Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,207 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
- USA €1.04bn 63 % · 22 cases
- Australia €314.8m 19 % · 4 cases
- United Kingdom €124.6m 8 % · 74 cases
- Switzerland €82.3m 5 % · 2 cases
- EU €75.9m 5 % · 66 cases
- South Korea €5.12m 0 % · 1 case
- Canada €3.08m 0 % · 13 cases
- Hong Kong €2.77m 0 % · 3 cases
- New Zealand €595,577 0 % · 2 cases
- United Arab Emirates €384,254 0 % · 9 cases
- 5 more€466,947
What for?
by area of lawAll areas of law
- Sanctions and export control €472.1m 29 % · 11 cases
- Consumer protection and online retail €449.2m 27 % · 16 cases
- Money laundering and terrorist financing €398.5m 24 % · 43 cases
- Bribery and corruption €226.5m 14 % · 4 cases
- Data protection €44.5m 3 % · 80 cases
- Capital markets and financial supervision €21.3m 1 % · 8 cases
- Competition law €19.8m 1 % · 13 cases
- Environment and sustainability €12.4m 1 % · 9 cases
- Health and safety and employment law €8.58m 1 % · 15 cases
- Whistleblower protection €82,264 0 % · 2 cases
- 2 more€0
Who?
by company- Anonymised companies €1.37bn 83 % · 81 cases
- McKinsey and Company Africa (Pty) Ltd €116.6m 7 % · 1 case
- SURYS SAS (Gruppe Imprimerie Nationale) €18.4m 1 % · 1 case
- Capita plc und Capita Pension Solutions Limited €16.1m 1 % · 1 case
- Ö Aktiengesellschaft (in der Entscheidung abgekürzt; Adressverlag und Direktwerbeunternehmen) €13m 1 % · 1 case
- Platinum Gaming Limited €11.5m 1 % · 1 case
- BIT Mining Ltd. (vormals 500.com) €9.48m 1 % · 1 case
- Stericycle, Inc. €9.23m 1 % · 1 case
- Philip Morris Italia S.r.l. €7m 0 % · 1 case
- Società Cooperativa Culture (CoopCulture) €7m 0 % · 1 case
- 115 more€75.6m
When?
per year, by date of decision| Period | Cases | Total |
|---|---|---|
| 2022 | 10 | €4.26m |
| 2023 | 44 | €1.29bn |
| 2024 | 46 | €201.8m |
| 2025 | 59 | €98.6m |
| 2026 | 51 | €53.7m |
210 cases
18 Sep 2026 Kinpodo Co., Ltd. (株式会社金宝堂)Kinpodo: order over a bait price 'from 104,500 JPY' for family funerals Order
From March to May 2025, Kinpodo advertised family funerals in exclusively rented halls under the name 'Chiisana Mori no Ie' in television commercials at a price 'from 104,500 JPY'. In fact, apart from a few cases, customers had to pay at least 308,000 JPY; the order required a corrective notice, measures to prevent recurrence and cessation.
A 'from' price may only be advertised if customers can realistically obtain it.
'From' prices and bait offers
- Authority / court
- Consumer Affairs Agency (消費者庁, CAA)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Art. 7 Abs. 1 i. V. m. Art. 5 Nr. 2 Act against Unjustifiable Premiums and Misleading Representations (不当景品類及び不当表示防止法, Gesetz Nr. 134/1962)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 18 Sep 2026
- 株式会社金宝堂に対する景品表示法に基づく措置命令について (Eintrag, 18.09.2026) Press release of an authority
- News Release 18.09.2026 mit Maßnahmenanordnung 消表対第807号 (PDF) Decision of an authority
Checked against the official source on 4 Oct 2026 · Direct link
Report an error
14 Sep 2026 Fire Protection Recycling LimitedFire extinguisher explodes fatally during recycling – 40,000 GBP fine €46,730
While decommissioned powder extinguishers were being discharged in Oldbury in 2023, a cartridge-type extinguisher exploded and struck a 37-year-old employee on the head, fatally injuring him. There was no risk assessment, no safe system of work, no suitable storage and no restraint system for discharging; the recycling business (20 employees according to its annual accounts) was fined 40,000 GBP plus 17,034.25 GBP in costs.
Carry out a documented risk assessment even for routine work with pressurised containers and provide technical restraints – experience is no substitute for a safeguard.
- Authority / court
- Birmingham Magistrates' Court (Anklage: Health and Safety Executive)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Section 2(1) Health and Safety at Work etc. Act 1974
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Employees
- Under 50
- Published
- 17 Sep 2026
Original amount 40,000 GBP, converted at the ECB reference rate of 14 Sep 2026.
- Fire extinguisher recycling company fined after 'thoughtful and kind' man killed at work (HSE) Press release of an authority
- Companies House: Registereintrag Fire Protection Recycling Limited (07249428) Official register or notice
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link
Report an error
24 Aug 2026 Fitnessstudiokette in Amsterdam (anonymisiert)Labour Authority: €316,875 in fines for Amsterdam gym chain €316,875
The Nederlandse Arbeidsinspectie (Netherlands Labour Authority) imposed fines totalling 316,875 EUR on a gym chain in Amsterdam that is not named in the release. For 25 foreign workers the required work permit or combined residence and work permit was missing, and for three people identity had not been established (Wav, Foreign Nationals Employment Act, 234,375 EUR); because of deficient records it could not be verified whether the minimum wage had been paid for all hours worked (WML, Minimum Wage and Minimum Holiday Allowance Act, 60,000 EUR), plus a breach of the Arbeidstijdenwet (Working Hours Act, 22,500 EUR). The company also received two warnings that work may be preventively halted if the same or similar breaches recur.
Before anyone starts work, their right to work and identity must be checked and working hours must be fully recorded.
Checking the right to work and recording working hours
- Authority / court
- Nederlandse Arbeidsinspectie
- Area of law
- Health and safety and employment law · Minimum wage and undeclared work
- Legal basis
- Wet arbeid vreemdelingen (Wav); Wet minimumloon en minimumvakantiebijslag (WML); Arbeidstijdenwet (ATW)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 24 Aug 2026
- Nederlandse Arbeidsinspectie: Sportschoolketen krijgt ruim 3 ton euro aan boetes Press release of an authority
Checked against the official source on 2 Oct 2026 · Direct link
Report an error
20 Aug 2026 QuinnBet (Gibraltar) LimitedQuinnBet: £415,986 over anti-money laundering and financial vulnerability check failings €485,256
The operator of quinnbet.com will pay £415,986 in lieu of a financial penalty to the Consolidated Fund (the UK Government's general account) under a settlement and contribute to the Commission's investigation costs. The settlement also includes a disgorgement of £193,118, which is not included in the amount shown. A compliance assessment found breaches of the anti-money laundering licence condition LC 12.1.1 paras. 2 and 3 (March 2023 to August 2025) and of the customer interaction requirements under SRCP 3.4.3; following an error during a platform migration, some of the required financial vulnerability checks under SRCP 3.4.4 were also not carried out between February and May 2025. It is the first enforcement action against the company.
Financial vulnerability checks are a licence requirement that must continue without gaps, including during technical changeovers.
Financial vulnerability checks and AML controls in online betting
- Authority / court
- Gambling Commission
- Area of law
- Money laundering and terrorist financing · Internal controls
- Legal basis
- s. 116 Gambling Act 2005; LC 12.1.1 Abs. 2 und 3, SRCP 3.4.3 und SRCP 3.4.4 Abs. 1 der Licence Conditions and Codes of Practice (LCCP)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Repeat case
- no
- Mitigating circumstances
- No previous enforcement action, a swift action plan, full cooperation, early voluntary reporting of some of the failings, voluntary divestment of the funds gained from them and early acceptance of the failings.
- Published
- 20 Aug 2026
Original amount 415,986 GBP, converted at the ECB reference rate of 20 Aug 2026.
- Gambling Commission, Register of regulatory actions: QuinnBet (Gibraltar) Limited (Settlement 20.08.2026) Enforcement database of an authority
- Gambling Commission: QuinnBet (Gibraltar) Limited Public Statement Decision of an authority
- Gambling Commission: QuinnBet (Gibraltar) Limited to pay £609,104 for regulatory failures (20.08.2026) Press release of an authority
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
20 Aug 2026 Truro Sawmills LimitedCornwall sawmill ignores three improvement notices: 20,000 GBP €23,330
According to the HSE, the sawmill failed to protect employees from wood dust (no face-fit testing for respiratory protective equipment, no health surveillance) and let staff drive lift trucks without training; three improvement notices from the HSE (Health and Safety Executive, Britain's workplace safety regulator) were not complied with. The court fined the company, a micro-entity, 20,000 GBP plus 5,000 GBP in costs.
Treat improvement notices from the regulator as binding deadlines, not recommendations; ignoring them risks a fine.
Lift truck training and protection against wood dust
Missing or inadequate training played a role in the decision.
- Authority / court
- Truro Crown Court (Anklage: Health and Safety Executive)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Section 2(1) und Section 33(1)(g) Health and Safety at Work etc. Act 1974
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Employees
- Under 50
- Liability of senior managers
- Measures against individuals are not reported here.
- Published
- 21 Aug 2026
Original amount 20,000 GBP, converted at the ECB reference rate of 20 Aug 2026.
- HSE, Pressemitteilungen (Übersicht) (Entscheidung 2026) Press release of an authority
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link
Report an error
19 Aug 2026 Poliserv JG (PJG) SRLPhishing on admin account – Poliserv JG must pay 3,000 EUR €2,998
Attackers obtained the credentials of a user account with administrator rights through phishing and accessed customer data. The Romanian data protection authority (ANSPDCP) criticised the lack of technical and organisational measures and of regular effectiveness testing, imposed 15,728 lei (3,000 EUR) and ordered regular employee training, including on recognising phishing e-mails. Date = publication of the press release; according to the authority, the investigation was concluded in the previous month.
Admin accounts need MFA, and all employees must be able to recognise phishing – the supervisory authority now expressly orders training.
Phishing recognition, protection of privileged accounts
Missing or inadequate training played a role in the decision.
- Authority / court
- Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 32 Abs. 1 lit. b und Abs. 2 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 19 Aug 2026
Original amount 15,728 RON, converted at the ECB reference rate of 19 Aug 2026.
- ANSPDCP – Comunicat de presă 19.08.2026 (Poliserv JG (PJG) SRL) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
11 Aug 2026 Panzer Norge ASPanzer Norge AS: NOK 100,000 for AML failures at an accounting firm €9,115
Finanstilsynet (Norwegian Financial Supervisory Authority) fined the accounting firm Panzer Norge AS, based in Alta, NOK 100,000 under the Anti-Money Laundering Act. The inspection found shortcomings in the firm-wide risk assessment and in customer due diligence, as well as further breaches in risk and quality management and in engagement agreements; the company, which had five employees, essentially did not dispute the breaches.
