and consent
Legal basis
Art. 5, 6, 7, 29, 32 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Repeat case
yes

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Dec 2025 Rickenbacher Data LLC (Datamasters)CPPA: $45,000 against data broker Datamasters over failure to register USA, CAMarketing and consent €38,275

Without registering as a data broker, the Texas reseller traded in the names and contact details of millions of people, sorted by illnesses such as Alzheimer's or addiction, by age, presumed ethnicity and political views. In addition to the fine, the California Privacy Protection Agency (CPPA) requires it to stop selling data on all Californians.

What organisations can take from it

Companies that buy or sell address lists for advertising must check registration obligations – health-related lists are particularly risky.

Authority / court
California Privacy Protection Agency (CPPA)
Area of law
Data protection · Marketing and consent
Legal basis
California Delete Act (Registrierungspflicht für Datenhändler)
Action
Fine
Status of proceedings
final
Sector
Other
Published
8 Jan 2026

Original amount 45,000 USD, converted at the ECB reference rate of 30 Dec 2025.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Dec 2025 Chiba Lotte Marines Co., Ltd. (株式会社千葉ロッテマリーンズ)Chiba Lotte Marines: commitment plan with partial refund after signed-ball promotion JapanMisleading advertising and pricing Other

In a promotional letter of January 2025 for its paid fan club 'TEAM26', the baseball club Chiba Lotte Marines gave the impression that every new member would definitely receive a ball hand-signed by a player at the booth by the stadium, although only some members received one. Instead of an order, a commitment plan was approved on 23 December 2025 – a board resolution, information for consumers, measures to prevent recurrence, allegedly a partial refund of annual fees and reports on implementation; no infringement was thereby established.

What organisations can take from it

Free gifts must state clearly whether every customer or only some will receive them; a commitment plan with refunds can avoid a formal order.

Relevance to training and awareness

Advertising free gifts and special offers correctly

Authority / court
Consumer Affairs Agency (消費者庁, CAA)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Art. 30, Art. 31 Abs. 1 und 3 (Zusagenverfahren), Verdacht eines Verstoßes gegen Art. 5 Nr. 2 Act against Unjustifiable Premiums and Misleading Representations (不当景品類及び不当表示防止法, Gesetz Nr. 134/1962)
Action
Other
Status of proceedings
unknown
Sector
Other
Published
23 Dec 2025

Checked against the official source on 4 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Dec 2025 PPB Entertainment Limited, PPB Counterparty Services Limited, Betfair Casino Limited u. a. (4 Lizenznehmer, Paddy Power Betfair)Paddy Power Betfair: £2m for identifying at-risk players too late United KingdomConsumer protection and online retail €2.28m

Four online licensees trading as Paddy Power and Betfair (PPB Entertainment Limited, PPB Counterparty Services Limited, Betfair Casino Limited, TSE Malta LP) will pay a total of £2,000,000 in lieu of a financial penalty under a settlement and contribute to the Commission's investigation costs. An assessment in April and May 2024 found that their customer interaction systems identified signs of harm such as rapidly rising deposits or very long gambling sessions too late; one customer, for example, staked £86,000 within 16 days without a manual account review. The company had already been penalised in 2023 for marketing to vulnerable customers.

What organisations can take from it

Automated triggers alone are not enough: where there are clear signs of harm, a person must intervene promptly.

Relevance to training and awareness

Manual review where there are clear signs of harm rather than relying solely on automation

Authority / court
Gambling Commission
Area of law
Consumer protection and online retail
Legal basis
s. 116 Gambling Act 2005; SRCP 3.4.3 Abs. 1, 4, 7, 8 und 11 der Licence Conditions and Codes of Practice (LCCP)
Action
Fine
Status of proceedings
final
Sector
Other
Repeat case
yes
Mitigating circumstances
Full cooperation, early acceptance of the failings and swift implementation of an action plan.
Published
17 Dec 2025

Original amount 2,000,000 GBP, converted at the ECB reference rate of 17 Dec 2025.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Dec 2025 Juventus Football Club S.p.A.CONSOB fines Juventus €190,000 for market manipulation through its accounts ItalyMarket abuse and insider dealing €190,000

The CONSOB (Italian securities regulator) imposed a fine of EUR 190,000 on Juventus Football Club S.p.A. under Art. 187-quinquies of the Consolidated Law on Finance (TUF) because market manipulation within the meaning of Art. 187-ter TUF and Art. 15 MAR committed in its interest was attributed to it. According to the findings, the financial statements for 30 June 2020 and 30 June 2021 and the related announcements contained false or misleading information, including on gains from reciprocal player transfers, on deferred salary payments and on buy-back agreements. The decision is not final.

What organisations can take from it

Dressing up financial figures through reciprocal deals or side agreements is market manipulation, for which the company itself is also liable.