Small accounting firms are also subject to anti-money laundering obligations and need a documented risk assessment and demonstrable customer due diligence for every engagement.
Anti-money laundering obligations for accounting and advisory firms
- Authority / court
- Finanstilsynet
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- §§ 7, 8, 9, 12 Abs. 4, 13 Abs. 1, 3 und 4, 14, 24 und 49 hvitvaskingsloven
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Employees
- Under 50
- Culpability
- negligent
- Published
- 17 Sep 2026
Original amount 100,000 NOK, converted at the ECB reference rate of 11 Aug 2026.
- Finanstilsynet: Tilsynsrapport og vedtak – Panzer Norge AS (17.09.2026) Press release of an authority
- Finanstilsynet, Tilsynsrapport med vedtak – Panzer Norge AS, 24/17922, 11.08.2026 Decision of an authority
Checked against the official source on 28 Sep 2026 · Direct link
Report an error
6 Aug 2026 AMATO BESTSELLER S.R.L.AMATO BESTSELLER: 45,000 EUR plus 50,000 lei for data access and robocalls €54,316
Following several complaints, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (Romanian data protection authority, ANSPDCP) found that current and former employees, untrained and without procedural rules, had access to extensive data (including health, family and income data), that data subjects were not informed under Art. 14 GDPR, that excessive data were collected and that automated advertising calls were made without consent. Fines: 78,465 lei (15,000 EUR, Art. 32(4)), 52,310 lei (10,000 EUR, Art. 14), 104,620 lei (20,000 EUR, Art. 5/9 GDPR) and 50,000 lei (Law 506/2004); in addition, an order to provide regular employee training. Date = publication of the press release; according to the authority, the investigation was concluded in June 2026.
Anyone giving employees access to sensitive customer data must train them and limit access on a need-to-know basis.
Training employees in handling customer data; consent for advertising calls
Missing or inadequate training played a role in the decision.
- Authority / court
- Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Art. 5 Abs. 1 lit. c i. V. m. Art. 9, Art. 14, Art. 32 Abs. 4 DSGVO; Art. 12 Abs. 1 Gesetz 506/2004
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 6 Aug 2026
Original amount 285,395 RON, converted at the ECB reference rate of 6 Aug 2026.
- ANSPDCP – Comunicat de presă 06.08.2026 (AMATO BESTSELLER S.R.L.) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
5 Aug 2026 GmbH (im Urteil anonymisiert)Illegal dumping of construction waste: company must pay €375,000 forfeiture €375,000
The Oberlandesgericht (OLG, Higher Regional Court) Linz added a forfeiture of 375,000 EUR to the conviction of a limited company under the Verbandsverantwortlichkeitsgesetz (VbVG, Austrian Corporate Criminal Liability Act) for intentionally handling and moving waste in a way that endangered the environment; the suspended corporate fine of 30 daily rates of 500 EUR (15,000 EUR) imposed by the Landesgericht (Regional Court) Salzburg remained in place. From May 2021 to May 2024 and again from May 2025 to February 2026, contrary to the AWG 2002 (Waste Management Act) and partly to an official decision, the company had excavated soil, construction waste, asphalt and concrete rubble accepted for payment and deposited on a plot; removal costs were put at around 3.24 million EUR. Only the forfeiture of EUR 375,000 is recorded as the amount; the corporate fine of EUR 15,000 was conditionally suspended.
Anyone accepting and depositing waste without a permit risks not only a corporate fine but also forfeiture of the fees received for it, which can far exceed the fine.
Waste law and official conditions for excavated soil and construction waste
- Authority / court
- Oberlandesgericht Linz (Berufung gegen Urteil des Landesgerichts Salzburg vom 06.03.2026)
- Area of law
- Environment and sustainability · Waste and hazardous substances
- Legal basis
- § 181b Abs. 1 und 2 StGB; §§ 3, 4 Abs. 1 und 3, § 6 Abs. 1, § 14 Abs. 1 VbVG; § 20 Abs. 3 StGB; AWG 2002
- Action
- Disgorgement of profits
- Status of proceedings
- final
- Sector
- Other
- Culpability
- intentional
- Repeat case
- no
- Mitigating circumstances
- No previous convictions of the company; rather low environmental risk. Further circumstances taken into account by the court concern a natural person and are not reported here.
- Liability of senior managers
- Under the VbVG, the company's liability is linked to the conduct of its managing director.
- OLG Linz, 9 Bs 153/26b vom 05.08.2026 (RIS) Court decision
Checked against the official source on 2 Oct 2026 · Direct link
Report an error
3 Aug 2026 Shandong Weiqiao Pioneering Group Co., Ltd.UFLPA list: textile group Shandong Weiqiao Pioneering Group over Xinjiang cotton Order
The U.S. Forced Labor Enforcement Task Force (FLETF) added the cotton and textile producer to the Uyghur Forced Labor Prevention Act (UFLPA) Entity List because it sources cotton from Xinjiang. The company's goods are therefore presumed to have been produced with forced labour on import into the US unless the importer rebuts this.
Textile retailers need proof of origin for cotton down to the fibre, for example through isotope or traceability testing.
- Authority / court
- U.S. Department of Homeland Security (Forced Labor Enforcement Task Force)
- Area of law
- Supply chain and human rights · Forced and child labour
- Legal basis
- Uyghur Forced Labor Prevention Act, Section 2(d)(2)(B)(v)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 3 Aug 2026
- Federal Register: Notice Regarding the Uyghur Forced Labor Prevention Act Entity List (03.08.2026) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
24 Jul 2026 The New Brunswick Lotteries and Gaming CorporationFINTRAC: CAD 399,712.50 penalty on The New Brunswick Lotteries and Gaming Corporation for one violation of anti-money laundering obligations €249,415
According to FINTRAC, The New Brunswick Lotteries and Gaming Corporation is a reporting entity in the casino sector based in Fredericton, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 399,712.50 on the company on 24 July 2026. According to FINTRAC's findings, made during a compliance examination, the company committed one violation of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violation concerned suspicious transaction reporting. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on the New Brunswick Lotteries and Gaming Corporation", published 3 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-03-2-eng; summarised in our own words; not an official version and not a reproduction of the original.
- Authority / court
- Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
- Area of law
- Money laundering and terrorist financing · Suspicious activity reports
- Legal basis
- PCMLTFA s. 7; Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Published
- 3 Sep 2026
Original amount 399,712.5 CAD, converted at the ECB reference rate of 24 Jul 2026.
- Administrative monetary penalty on the New Brunswick Lotteries and Gaming Corporation (03.09.2026) Decision of an authority
- FINTRAC – Public notice of administrative monetary penalties Enforcement database of an authority
Checked against the official source on 28 Sep 2026 · Version 3 · Direct link
Report an error
24 Jul 2026 Callcenter (anonymisiert)BNetzA: €34,327 fine on call centre, including for incomplete records of consent €34,327
The Bundesnetzagentur (Federal Network Agency) imposed fines totalling 34,327 EUR on a call centre that mainly marketed telecoms products: 32,000 EUR for unlawful telephone advertising and 2,327 EUR because consents to sales calls had not been fully documented. The campaign continued despite the gaps and requests to stop calling were sometimes ignored; the company has appealed.
Consents to telephone marketing must be fully documented – if the proof is missing, the campaign must not continue.
Consent and proof of consent for telephone marketing
- Authority / court
- Bundesnetzagentur (BNetzA)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- UWG – Verbot unerlaubter Telefonwerbung gegenüber Verbraucherinnen und Verbrauchern; § 7a UWG (Dokumentation und Aufbewahrung von Einwilligungen)
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Other
- BNetzA: Bußgelder Unerlaubte Telefonwerbung (laufende Liste mit Einzelmeldungen) Enforcement database of an authority
Checked against the official source on 2 Oct 2026 · Direct link
Report an error
23 Jul 2026 Evolution Malta Holding LimitedEvolution: £4.75m because its own games ran on unlicensed sites accessible in GB €5.57m
The games supplier will pay £4,750,000 in lieu of a financial penalty under a regulatory settlement, contribute to the Commission's investigation costs and accept an additional licence condition requiring an independent audit within twelve months. Five genuine Evolution games were accessible at scale to consumers in Great Britain via six websites of two operators not licensed by the Gambling Commission; between April 2024 and January 2025, its risk assessment and its anti-money laundering policies and controls did not adequately address risks arising from business partners in particular (LC 12.1.1, LC 12.1.2). After the Commission notified it in December 2024, Evolution immediately and permanently blocked the games for users in Great Britain.
B2B suppliers must monitor where their products are actually offered and stop their use by unlicensed operators.
Control over the distribution of own products to unlicensed operators
- Authority / court
- Gambling Commission
- Area of law
- Money laundering and terrorist financing · Internal controls
- Legal basis
- s. 116 Gambling Act 2005; LC 12.1.1 Abs. 1–3 und LC 12.1.2 der Licence Conditions and Codes of Practice (LCCP); Reg. 18, 19(1)(a) und 28(1) Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Mitigating circumstances
- A swift action plan with progress updates, full cooperation with the investigation and early acceptance of the failings.
- Published
- 23 Jul 2026
Original amount 4,750,000 GBP, converted at the ECB reference rate of 23 Jul 2026.
- Gambling Commission, Register of regulatory actions: Evolution Malta Holding Limited (Settlement 23.07.2026) Enforcement database of an authority
- Gambling Commission: Evolution Malta Holding Limited Public Statement Decision of an authority
- Gambling Commission: Evolution Malta Holding Limited to pay £4.75m (23.07.2026) Press release of an authority
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
23 Jul 2026 Nova Scotia Gaming CorporationFINTRAC: 231,826 CAD against Nova Scotia Gaming over missing suspicious transaction reports €144,584
The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) imposed 231,826 CAD on the Halifax gaming corporation (casino sector) because it failed to file suspicious transaction reports on attempted transactions despite reasonable grounds for suspicion, did not keep its compliance policies up to date and approved by a senior officer, and did not assess the money laundering risk as required. The penalty was paid in full.
Even aborted or merely attempted transactions can be reportable – cashier staff must know this.
Suspicious transaction reports even for merely attempted transactions
- Authority / court
- Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
- Area of law
- Money laundering and terrorist financing · Suspicious activity reports
- Legal basis
- Proceeds of Crime (Money Laundering) and Terrorist Financing Act, Part 1, und zugehörige Verordnungen
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Published
- 3 Sep 2026
Original amount 231,826 CAD, converted at the ECB reference rate of 23 Jul 2026.
- FINTRAC imposes an administrative monetary penalty on Nova Scotia Gaming Corporation Press release of an authority
- Public notice of administrative monetary penalties Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Jul 2026 BGH: online cancellation page must not offer a "pause contract" alternative Order
On the confirmation page of its online cancellation process, a gym operator displayed a highlighted notice with the button "Pause contract via self-service"; in addition, the confirmation button was labelled "Find contract", which the defendant had already acknowledged. In an action brought by the Federation of German Consumer Organisations (Verbraucherzentrale Bundesverband), the BGH ruled that the confirmation page may only contain the information required for the cancellation and the confirmation button, set aside the judgment of the Higher Regional Court of Düsseldorf (OLG Düsseldorf) dismissing the action to that extent and ordered the operator to cease and desist.
Keep retention or pause offers off the confirmation page of the online cancellation process.
Design of the cancellation process (cancellation button, retention offers)
- Authority / court
- Bundesgerichtshof (I. Zivilsenat), Az. I ZR 200/25
- Area of law
- Consumer protection and online retail · Information duties in online retail
- Legal basis
- § 312k Abs. 1 Satz 1, Abs. 2 BGB (Kündigungsbutton)
- Action
- Order
- Status of proceedings
- final
- Sector
- Other
- Published
- 16 Jul 2026
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
14 Jul 2026 Goldwin LtdMalta: 80,907 EUR against online casino Goldwin for missing customer risk assessment €80,907
The 2022 examination revealed that for more than two years the remote gaming operator had had no proper customer risk assessment for almost its entire player base; the assessments submitted had been prepared specifically for the examination. In addition, once players reached the deposit threshold of 2,000 EUR, it did not check in good time whether they were politically exposed persons. The Financial Intelligence Analysis Unit (FIAU) imposed 80,907 EUR; the fine was still open to appeal at the time of publication.
Supervisory authorities see through risk assessments prepared only for the examination – they must be applied in day-to-day business.
Risk-based customer assessment in gambling
- Authority / court
- Financial Intelligence Analysis Unit (FIAU)
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- Reg. 5(5)(a)(ii), 11(5), 21 PMLFTR; FIAU Implementing Procedures Part I und II (Remote Gaming)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 16 Jul 2026
- Administrative Measure Publication Notice – Goldwin Ltd Decision of an authority
- Publication of AML/CFT Administrative Penalties and Measures – FIAU Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
8 Jul 2026 Hutchison Technologies LtdTribunal: Hutchison Technologies dismissed employee after she raised holiday pay concerns Other
An employee of the Dundee-based electrical services provider for gyms (around 140 employees) had pointed out that the technicians' holiday pay was being calculated incorrectly; a few days later her home working arrangement was withdrawn, and on 11 June 2025 she was dismissed. The Employment Tribunal upheld her claims for automatically unfair dismissal (s. 103A) and detriment (s. 47B); compensation will be decided separately.
Employers who worsen working conditions shortly after a disclosure must be able to prove a documented reason unrelated to the disclosure.
How managers handle internal reports
- Authority / court
- Employment Tribunal
- Area of law
- Whistleblower protection · Retaliation against whistleblowers
- Legal basis
- Employment Rights Act 1996, ss. 43B, 47B, 103A
- Action
- Other
- Status of proceedings
- unknown
- Sector
- Other
- Employees
- 50 to 249
- Published
- 23 Jul 2026
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link
Report an error
30 Jun 2026 Petfre (Gibraltar) LimitedPetfre (Gibraltar): £900,000 over inadequate customer interaction in online gambling €1.04m
Following a compliance assessment in May and June 2024, the operator of betfred.com will pay £900,000 in lieu of a financial penalty to the Consolidated Fund (the UK Government's general account) under a settlement and contribute to the Commission's investigation costs. The Commission found breaches of the remote customer interaction requirements under SRCP 3.4.3: automated processes to identify signs of harm and to act immediately on strong indicators were lacking, so that one customer lost a further £17,900 within 24 hours of a review without being contacted again. The Commission had already announced sanctions against Petfre in 2022 and 2025.
After a sanction, customer interaction must be improved lastingly and demonstrably, or the next case follows.
Lasting improvement of customer interaction after earlier sanctions
- Authority / court
- Gambling Commission
- Area of law
- Consumer protection and online retail
- Legal basis
- s. 116 Gambling Act 2005; SRCP 3.4.3 Abs. 1, 2, 4, 7 und 11 der Licence Conditions and Codes of Practice (LCCP)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Repeat case
- yes
- Mitigating circumstances
- A swift action plan with progress updates and full cooperation with the investigation.
- Published
- 30 Jun 2026
Original amount 900,000 GBP, converted at the ECB reference rate of 30 Jun 2026.
- Gambling Commission, Register of regulatory actions: Petfre (Gibraltar) Limited (Settlement 30.06.2026) Enforcement database of an authority
- Gambling Commission: Petfre (Gibraltar) Limited Public Statement Decision of an authority
- Gambling Commission: Petfre (Gibraltar) Limited to pay £900,000 for regulatory failures (30.06.2026) Press release of an authority
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
26 Jun 2026 One Way Environmental Services LLC; Coastal Environmental Solutions Inc.; BWC Terminals LLCSulphuric acid spill in Channelview: USD 3.52m in OSHA penalties against three employers €3.09m
After around one million gallons of sulphuric acid were released at the BWC Terminals site in Channelview (Texas) in December 2025, OSHA proposed penalties totalling 3,520,703 USD against three employers. Staffing contractor One Way Environmental Services accounts for 3,045,452 USD for 18 violations classed as wilful and egregious and five as serious, because it sent workers to the clean-up without adequate training, respirator fit tests and safety measures; the hazardous waste contractor Coastal Environmental Solutions faces 392,501 USD and BWC Terminals, which had mixed fresh and spent acid despite warnings, 82,750 USD. The authority allegedly made the findings set out here; this account is not based on a final judgment. The decision is not final.
Companies that outsource clean-up after a chemical incident must check their contractors' training, respiratory protection and emergency planning.
Health and safety during clean-up after chemical incidents
Missing or inadequate training played a role in the decision.
- Authority / court
- U.S. Department of Labor – Occupational Safety and Health Administration (OSHA)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Occupational Safety and Health Act (u. a. Vorschriften zu Gefahrstoffeinsätzen und Notfallmaßnahmen sowie Atemschutz)
- Action
- Fine
- Status of proceedings
- not yet final
- Sector
- Other
- Published
- 26 Jun 2026
Original amount 3,520,703 USD, converted at the ECB reference rate of 26 Jun 2026.
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
24 Jun 2026 Ö Aktiengesellschaft (in der Entscheidung abgekürzt; Adressverlag und Direktwerbeunternehmen)VwGH sets data protection fine for party affinities definitively at 13 million EUR €13m
The company had stored statistically calculated ‘party affinities’ for around 2.2 million people and in some cases sold them to advertising clients – special categories of personal data without consent; in addition, parcel frequency data was further processed for incompatible purposes. The Austrian Data Protection Authority (Datenschutzbehörde, DSB) had imposed 18 million EUR in 2019 and the Federal Administrative Court (Bundesverwaltungsgericht, BVwG) 16 million EUR in 2024; Austria's Supreme Administrative Court (Verwaltungsgerichtshof, VwGH) has now set the fine with final effect at 13 million EUR (plus 100,000 EUR in procedural costs).
Calculated characteristics such as political leanings are themselves special categories – companies that derive them for advertising need explicit consent.
- Authority / court
- Verwaltungsgerichtshof (Ausgangsbescheid: Datenschutzbehörde)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- DSGVO Art. 5 Abs. 1 lit. a und b, Art. 6 Abs. 4, Art. 9 Abs. 1 (VwGH Ro 2025/04/0007)
- Action
- Fine
- Status of proceedings
- reduced
- Sector
- Other
- Culpability
- negligent
- Mitigating circumstances
- Comprehensive cooperation, deletion of the party affinities, settlements with data subjects, long duration of proceedings (5 years, 10 months).
- Published
- 16 Jul 2026
- VwGH 24.06.2026, Ro 2025/04/0007 Court decision
- VwGH bestätigt unrechtmäßige Verarbeitung von Partei-Affinitäten und setzt Geldbuße mit EUR 13 Mio. fest Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Jun 2026 Needle Craft Ltd.; Casual Wear Apparel LLCCBP import stop for textiles from Jordan's Needle Craft and Casual Wear Apparel Order
U.S. Customs and Border Protection (CBP) issued a Withhold Release Order: clothing from Needle Craft Ltd.; Casual Wear Apparel LLC (Jordan) is being detained at all US ports of entry because there are indications of forced labour (ILO indicators including physical and sexual violence, retention of identity documents, restriction of movement and withholding of wages). These are two parallel orders against both manufacturers.
Fashion brands should supplement social audits at garment makers with confidential worker interviews, because violence and confiscation of identity documents remain invisible in paper-based checks.
- Authority / court
- U.S. Customs and Border Protection
- Area of law
- Supply chain and human rights · Forced and child labour
- Legal basis
- 19 U.S.C. § 1307 (Tariff Act of 1930, Section 307)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 23 Jun 2026
- CBP issues 2 Withhold Release Orders on Needle Craft and Casual Wear Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
15 Jun 2026 SSG SELECT SOLUTIONS S.R.L.Stranger in Kaufland CCTV room – service provider SSG Select Solutions pays 2,000 EUR €1,948
An employee of the service provider acting as processor for Kaufland România let a third party into a store’s video surveillance room; that person filmed the images and distributed them on social media. Kaufland reported the incident. The Romanian data protection authority (ANSPDCP) imposed 10,200 lei (2,000 EUR) on the processor and ordered additional checks of the work instructions; the fine has been paid. Date = publication of the press release; according to the authority, the investigation was concluded in April 2026.
Anyone with access to surveillance rooms must know: video footage is confidential, and third parties have no access there.
Access to surveillance rooms; staff bound by instructions
- Authority / court
- Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- Area of law
- Data protection · Video surveillance
- Legal basis
- Art. 29, Art. 32 Abs. 1 lit. b, Abs. 2 und 4 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 15 Jun 2026
Original amount 10,200 RON, converted at the ECB reference rate of 15 Jun 2026.
- ANSPDCP – Comunicat de presă 15.06.2026 (SSG SELECT SOLUTIONS S.R.L.) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
9 Jun 2026 Philip Morris Italia S.r.l.AGCM fines Philip Morris Italia €7m over "senza fumo" (smoke-free) advertising €7m
Philip Morris Italia widely promoted heated tobacco devices, e-cigarettes and nicotine products for oral use with phrases such as "senza fumo" (smoke-free) and a "smoke-free future"; the AGCM considered this misleading because it suggested that the products were harmless or less harmful, although they can endanger health and safety. The authority imposed a fine of 7,000,000 EUR and prohibited continuation; the proceedings were triggered by a report from the Ministry of Health.
Health-related advertising claims must be complete and substantiated, and a slogan such as "smoke-free" must not imply that a product is harmless.