Relevance to training and awareness

Accounting for transfer deals and market manipulation

Authority / court
CONSOB (Commissione Nazionale per le Società e la Borsa)
Area of law
Capital markets and financial supervision · Market abuse and insider dealing
Legal basis
Art. 187-ter und 187-quinquies Abs. 1 lit. a D.Lgs. 58/1998 (TUF); Art. 15 Verordnung (EU) 596/2014 (MAR); Art. 6 Abs. 3 Gesetz 689/1981
Action
Fine
Status of proceedings
under appeal
Sector
Other
Culpability
intentional
Mitigating circumstances
The CONSOB noted that the company had strengthened its internal control system after the breaches.
Liability of senior managers
Measures against individuals are not reported here.
Published
2 Jan 2026
Sources

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Dec 2025 Aktiengesellschaft Hallenstadion Zürich (AGH); Ticketcorner AGWEKO fines Hallenstadion Zurich and Ticketcorner over ticketing clause SwitzerlandAbuse of market power €122,929

At the end of 2008 Aktiengesellschaft Hallenstadion Zürich and Ticketcorner AG agreed that the arena would only be let to organisers selling at least 50% of tickets through Ticketcorner, which hindered other ticketing providers. After the Federal Supreme Court found a competition-law infringement in 2020 and remitted the case (2C_113/2017), the Wettbewerbskommission (WEKO, Swiss Competition Commission) classed both companies' conduct in 2009 to 2011 as abuse of a dominant position and, by decision of 15 December 2025, fined the Hallenstadion around CHF 50,000 and Ticketcorner around CHF 65,000. The arena operator had concluded an amicable settlement; the decision can be appealed to the Federal Administrative Court.

What organisations can take from it

Exclusivity clauses between strong market players remain a competition risk, even if the proceedings only end years later.

Relevance to training and awareness

Exclusivity clauses and tying by dominant undertakings

Authority / court
Wettbewerbskommission (WEKO)
Area of law
Competition law · Abuse of market power
Legal basis
Kartellgesetz (KG): Missbrauch einer marktbeherrschenden Stellung; Rückweisung BGer 2C_113/2017 vom 12.02.2020
Action
Fine
Status of proceedings
unknown
Sector
Other
Mitigating circumstances
The arena operator concluded an amicable settlement with WEKO.
Published
22 Jan 2026

Original amount 115,000 CHF, converted at the ECB reference rate of 15 Dec 2025.

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Dec 2025 ZMLUK LimitedICO: £105,000 fine for ZMLUK over unsolicited marketing emails United KingdomMarketing and consent €119,986

The ICO fined ZMLUK Limited £105,000. The ICO found that the company had sent unsolicited marketing emails for energy-saving products; the notice gives the period as 1 January to 21 July 2023. The ICO found a serious breach of regulation 22 of PECR (electronic marketing without consent). Under the notice, timely payment reduces the amount by 20% to £84,000.

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Marketing and consent
Legal basis
Regulation 22 PECR; section 55A DPA 1998
Action
Fine
Status of proceedings
unknown
Sector
Other

Original amount 105,000 GBP, converted at the ECB reference rate of 11 Dec 2025.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

28 Nov 2025 Institute of Certified BookkeepersFCA: Public censure for Institute of Certified Bookkeepers over deficient AML supervision United KingdomMoney laundering and terrorist financing Reprimand or warning

The FCA, through its supervisor OPBAS, publicly censured the Institute of Certified Bookkeepers. The professional body is responsible for anti-money laundering supervision of more than 3,000 bookkeepers in the UK. The FCA found that between January 2022 and July 2023 it did not supervise its members effectively or on a risk basis; among other things it suspended inspections for more than nine months and did not keep adequate records of its supervision.

Authority / court
Financial Conduct Authority (FCA)
Area of law
Money laundering and terrorist financing
Legal basis
Regulation 16 Oversight of Professional Body AML and CTF Supervision Regulations 2017; Regulations 17 und 46 MLRs 2017
Action
Reprimand or warning
Status of proceedings
final
Sector
Other

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Nov 2025 FWS Group LtdADGM: allegedly 51,000 USD fine for business centre operator FWS Group over missing customer checks United Arab EmiratesCustomer due diligence €44,179

The FSRA (Financial Services Regulatory Authority, the financial regulator of Abu Dhabi Global Market, ADGM) fined the operator of a business centre, registered as a company service provider, allegedly 51,000 USD for anti-money laundering failings between December 2022 and December 2023. The firm had not carried out a business risk assessment and could not show a risk assessment for any of its 104 customers (tenants), nor had it verified any of them, because its outsourced compliance provider treated only the external operator of the centre as a customer; in addition, after the money laundering reporting officer (MLRO) had been absent for a long period, a replacement was only appointed after about ten months and the regulator was not promptly informed. Without the 20% discount for early settlement the fine would have been 63,750 USD.

What organisations can take from it

A firm that outsources operations and compliance remains itself responsible for due diligence on all of its own customers.

Relevance to training and awareness

Who the customer is: due diligence duties when operations and compliance are outsourced

Authority / court
Financial Services Regulatory Authority (ADGM)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Section 232 FSMR 2015; AML Rules 4.1.1(1), 4.1.1(2)(a) und (d), 6.1.1, 7.1.1(1)(a) und (b), 7.1.2(1)(a), 8.3.1(1)(d), 8.3.2, 8.4.1(c), 12.1.1(1), 15.6.1(d)
Action
Fine
Status of proceedings
final
Sector
Other
Repeat case
no
Mitigating circumstances
No previous non-compliance, cooperation and a remediation programme; 20% discount for early settlement.

Original amount 51,000 USD, converted at the ECB reference rate of 24 Nov 2025.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

Load 20 more of 150

Ready for training that actually lands?

Try the combination for free: automated administration for you, learning formats that fit your team, with no minimum or credit card.

Start 14-day free trial