Health-related advertising claims for tobacco and nicotine products
- Authority / court
- Autorità Garante della Concorrenza e del Mercato (AGCM)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Art. 20, 21 Abs. 1 und 3, 22 Codice del consumo (D.lgs. 206/2005)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 10 Jun 2026
- AGCM, Provvedimento PS12940 (Adunanza 09.06.2026) Decision of an authority
- AGCM, Comunicato stampa 10.06.2026: PS12940 – Sanzione di 7 milioni a Philip Morris Italia S.r.l. Press release of an authority
Checked against the official source on 28 Sep 2026 · Direct link
Report an error
9 Jun 2026 Xponential Fitness, Inc. u. a. (Franchisegesellschaften der Marken AKT, BFT, Club Pilates, CycleBar, Pure Barre, Rumble, StretchLab, YogaSix)New York: Xponential Fitness pays 3.97 million USD over misleading franchise disclosures €3.43m
According to the Attorney General's office, the fitness franchisor stated three to six months until studio opening in the disclosure documents filed in New York, although it took more than 13 months on average and its own SEC reports showed longer periods. The Assurance of Discontinuance requires 3,971,250 USD: 3 million USD for 70 harmed franchisees (of which 300,000 USD is a civil penalty) and 971,250 USD in fee refunds to 25 franchisees who never opened. The authority allegedly made the findings set out here; this account is not based on a final judgment.
Statements in franchise disclosures must match the company's own capital market reports – discrepancies count as evidence of deception.
Realistic statements in franchise disclosure documents
- Authority / court
- Office of the New York State Attorney General (Investor Protection Bureau, Franchise Section)
- Area of law
- Consumer protection and online retail
- Legal basis
- New York Franchise Sales Act (General Business Law §§ 680 ff., insb. § 687); Executive Law § 63(12)
- Action
- Disgorgement of profits
- Status of proceedings
- final
- Sector
- Other
- Published
- 9 Jun 2026
Original amount 3,971,250 USD, converted at the ECB reference rate of 9 Jun 2026.
- NY Attorney General press release: More Than $3.9 Million from Xponential Fitness for Misleading Franchise Owners Press release of an authority
- Assurance of Discontinuance, Xponential Fitness, Inc. et al. (2026) Decision of an authority
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
8 Jun 2026 A. Tsokkos Hotels Public LimitedCyprus: 16,500 EUR against A. Tsokkos Hotels for late annual financial report €16,500
The listed hotel group did not publish its 2024 annual financial report on time; the Cyprus Securities and Exchange Commission (CySEC) imposed a total of 16,500 EUR. At the same meeting, eleven other issuers were fined between 1,500 and 17,000 EUR for the same reason; a fine of 13,500 EUR had already been imposed on the company under the same law in 2025.
Publication deadlines for financial reports are not negotiable – repeated delays lead to fines and, in extreme cases, to suspension of trading.
- Authority / court
- Cyprus Securities and Exchange Commission (CySEC)
- Area of law
- Capital markets and financial supervision · Disclosure and reporting obligations
- Legal basis
- Sec. 9(1), 37(2)(a) Transparency Requirements (Securities Admitted to Trading on a Regulated Market) Law 2007
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Repeat case
- yes
- Published
- 7 Aug 2026
- CySEC Board Decision – Fines under the Transparency Requirements Law (08.06.2026) Decision of an authority
- CySEC Board Decision – Fines under the Transparency Requirements Law (14.07.2025, Jahresbericht 2023) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
5 Jun 2026 CityFitness Group LimitedCityFitness: 1,120,000 NZD for a price rise disguised as a “transaction fee” €565,485
New Zealand's largest gym chain kept advertising a membership at 6.99 NZD a week on its website, Instagram and Google ads, although all new members had to pay a compulsory 3% surcharge that it presented as a “transaction fee” but which in fact served to raise revenue generally. After pleading guilty to eight representative charges (offending period 21 December 2023 to 30 April 2025), the company was sentenced on 5 June 2026 to a fine of 1,120,000 NZD. According to the Commerce Commission (ComCom, New Zealand's competition and consumer authority), the surcharge affected more than 125,000 members and generated around 1.6 million NZD in additional revenue.
Unavoidable surcharges belong in the advertised price and must not be passed off as a payment-related fee.
Transparent total prices and honestly labelled surcharges
- Authority / court
- Strafgericht, in der Quelle nicht benannt (Anklage: Commerce Commission)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Fair Trading Act 1986, ss 11, 40(1)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Culpability
- intentional
- Liability of senior managers
- According to the court, the labels “transaction fee” and “Payment Authority Fee” were approved at the highest level; the fee increase was decided by senior executives.
- Published
- 9 Jun 2026
Original amount 1,120,000 NZD, converted at the ECB reference rate of 5 Jun 2026.
- Commerce Commission: ComCom action sees CityFitness fined $1.12m for a misleading ‘transaction fee’ (09.06.2026) Press release of an authority
- Commerce Commission, Case register: CityFitness Group Limited (PRJ0048254) Official register or notice
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
3 Jun 2026 Sonus Public Relations LtdTribunal: PR agency Sonus must pay £71,052 after subjecting whistleblower to detriment €82,264
The PR agency, which did not appear, lost on all claims: detriment on grounds of whistleblowing (£20,000 for injury to feelings), wrongful termination without notice pay (£3,547.60) and constructive unfair dismissal (basic and compensatory award including a 25 % ACAS uplift). A total of £71,051.82 was awarded.
Employers who do not take part in the proceedings risk, in addition to whistleblower compensation, an uplift for failing to follow the ACAS Code of Practice.
How managers handle internal reports
- Authority / court
- Employment Tribunal
- Area of law
- Whistleblower protection · Retaliation against whistleblowers
- Legal basis
- Employment Rights Act 1996, s. 47B (Benachteiligung wegen geschützter Offenlegung); konstruktive unfaire Kündigung; wrongful dismissal
- Action
- Other
- Status of proceedings
- unknown
- Sector
- Other
- Employees
- Under 50
- Published
- 22 Jul 2026
Original amount 71,051.82 GBP, converted at the ECB reference rate of 3 Jun 2026.
Checked against the official source on 28 Sep 2026 · Version 4 · Direct link
Report an error
1 Jun 2026 FTI Consulting, Inc.OFAC: USD 1.05 million settlement with FTI Consulting over prohibited extension of credit to a Russian state-owned bank €901,597
Consulting firm FTI Consulting, Inc. of Washington, D.C. is paying USD 1,050,000 under a settlement with OFAC for apparent violations of the Russia financial sector sanctions. According to OFAC's findings, between April 2019 and May 2021 FTI indirectly extended prohibited debt on six occasions to a Russian state-owned bank subject to Directive 1 under Executive Order 13662: invoices remained unpaid beyond the permitted 14 days or were paid long afterwards while FTI continued to provide services. OFAC treated the apparent violations as non-egregious and not voluntarily self-disclosed; the base penalty was USD 525,000. The settlement amount is above the base penalty; OFAC cited in particular the anticipated impact on future compliance by similarly situated firms. Source: U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), enforcement release "FTI Consulting, Inc., a Global Business Advisory Firm, Settles with OFAC for $1,050,000 Related to Apparent Violations of Dealing in Prohibited Debt of Sanctioned Russian Bank", 1 June 2026, https://ofac.treasury.gov/media/935651/download?inline; summarised in our own words.
- Authority / court
- U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
- Area of law
- Sanctions and export control · Breaches of sanctions and embargoes
- Legal basis
- Ukraine-/Russia-Related Sanctions Regulations, 31 C.F.R. §§ 589.202, 589.213 i. V. m. Directive 1 zu E.O. 13662 (sechs mutmaßliche Verstöße); Vergleich nach den Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Published
- 1 Jun 2026
Original amount 1,050,000 USD, converted at the ECB reference rate of 1 Jun 2026.
- OFAC Enforcement Release: FTI Consulting, Inc. Settles with OFAC for $1,050,000 (01.06.2026) Decision of an authority
- OFAC – Civil Penalties and Enforcement Information (2026) Enforcement database of an authority
Checked against the official source on 28 Sep 2026 · Version 3 · Direct link
Report an error
29 May 2026 Atlantic Lottery Corporation Inc.FINTRAC: CAD 212,025 penalty on Atlantic Lottery Corporation Inc. for 3 violations of anti-money laundering obligations €131,906
According to FINTRAC, Atlantic Lottery Corporation Inc. is a reporting entity in the casino sector based in Moncton, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 212,025 on the company on 29 May 2026. According to FINTRAC's findings, made during a compliance examination, the company committed 3 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned suspicious transaction reporting, written compliance policies and procedures and assessing and documenting money laundering and terrorist financing risks. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Atlantic Lottery Corporation Inc.", published 9 July 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-07-09-1-eng; summarised in our own words; not an official version and not a reproduction of the original.
- Authority / court
- Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
- Area of law
- Money laundering and terrorist financing · Suspicious activity reports
- Legal basis
- PCMLTFA s. 7, 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Published
- 9 Jul 2026
Original amount 212,025 CAD, converted at the ECB reference rate of 29 May 2026.
- Administrative monetary penalty on Atlantic Lottery Corporation Inc. (09.07.2026) Decision of an authority
- FINTRAC – Public notice of administrative monetary penalties Enforcement database of an authority
Checked against the official source on 28 Sep 2026 · Version 3 · Direct link
Report an error
20 May 2026 Marketing-Unternehmen, UK (anonymisiert)ICO: £300,000 fine for a marketing firm over spam and fake bailiff texts €346,600
The ICO fined a UK marketing company £300,000 and issued an enforcement notice. The ICO found that the company had sent more than 5.5 million unsolicited marketing text messages, including messages styled as if they came from bailiffs. The 7726 spam reporting service received over 60,000 complaints. The ICO relied on regulations 22 and 23 of PECR (electronic marketing without consent and concealed sender identity).
- Authority / court
- Information Commissioner's Office (ICO)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Regulations 22 und 23 PECR; section 55A DPA 1998
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
Original amount 300,000 GBP, converted at the ECB reference rate of 20 May 2026.
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link
Report an error
24 Apr 2026 Anwaltskanzlei aus Hamilton (anonymisiert)Hamilton law firm: 60,000 NZD fine for anti-money laundering breaches €30,092
Between March 2022 and March 2025 a Hamilton law firm repeatedly breached the AML/CFT Act: it lacked a proper risk assessment, an implemented anti-money laundering programme and adequate records. It also failed to respond, or responded only in part, to information notices from the Department of Internal Affairs (DIA, the AML/CFT supervisor for law firms), thereby obstructing its investigators. After the firm pleaded guilty, the court imposed a fine of 60,000 NZD, taking the firm's size and financial capacity into account.
Even small law firms must actually implement their risk assessment, AML programme and record keeping and answer supervisory information requests in full.
Anti-money laundering duties in law firms and cooperation with the supervisor
- Authority / court
- Strafgericht, in der Quelle nicht benannt (Anklage: Department of Internal Affairs)
- Area of law
- Money laundering and terrorist financing · Internal controls
- Legal basis
- Anti-Money Laundering and Countering Financing of Terrorism Act 2009
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Culpability
- intentional
- Liability of senior managers
- According to the Department of Internal Affairs, the firm's partners, as lawyers, also had professional obligations to uphold the law.
- Published
- 24 Apr 2026
Original amount 60,000 NZD, converted at the ECB reference rate of 24 Apr 2026.
- Department of Internal Affairs: Law firm fined for anti-money laundering breaches (24.04.2026) Press release of an authority
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
23 Apr 2026 12066424 Canada Inc.Temporary staffing agency: CA$100,000 over unpaid wages €62,555
Following complaints, the labour inspectorate found, among other things, outstanding minimum wages at the temporary staffing agency in Leamington; an audit for 2022 showed that hundreds of employees were owed a total of CA$234,212 in regular wages, public holiday pay and vacation pay. The company did not comply with the 2023 orders to pay; in proceedings held in its absence, the court imposed CA$100,000 on the company (plus victim fine surcharge).
Companies that ignore regulatory orders to pay outstanding wages risk a substantial fine.
- Authority / court
- Provincial Offences Court Windsor (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)
- Area of law
- Health and safety and employment law · Minimum wage and undeclared work
- Legal basis
- Employment Standards Act, 2000 (Ontario), ss. 103(8), 106, 132, 136
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Liability of senior managers
- Measures against individuals are not reported here.
- Published
- 3 Jun 2026
Original amount 100,000 CAD, converted at the ECB reference rate of 23 Apr 2026.
- Ontario Newsroom, Court Bulletin zu 12066424 Canada Inc. (Entscheidung 2025) Press release of an authority
Checked against the official source on 28 Sep 2026 · Version 3 · Direct link
Report an error
23 Apr 2026 PricewaterhouseCoopers Hong KongPwC Hong Kong: HKD 1bn compensation for Evergrande shareholders under SFC agreement Other
Under an agreement with the Securities and Futures Commission (SFC, Hong Kong's securities regulator), PricewaterhouseCoopers Hong Kong has undertaken to set aside 1,000,000,000 HKD to compensate independent minority shareholders of China Evergrande Group; in return the regulator will take no further action, without any admission of liability. China Evergrande's audited revenue was allegedly overstated by 44.79% for 2019 and 69.03% for 2020, and PwC Hong Kong, as auditor, was allegedly concerned in the dissemination of false information, allegedly did not maintain its independence and allegedly acquiesced in management's manipulation of audit samples and site inspections.
Auditors who tolerate manipulation of their audit procedures face a considerable risk of having to compensate investors.
Independence and professional scepticism in auditing
- Authority / court
- Securities and Futures Commission (SFC)
- Area of law
- Capital markets and financial supervision · Market abuse and insider dealing
- Legal basis
- s. 277 SFO (Cap. 571) (Auffassung der SFC, von PwC HK nicht anerkannt)
- Action
- Other
- Status of proceedings
- final
- Sector
- Other
- Published
- 23 Apr 2026
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
23 Apr 2026 Yau Yat Chuen Garden City Club LimitedRansomware via remote maintenance access: enforcement notice against private club Order
In a ransomware attack on the membership management system of Yau Yat Chuen Garden City Club Limited, a private, non-profit recreational club, reported on 31 October 2025, data of 9,045 current and former members and supplementary card holders were affected, including identity card or passport numbers. The attacker exploited a known vulnerability in outdated remote access software of the external service provider and reached the server, which had been left logged in, without further authentication; antivirus software and firewall were outdated, and personal data had been kept longer than necessary. In its investigation report published on 23 April 2026 the PCPD (Privacy Commissioner for Personal Data, Hong Kong's data protection authority) found breaches of DPP 4(1) and DPP 2(2) and served an enforcement notice.
Service providers' remote maintenance access belongs in an organisation's own security concept: current software, additional authentication and no servers left permanently logged in.
Service providers' remote access, patch management and retention periods
- Authority / court
- Privacy Commissioner for Personal Data (PCPD), Hongkong
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Personal Data (Privacy) Ordinance, Data Protection Principles 4(1) und 2(2); Enforcement Notice
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 23 Apr 2026
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
15 Apr 2026 Automobile Association Developments Limited (AA Driving School, BSM Driving School)AA and BSM driving schools: 4.2 million GBP for drip pricing – CMA's first consumer fine €4.83m
For online bookings, the driving schools only showed a mandatory booking fee at checkout instead of in the initial price. Following an admission and settlement, the CMA imposed a penalty of 4.2 million GBP (40 % discount on 7 million GBP) and ordered refunds of more than 760,000 GBP to more than 80,000 customers. According to the annual accounts filed with the UK companies register for financial year 2026, the company had around 6,776 employees.
Mandatory fees must be included from the very first price – in the United Kingdom, the CMA has been able to impose fines for this itself since 2025.
Price disclosures and mandatory fees at online checkout
- Authority / court
- Competition and Markets Authority (CMA)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Digital Markets, Competition and Consumers Act 2024
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Employees
- 1,000 to 9,999
- Mitigating circumstances
- Admission and early settlement (40 % discount).
- Published
- 15 Apr 2026
Original amount 4,200,000 GBP, converted at the ECB reference rate of 15 Apr 2026.
- CMA orders the AA and BSM driving schools to refund learner drivers over drip pricing Press release of an authority
- Companies House: Registereintrag Automobile Association Developments Limited (01878835) Official register or notice
Checked against the official source on 28 Sep 2026 · Version 3 · Direct link
Report an error
9 Apr 2026 Arbeitgeber (in der Mitteilung nicht namentlich genannt)Slovenia: 71,474 EUR for covert monitoring of employees using spyware €71,474
An employer installed the software Spyrix Employee Monitoring on the work computers of individual employees, which for months recorded screen content, audio and even private e-mails and conversations without informing the employees. The supervisory authority, the Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia, IP), imposed 71,474 EUR on the company.
Covert employee monitoring by software is practically never permissible – IT and managers must know this before tools are installed.
Permissible monitoring of employees and IT use
- Authority / court
- Informacijski pooblaščenec Republike Slovenije (IP)
- Area of law
- Data protection · Employee data
- Legal basis
- Art. 5 und Art. 6 Abs. 1 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Culpability
- intentional
- Liability of senior managers
- Measures against individuals are not reported here.
- Published
- 9 Apr 2026
- Delodajalcu, ki je prikrito nadzoroval vse aktivnosti zaposlenih na računalnikih, izrečena globa več kot 70.000 EUR Press release of an authority
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link
Report an error
24 Mar 2026 3R Technology UK Ltd3R Technology UK: penalty for exporting contaminated plastic waste despite prohibition €92,442
From 2022 to 2025, the company exported containers of supposedly clean plastic that was in fact contaminated with electronic waste such as cables and circuit boards; in some cases, the waste was hidden at the back of the container, and further containers were shipped despite prohibition notices from August 2024. The company pleaded guilty and was fined 80,000 GBP; in addition, it was ordered to pay 45,000 GBP in costs and a 2,000 GBP surcharge. According to the annual accounts filed with the UK companies register for financial year 2025, the company had around 19 employees.
Incorrectly declared waste exports are detected during port inspections; those who ignore regulatory prohibitions risk a criminal conviction.
Correct classification and declaration of waste for export
- Authority / court
- Preston Magistrates' Court (Anklage: Environment Agency)
- Area of law
- Environment and sustainability · Waste and hazardous substances
- Legal basis
- Vorschriften zur grenzüberschreitenden Abfallverbringung (Notifizierung und Zustimmung); Verstoß gegen Untersagungsverfügungen
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Employees
- Under 50
- Culpability
- intentional
- Repeat case
- yes
- Mitigating circumstances
- Guilty plea.
- Published
- 2 Apr 2026
Original amount 80,000 GBP, converted at the ECB reference rate of 24 Mar 2026.
- Lancashire company and director fined for illegal exports Press release of an authority
- Companies House: Registereintrag 3R Technology UK Limited (11188539) Official register or notice
Checked against the official source on 28 Sep 2026 · Version 5 · Direct link
Report an error
24 Mar 2026 SIA "Fitsypro"Fitsypro fails to answer access request and DVI enquiries – 1,500 EUR €1,500
A person complained that Fitsypro had not responded to their request for access, rectification and erasure of November 2023. Three requests for information from the Datu valsts inspekcija (Latvian Data State Inspectorate, DVI) between 2024 and 2026 went unanswered, and nobody attended the hearing. The DVI imposed 1,500 EUR and requested the information by 21 April 2026.
Official mailboxes (eAdrese) and data protection e-mail addresses must be monitored – silence towards the supervisory authority costs money.
Handling data subject requests and correspondence from authorities
- Authority / court
- Datu valsts inspekcija (DVI)
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- Art. 58 Abs. 1 lit. e, Art. 83 Abs. 5 lit. e DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Culpability
- intentional
- DVI Lēmums Par soda piemērošanu (SIA „Fitsypro“), 24.03.2026 Decision of an authority
- Datu valsts inspekcija – Lēmumi (Liste der veröffentlichten Entscheidungen) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Mar 2026 Stanleybet Malta LimitedMalta: 225,730 EUR against betting operator Stanleybet over lack of customer checks in betting shops €225,730
Malta's Financial Intelligence Analysis Unit (FIAU) imposed 225,730 EUR, a penalty payment of 2,000 EUR per day and a follow-up directive on the licensed gambling operator, which works through a network of independently operated betting shops in an EU member state. The company was unable to link customers' cumulative deposits across different shops and only checked customers from a single deposit of 2,000 EUR upwards, so the threshold could be circumvented. The company has appealed.
Thresholds must be aggregated per customer across all channels and branches – otherwise the system invites structuring.
Recognising structured deposits below the checking threshold
- Authority / court
- Financial Intelligence Analysis Unit (FIAU)
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- Regulation 21 PMLFTR; Verstöße gegen Regulations 5(5)(a)(ii), 7, 9(1) PMLFTR und FIAU Implementing Procedures
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Other
- Published
- 16 Apr 2026
- Administrative Measure Publication Notice – Stanleybet Malta Limited Decision of an authority
- Administrative Measures – FIAU Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
19 Mar 2026 Busy Bees Nurseries LimitedBusy Bees: £485,374 in minimum wage arrears owed to 9,056 nursery staff €561,854
The UK Department for Business and Trade publicly named the nursery operator Busy Bees Nurseries Limited in round 23 of the National Minimum Wage Naming Scheme. According to investigations by HM Revenue & Customs (HMRC), the company had paid a total of 9,056 workers less than the statutory minimum wage between April 2017 and October 2022 and had to repay £485,374.05 – on average around £54 per person. According to the ministry, the 389 employers named in this round also received penalties totalling around £12.6 million; the amount per company is not published.
Where many employees earn close to the minimum wage, regularly checking payroll against the applicable minimum rates is a must – small shortfalls per person add up to large arrears and public naming.
Minimum wage compliance in payroll
- Authority / court
- Department for Business and Trade (DBT) und HM Revenue & Customs (HMRC), National Minimum Wage Naming Scheme
- Area of law
- Health and safety and employment law · Minimum wage and undeclared work
- Legal basis
- Britisches Mindestlohnrecht (National Minimum Wage / National Living Wage); National Minimum Wage Naming Scheme
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Other
- Employees
- 1,000 to 9,999
- Published
- 19 Mar 2026
Original amount 485,374.05 GBP, converted at the ECB reference rate of 19 Mar 2026.
- Hundreds of employers handed penalties for illegally underpaying workers (DBT/HMRC/Fair Work Agency, 19 March 2026) Press release of an authority
- National Minimum Wage Naming Scheme: Round 23 – Full list of employers and arrears (DBT) Official register or notice
- Busy Bees Nurseries Limited (03454787) – Full accounts made up to 31 December 2025, Note 5 Employees (Companies House) Official register or notice
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
17 Mar 2026 Syndicat National des Moniteurs du Ski Français (SNMSF)Ski instructors’ union SNMSF: EUR 3.4 million for exclusivity duty of ESF instructors €3.4m
From 12 May 2006 to 4 February 2025, the model agreement of France’s largest ski instructors’ union prohibited instructors of the Écoles du Ski Français from teaching for competing ski schools or their own clients and threatened exclusion for breaches; the Autorité de la concurrence (French Competition Authority) regarded this as a restriction of competition by object on the market for ski tuition. It imposed EUR 3.4 million, for the first time in an ordinary procedure calculated on the basis of the members’ turnover, and ordered the union to amend the rules, publish the decision and, if it cannot pay, call on its members for contributions.
Professional associations are also liable under competition law for statutes and model rules that forbid their members from working for competitors.
Anti-competitive rules in professional associations
- Authority / court
- Autorité de la concurrence
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Art. 101 Abs. 1 AEUV; Art. L. 420-1 Code de commerce; Bemessung nach Art. L. 464-2 Code de commerce (Umsetzung der ECN+-Richtlinie)
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Other
- Published
- 17 Mar 2026
- Autorité de la concurrence, Décision 26-D-03 du 17 mars 2026 (Entscheidungsseite) Decision of an authority
- Autorité de la concurrence, Décision 26-D-03 (Volltext, PDF) Decision of an authority
- Autorité de la concurrence, Communiqué de presse zu 26-D-03 Press release of an authority
Checked against the official source on 2 Oct 2026 · Direct link
Report an error
12 Mar 2026 Associação Portuguesa das Empresas do Setor Privado de Emprego e de Recursos Humanos (APESPE)Portugal: 4.5 million EUR against temporary work association APESPE for no-poach rule €4.52m
From 1987 to March 2025, the association of temporary work agencies (around 40 members) obliged its members in its code of ethics not to poach each other’s temporary workers. The Autoridade da Concorrência (Portuguese Competition Authority, AdC) regarded this as an anticompetitive decision by an association in the labour market and imposed 4,519,000 EUR, calculated on the basis of the members’ turnover; the decision can be appealed (date = press release).
An association’s code of ethics can also be a cartel – no-poach agreements between competitors are off limits.
No-poach agreements in association rules
- Authority / court
- Autoridade da Concorrência (AdC)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Lei da Concorrência (Lei n.º 19/2012), Art. 9.º
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 12 Mar 2026
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
12 Mar 2026 Direktmarketing-Unternehmen, UK (anonymisiert)ICO: £130,000 fine for a direct marketing firm over calls to TPS numbers €150,737
In March 2026 the ICO fined a small UK direct marketing company £130,000 and also served an enforcement notice. According to the ICO, over almost eleven months in 2024 the company had staff make more than 230,000 marketing calls to lines that had been on the UK's opt-out register for sales calls (Telephone Preference Service, TPS) for over 28 days, prompting 12 complaints. The ICO treated this as a breach of regulation 21 of PECR.
- Authority / court
- Information Commissioner's Office (ICO)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Regulations 21 und 24 PECR; section 55A DPA 1998
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
Original amount 130,000 GBP, converted at the ECB reference rate of 12 Mar 2026.
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link
Report an error
10 Mar 2026 Vier Unternehmen eines Bodenaufbereitungskonzerns aus Barneveld (anonymisiert)OM: €1.125m against four soil firms from Barneveld over environmental fraud €1.13m
The Openbaar Ministerie (OM, Dutch Public Prosecution Service) imposed penalty orders totalling 1,125,000 EUR on four companies from Barneveld that belonged to the same group at the time and are not named in the releases, consisting of 660,000 EUR in fines and 465,000 EUR in confiscation of unlawfully obtained gains. According to the OM, between 2013 and 2016 the firms accepted excessively contaminated sand, cleaned it inadequately or incorrectly and deliberately mixed it with cleaner sand for reuse, in breach of permit conditions and the Wet milieubeheer (Environmental Management Act) and involving forgery. The companies initially lodged an objection (verzet) but withdrew it, so the penalty orders are final (release of 2 July 2026).
In certified recycling chains no stage may bypass acceptance or testing criteria; mixing to conceal contamination turns a permit breach into environmental fraud.
Integrity in certified recycling chains for soil and waste
- Authority / court
- Openbaar Ministerie (OM), Functioneel Parket
- Area of law
- Environment and sustainability · Waste and hazardous substances
- Legal basis
- Vorschriften der Umgebungsgenehmigungen (omgevingsvergunningen); Wet milieubeheer; valsheid in geschrift; Strafbefehle des OM
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Culpability
- intentional
- Mitigating circumstances
- The companies have adapted or ceased their activities, and measures have been taken within the group.
- Published
- 10 Mar 2026
- OM: Verzet tegen boetes van 1.125.000 euro voor milieufraude met verontreinigde zandgrond Press release of an authority
- OM: Boetes van in totaal 1.125.000 euro voor milieufraude met verontreinigde grond na intrekken verzet Press release of an authority
Checked against the official source on 2 Oct 2026 · Direct link
Report an error
10 Mar 2026 World Anti-Doping Agency (WADA)WADA: compliance agreement with Canada's Privacy Commissioner on athletes' data Other
The Montreal-based World Anti-Doping Agency (WADA), a foundation under Swiss private law, entered into a compliance agreement under PIPEDA with the Privacy Commissioner of Canada, under which an investigation opened in November 2024 following a complaint is held in abeyance and will be discontinued once the agreement is fulfilled. WADA must ensure that anti-doping organisations use athletes' personal information in the ADAMS system only for anti-doping purposes from 1 January 2027, amend the World Anti-Doping Code and the ADAMS agreements accordingly, document a control mechanism and report quarterly. WADA disputes any contravention and the Commissioner's jurisdiction; if it fails to comply, the Commissioner may apply to the Federal Court for an order.
Operators of data platforms used by partners must enforce, contractually and technically, that partners use the data only for the intended purpose.
Purpose limitation on shared data platforms
- Authority / court
- Office of the Privacy Commissioner of Canada (OPC)
- Area of law
- Data protection
- Legal basis
- Personal Information Protection and Electronic Documents Act (PIPEDA), Sections 17.1 und 17.2 (Compliance Agreement)
- Action
- Other
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 17 Mar 2026
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
2 Mar 2026 Northern Isga FoundationFINTRAC: CAD 91,162.50 penalty on Northern Isga Foundation for 4 violations of anti-money laundering obligations €57,009
According to FINTRAC, Northern Isga Foundation is a non-profit charitable organisation based in Glenevis, Alberta, that receives a portion of a casino's revenues and is therefore a reporting entity. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 91,162.50 on the foundation on 2 March 2026. According to FINTRAC's findings, made during a compliance examination, the foundation committed 4 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned written compliance policies and procedures, assessing and documenting money laundering and terrorist financing risks, the compliance training programme and the prescribed review of the compliance programme. According to FINTRAC, the foundation has appealed the decision to the Federal Court. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Northern Isga Foundation", published 26 March 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-03-26-eng; summarised in our own words; not an official version and not a reproduction of the original.
- Authority / court
- Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
- Area of law
- Money laundering and terrorist financing · Internal controls
- Legal basis
- PCMLTFA s. 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c), 156(1)(d), 156(1)(e), 156(1)(f); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Other
- Published
- 26 Mar 2026
Original amount 91,162.5 CAD, converted at the ECB reference rate of 2 Mar 2026.
- Administrative monetary penalty on Northern Isga Foundation (26.03.2026) Decision of an authority
- FINTRAC – Public notice of administrative monetary penalties Enforcement database of an authority
Checked against the official source on 28 Sep 2026 · Version 3 · Direct link
Report an error
2 Mar 2026 Nordic Cleaning ApSNordic Cleaning: fine for leaving access request unanswered despite an order €8,031
Despite repeated follow-ups by the trade union, the cleaning company did not respond to a union member’s access request and also failed to comply with the order of the Danish Data Protection Agency (Datatilsynet) to decide on the request. Datatilsynet reported the company; the case was closed on 2 March 2026 with a fine notice of 60,000 DKK.
Access requests and orders from authorities need a fixed intake channel and a responsible person – ignoring them leads straight to a criminal complaint.
Handling access requests (Art. 15 GDPR)
- Authority / court
- Anklagemyndigheden (Bødeforelæg) auf Anzeige der Datatilsynet
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- DSGVO Art. 15; Nichtbefolgung einer Anordnung der Datatilsynet; databeskyttelsesloven
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
Original amount 60,000 DKK, converted at the ECB reference rate of 2 Mar 2026.
- Datatilsynet – Klein2 ApS og Nordic Cleaning ApS indstilles til bøde (Opdatering: afgjort 2. marts 2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
12 Feb 2026 IMG Academy, LLCOFAC: USD 1.72 million settlement with IMG Academy over school contracts with two sanctioned individuals €1.45m
School and sports academy IMG Academy, LLC of Bradenton, Florida, is paying USD 1,720,000 under a settlement with OFAC for apparent violations of the counternarcotics sanctions. According to OFAC's findings, between 2019 and 2025 IMG Academy entered into tuition agreements for the children of two individuals on the SDN List because of their ties to a sanctioned Mexican drug cartel and processed the related payments; 89 dealings were involved in total. OFAC treated the apparent violations as non-egregious and not voluntarily self-disclosed because an investigation was already under way when the academy reported them; the settlement amount equals the base penalty. Source: U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), enforcement release "IMG Academy, LLC Settles with OFAC for $1.7 Million Related to Apparent Violations of Counternarcotics Sanctions", 12 February 2026, https://ofac.treasury.gov/media/935006/download?inline; summarised in our own words.
- Authority / court
- U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
- Area of law
- Sanctions and export control · Breaches of sanctions and embargoes
- Legal basis
- Foreign Narcotics Kingpin Sanctions Regulations, 31 C.F.R. § 598.202 (89 mutmaßliche Verstöße); Vergleich nach den Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Published
- 12 Feb 2026
Original amount 1,720,000 USD, converted at the ECB reference rate of 12 Feb 2026.
- OFAC Enforcement Release: IMG Academy, LLC Settles with OFAC for $1.7 Million (12.02.2026) Decision of an authority
- OFAC – Civil Penalties and Enforcement Information (2026) Enforcement database of an authority
Checked against the official source on 28 Sep 2026 · Version 3 · Direct link
Report an error
3 Feb 2026 TMAC LtdICO: £100,000 fine for TMAC over marketing calls to TPS numbers €115,969
The ICO fined TMAC Ltd £100,000 and issued an enforcement notice. The ICO found that between 8 February and 24 September 2024 the company made 260,332 unsolicited marketing calls to numbers registered with the Telephone Preference Service (TPS). Recipients were also not given the caller details required by regulation 24 of PECR. The legal basis is regulations 21 and 24 of PECR.
- Authority / court
- Information Commissioner's Office (ICO)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Regulations 21(1)(b) und 24 PECR; section 55A DPA 1998
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
Original amount 100,000 GBP, converted at the ECB reference rate of 3 Feb 2026.
- ICO Enforcement: TMAC Ltd (MPN). Enthält Informationen des Information Commissioner's Office, lizenziert unter der Open Government Licence v3.0. Enforcement database of an authority
- Monetary Penalty Notice: TMAC Ltd (3 February 2026) Decision of an authority
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link
Report an error
29 Jan 2026 Associação de Guias de Informação Turística dos Açores (AGITA)Portugal: 8,200 EUR against Azores tour guide association for minimum price list €8,200
Since 2020, the only association of tour guides in the Azores (57 active members, around 43% of active guides) had recommended a fee table to its members by e-mail as minimum prices. Following a complaint, the Autoridade da Concorrência (Portuguese Competition Authority, AdC) imposed 8,200 EUR, taking the economic situation into account (date = press release).
Even small professional associations must not circulate fee tables as minimum prices – an e-mail is sufficient evidence.
No price recommendations by professional associations
- Authority / court
- Autoridade da Concorrência (AdC)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Lei da Concorrência (Lei n.º 19/2012), Art. 9.º; Art. 101 AEUV
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 29 Jan 2026
- AdC sanciona Associação de Guias de Informação Turística dos Açores por fixação de preços Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
19 Jan 2026 D*** GmbH (Digitalmarketing- und Recruitingagentur, anonymisiert)Recruitment agency: 25,500 EUR for secretly recorded calls with applicants €25,500
The agency conducted telephone pre-screening interviews with applicants on behalf of client companies, recorded them without valid consent, stored them indefinitely and presented itself as the client company in doing so. The Austrian Data Protection Authority (Datenschutzbehörde, DSB) imposed 25,500 EUR (plus 2,550 EUR in costs) for lack of a legal basis and transparency; the company has lodged an appeal against the amount of the fine with the Federal Administrative Court (Bundesverwaltungsgericht).
Call recordings in recruitment need a genuine legal basis and clear information about who is actually responsible.
Recording of telephone calls and applicant data
- Authority / court
- Datenschutzbehörde
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- DSGVO Art. 5 Abs. 1 lit. a, c und e, Art. 6 Abs. 1, Art. 12, 13
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Other
- Employees
- Under 50
- Mitigating circumstances
- No relevant previous violations, cooperation in the proceedings; adjustment of the starting amount to the company's small size.
- Datenschutzbehörde, Straferkenntnis 2025-1.049.138 vom 19.01.2026 Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
31 Dec 2025 ONE WAY PRIVATE COMPANYGreece: 80,000 EUR against call centre One Way over marketing calls for gas supplier €80,000
Following numerous complaints about marketing calls for the gas supplier ZENITH, the Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority) found that the call centre engaged had insufficient security measures and called persons without valid consent. By Decision 44/2025, One Way received 40,000 EUR each as processor and as controller, together with an order to delete the data of persons without valid consent; ZENITH and two other service providers were also held liable (10,000, 10,000 and 5,000 EUR).
Anyone outsourcing telemarketing must regularly carry out sample checks on call centres – and call centres are themselves liable for calls made without consent.
Checking consent before telemarketing
- Authority / court
- Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Art. 5, 6, 7, 29, 32 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Repeat case
- yes
- Απόφαση 44/2025 της Αρχής Προστασίας Δεδομένων Προσωπικού Χαρακτήρα Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
30 Dec 2025 Rickenbacher Data LLC (Datamasters)CPPA: $45,000 against data broker Datamasters over failure to register €38,275
Without registering as a data broker, the Texas reseller traded in the names and contact details of millions of people, sorted by illnesses such as Alzheimer's or addiction, by age, presumed ethnicity and political views. In addition to the fine, the California Privacy Protection Agency (CPPA) requires it to stop selling data on all Californians.
Companies that buy or sell address lists for advertising must check registration obligations – health-related lists are particularly risky.
- Authority / court
- California Privacy Protection Agency (CPPA)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- California Delete Act (Registrierungspflicht für Datenhändler)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Published
- 8 Jan 2026
Original amount 45,000 USD, converted at the ECB reference rate of 30 Dec 2025.
- CalPrivacy Data Broker Enforcement Strike Force: enforcement actions Press release of an authority
- CPPA Order of Decision: Rickenbacher Data LLC d/b/a Datamasters (ENF25-172-D-DA) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Dec 2025 Chiba Lotte Marines Co., Ltd. (株式会社千葉ロッテマリーンズ)Chiba Lotte Marines: commitment plan with partial refund after signed-ball promotion Other
In a promotional letter of January 2025 for its paid fan club 'TEAM26', the baseball club Chiba Lotte Marines gave the impression that every new member would definitely receive a ball hand-signed by a player at the booth by the stadium, although only some members received one. Instead of an order, a commitment plan was approved on 23 December 2025 – a board resolution, information for consumers, measures to prevent recurrence, allegedly a partial refund of annual fees and reports on implementation; no infringement was thereby established.
Free gifts must state clearly whether every customer or only some will receive them; a commitment plan with refunds can avoid a formal order.
Advertising free gifts and special offers correctly
- Authority / court
- Consumer Affairs Agency (消費者庁, CAA)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Art. 30, Art. 31 Abs. 1 und 3 (Zusagenverfahren), Verdacht eines Verstoßes gegen Art. 5 Nr. 2 Act against Unjustifiable Premiums and Misleading Representations (不当景品類及び不当表示防止法, Gesetz Nr. 134/1962)
- Action
- Other
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 23 Dec 2025
- 株式会社千葉ロッテマリーンズから申請があった確約計画の認定について (Eintrag, 23.12.2025) Press release of an authority
- News Release 23.12.2025 zur Genehmigung des Zusagenplans (PDF) Decision of an authority
Checked against the official source on 4 Oct 2026 · Direct link
Report an error
17 Dec 2025 PPB Entertainment Limited, PPB Counterparty Services Limited, Betfair Casino Limited u. a. (4 Lizenznehmer, Paddy Power Betfair)Paddy Power Betfair: £2m for identifying at-risk players too late €2.28m
Four online licensees trading as Paddy Power and Betfair (PPB Entertainment Limited, PPB Counterparty Services Limited, Betfair Casino Limited, TSE Malta LP) will pay a total of £2,000,000 in lieu of a financial penalty under a settlement and contribute to the Commission's investigation costs. An assessment in April and May 2024 found that their customer interaction systems identified signs of harm such as rapidly rising deposits or very long gambling sessions too late; one customer, for example, staked £86,000 within 16 days without a manual account review. The company had already been penalised in 2023 for marketing to vulnerable customers.
Automated triggers alone are not enough: where there are clear signs of harm, a person must intervene promptly.
Manual review where there are clear signs of harm rather than relying solely on automation
- Authority / court
- Gambling Commission
- Area of law
- Consumer protection and online retail
- Legal basis
- s. 116 Gambling Act 2005; SRCP 3.4.3 Abs. 1, 4, 7, 8 und 11 der Licence Conditions and Codes of Practice (LCCP)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Repeat case
- yes
- Mitigating circumstances
- Full cooperation, early acceptance of the failings and swift implementation of an action plan.
- Published
- 17 Dec 2025
Original amount 2,000,000 GBP, converted at the ECB reference rate of 17 Dec 2025.
- Gambling Commission: Paddy Power Betfair to pay £2m for regulatory failures (17.12.2025) Press release of an authority
- Gambling Commission: Paddy Power Betfair Public Statement (17.12.2025) Decision of an authority
- Gambling Commission: Register of regulatory actions (All regulatory actions) Enforcement database of an authority
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
17 Dec 2025 Juventus Football Club S.p.A.CONSOB fines Juventus €190,000 for market manipulation through its accounts €190,000
The CONSOB (Italian securities regulator) imposed a fine of EUR 190,000 on Juventus Football Club S.p.A. under Art. 187-quinquies of the Consolidated Law on Finance (TUF) because market manipulation within the meaning of Art. 187-ter TUF and Art. 15 MAR committed in its interest was attributed to it. According to the findings, the financial statements for 30 June 2020 and 30 June 2021 and the related announcements contained false or misleading information, including on gains from reciprocal player transfers, on deferred salary payments and on buy-back agreements. The decision is not final.
Dressing up financial figures through reciprocal deals or side agreements is market manipulation, for which the company itself is also liable.
Accounting for transfer deals and market manipulation
- Authority / court
- CONSOB (Commissione Nazionale per le Società e la Borsa)
- Area of law
- Capital markets and financial supervision · Market abuse and insider dealing
- Legal basis
- Art. 187-ter und 187-quinquies Abs. 1 lit. a D.Lgs. 58/1998 (TUF); Art. 15 Verordnung (EU) 596/2014 (MAR); Art. 6 Abs. 3 Gesetz 689/1981
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Other
- Culpability
- intentional
- Mitigating circumstances
- The CONSOB noted that the company had strengthened its internal control system after the breaches.
- Liability of senior managers
- Measures against individuals are not reported here.
- Published
- 2 Jan 2026
- CONSOB – Delibera n. 23807 del 17 dicembre 2025 Decision of an authority
- CONSOB – Provvedimenti sanzionatori (Liste) Enforcement database of an authority
Checked against the official source on 28 Sep 2026 · Direct link
Report an error
15 Dec 2025 Aktiengesellschaft Hallenstadion Zürich (AGH); Ticketcorner AGWEKO fines Hallenstadion Zurich and Ticketcorner over ticketing clause €122,929
At the end of 2008 Aktiengesellschaft Hallenstadion Zürich and Ticketcorner AG agreed that the arena would only be let to organisers selling at least 50% of tickets through Ticketcorner, which hindered other ticketing providers. After the Federal Supreme Court found a competition-law infringement in 2020 and remitted the case (2C_113/2017), the Wettbewerbskommission (WEKO, Swiss Competition Commission) classed both companies' conduct in 2009 to 2011 as abuse of a dominant position and, by decision of 15 December 2025, fined the Hallenstadion around CHF 50,000 and Ticketcorner around CHF 65,000. The arena operator had concluded an amicable settlement; the decision can be appealed to the Federal Administrative Court.
Exclusivity clauses between strong market players remain a competition risk, even if the proceedings only end years later.
Exclusivity clauses and tying by dominant undertakings
- Authority / court
- Wettbewerbskommission (WEKO)
- Area of law
- Competition law · Abuse of market power
- Legal basis
- Kartellgesetz (KG): Missbrauch einer marktbeherrschenden Stellung; Rückweisung BGer 2C_113/2017 vom 12.02.2020
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Mitigating circumstances
- The arena operator concluded an amicable settlement with WEKO.
- Published
- 22 Jan 2026
Original amount 115,000 CHF, converted at the ECB reference rate of 15 Dec 2025.
- WEKO-Medienmitteilung vom 22.01.2026: WEKO büsst Hallenstadion und Ticketcorner Press release of an authority
- Newsroom-Schnittstelle der Bundesverwaltung: Volltext der WEKO-Medienmitteilung vom 22.01.2026 (weko_13429) Press release of an authority
Checked against the official source on 2 Oct 2026 · Direct link
Report an error
11 Dec 2025 ZMLUK LimitedICO: £105,000 fine for ZMLUK over unsolicited marketing emails €119,986
The ICO fined ZMLUK Limited £105,000. The ICO found that the company had sent unsolicited marketing emails for energy-saving products; the notice gives the period as 1 January to 21 July 2023. The ICO found a serious breach of regulation 22 of PECR (electronic marketing without consent). Under the notice, timely payment reduces the amount by 20% to £84,000.
- Authority / court
- Information Commissioner's Office (ICO)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Regulation 22 PECR; section 55A DPA 1998
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
Original amount 105,000 GBP, converted at the ECB reference rate of 11 Dec 2025.
- ICO Enforcement: ZMLUK Limited. Enthält Informationen des Information Commissioner's Office, lizenziert unter der Open Government Licence v3.0. Enforcement database of an authority
- Monetary Penalty Notice: ZMLUK Ltd (11 December 2025) Decision of an authority
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link
Report an error
28 Nov 2025 Institute of Certified BookkeepersFCA: Public censure for Institute of Certified Bookkeepers over deficient AML supervision Reprimand or warning
The FCA, through its supervisor OPBAS, publicly censured the Institute of Certified Bookkeepers. The professional body is responsible for anti-money laundering supervision of more than 3,000 bookkeepers in the UK. The FCA found that between January 2022 and July 2023 it did not supervise its members effectively or on a risk basis; among other things it suspended inspections for more than nine months and did not keep adequate records of its supervision.
- Authority / court
- Financial Conduct Authority (FCA)
- Area of law
- Money laundering and terrorist financing
- Legal basis
- Regulation 16 Oversight of Professional Body AML and CTF Supervision Regulations 2017; Regulations 17 und 46 MLRs 2017
- Action
- Reprimand or warning
- Status of proceedings
- final
- Sector
- Other
- FCA Final Notice: Institute of Certified Bookkeepers (28 November 2025) Decision of an authority
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link
Report an error
24 Nov 2025 FWS Group LtdADGM: allegedly 51,000 USD fine for business centre operator FWS Group over missing customer checks €44,179
The FSRA (Financial Services Regulatory Authority, the financial regulator of Abu Dhabi Global Market, ADGM) fined the operator of a business centre, registered as a company service provider, allegedly 51,000 USD for anti-money laundering failings between December 2022 and December 2023. The firm had not carried out a business risk assessment and could not show a risk assessment for any of its 104 customers (tenants), nor had it verified any of them, because its outsourced compliance provider treated only the external operator of the centre as a customer; in addition, after the money laundering reporting officer (MLRO) had been absent for a long period, a replacement was only appointed after about ten months and the regulator was not promptly informed. Without the 20% discount for early settlement the fine would have been 63,750 USD.
A firm that outsources operations and compliance remains itself responsible for due diligence on all of its own customers.
Who the customer is: due diligence duties when operations and compliance are outsourced
- Authority / court
- Financial Services Regulatory Authority (ADGM)
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- Section 232 FSMR 2015; AML Rules 4.1.1(1), 4.1.1(2)(a) und (d), 6.1.1, 7.1.1(1)(a) und (b), 7.1.2(1)(a), 8.3.1(1)(d), 8.3.2, 8.4.1(c), 12.1.1(1), 15.6.1(d)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Repeat case
- no
- Mitigating circumstances
- No previous non-compliance, cooperation and a remediation programme; 20% discount for early settlement.
Original amount 51,000 USD, converted at the ECB reference rate of 24 Nov 2025.
- FSRA Final Notice an FWS Group Ltd vom 24. November 2025 Decision of an authority
- ADGM FSRA Regulatory Actions and Sanctions (Durchsetzungsliste) Enforcement database of an authority
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
20 Nov 2025 Caesars Entertainment, Inc. / Desert Palace, LLC (Caesars Palace)Nevada: 7.8 million USD against Caesars over gambling by an illegal bookmaker €6.77m
On 13 November 2025, the Nevada Gaming Control Board (NGCB) filed a disciplinary complaint for unsuitable methods of operation in connection with an illegal bookmaker and at the same time concluded a settlement of 7.8 million USD with conditions attached to the gaming licences. The conditions relate primarily to improving the AML programme and to additional training and awareness-raising for employees; the Nevada Gaming Commission (NGC) adopted the settlement as its order on 20 November 2025 (Case No. 25-03).
Casino staff must recognise high-risk players and unexplained sources of funds – revenue interests must not override AML obligations.
Checking the source of gambling funds, recognising high-risk customers
Missing or inadequate training played a role in the decision.
- Authority / court
- Nevada Gaming Commission (NGC) auf Beschwerde des Nevada Gaming Control Board (NGCB)
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- Glücksspielrecht Nevada (unsuitable methods of operation)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Employees
- 10,000 or more
- Mitigating circumstances
- Numerous remedial measures already implemented
- Published
- 13 Nov 2025
Original amount 7,800,000 USD, converted at the ECB reference rate of 20 Nov 2025.
- Nevada Gaming Control Board and Caesars Entertainment, Inc. Enter into Proposed Stipulation for Settlement Regarding Disciplinary Complaint Press release of an authority
- Nevada Gaming Commission – Disposition, November 2025 Agenda (20.11.2025) Decision of an authority
Checked against the official source on 27 Sep 2026 · Version 2 · Direct link
Report an error
18 Nov 2025 Callcenter mit Tätigkeitsschwerpunkt im Energiesektor (anonymisiert)BNetzA: €104,400 fine on call centre that posed as the customer's energy supplier €104,400
The Bundesnetzagentur (Federal Network Agency) fined a call centre focused on energy marketing 104,400 EUR for unlawful telephone advertising. Callers frequently posed falsely as the local energy provider or as the person's own supplier and tried to disguise the promotional nature of the calls.
Call centres need verifiable consent for every number they dial and must honour requests to stop calling immediately.
Consent and proof of consent for telephone marketing
- Authority / court
- Bundesnetzagentur (BNetzA)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- UWG – Verbot unerlaubter Telefonwerbung gegenüber Verbraucherinnen und Verbrauchern
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- BNetzA: Bußgelder Unerlaubte Telefonwerbung (laufende Liste mit Einzelmeldungen) Enforcement database of an authority
- BNetzA-Pressemitteilung 26.01.2026: Erneuter Anstieg der Beschwerdezahlen (Bußgelder 2025) Press release of an authority
Checked against the official source on 2 Oct 2026 · Direct link
Report an error
18 Nov 2025 Firemount Group Ltd.CBP stops clothing from Firemount Group in Mauritius Order
U.S. Customs and Border Protection (CBP) issued a Withhold Release Order: clothing and textiles from Firemount Group Ltd. (Mauritius) are being detained at all US ports of entry because there are indications of forced labour (ILO indicators including abuse of vulnerability, debt bondage, deception, and intimidation and threats).
Suppliers outside traditional high-risk countries must also be checked for their recruitment practices for foreign workers.
- Authority / court
- U.S. Customs and Border Protection
- Area of law
- Supply chain and human rights · Forced and child labour
- Legal basis
- 19 U.S.C. § 1307 (Tariff Act of 1930, Section 307)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 18 Nov 2025
- CBP issues Withhold Release Order on Firemount Group Ltd. Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
6 Nov 2025 Lead Pronto LtdICO: £30,000 fine for Lead Pronto over marketing texts about boiler grants €34,064
The ICO fined Lead Pronto Ltd £30,000 and issued an enforcement notice. The ICO found that the company had sent unsolicited text messages promoting government-funded boiler grants. The ICO found a serious breach of regulation 22 of PECR (electronic marketing without consent).
- Authority / court
- Information Commissioner's Office (ICO)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Regulation 22 PECR; section 55A DPA 1998
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
Original amount 30,000 GBP, converted at the ECB reference rate of 6 Nov 2025.
- ICO Enforcement: Lead Pronto Ltd (MPN). Enthält Informationen des Information Commissioner's Office, lizenziert unter der Open Government Licence v3.0. Enforcement database of an authority
- Monetary Penalty Notice: Lead Pronto Ltd (6 November 2025) Decision of an authority
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link
Report an error
31 Oct 2025 SFS Management (Aust) Pty LtdSFS Management: AUD 500,000 in fines after roof collapse above a cool room €282,933
In October 2022 the roof of an industrial cool room gave way while seven workers were moving equipment on it; they fell around five metres into the cool room. The Industrial Court convicted the company of breaching its health and safety duty with a fine of AUD 480,000 and of breaching s 46 of the WHS Act with a further AUD 20,000, a total of AUD 500,000.
Before work on roofs, load-bearing capacity must be checked and access to surfaces that cannot be walked on must be prevented.
Work on roofs and non-load-bearing surfaces; fall protection
- Authority / court
- SafeWork NSW / Industrial Court of NSW
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- ss 32, 19(1) und s 46 Work Health and Safety Act 2011 (NSW)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 31 Mar 2026
Original amount 500,000 AUD, converted at the ECB reference rate of 31 Oct 2025.
- SafeWork NSW: Prosecutions – October 2025 (SFS Management (Aust) Pty Ltd, 31 October 2025) Enforcement database of an authority
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
31 Oct 2025 Air Sino-Euro Associates Travel Pte. Ltd.Air Sino-Euro: 47,000 SGD – no data protection officer, no internal rules, data leak €31,252
After a cyberattack on the travel agency became public in December 2023, data on 336,759 individuals in its booking system was affected, in some cases including full images of identity cards, passports and birth certificates; part of the data was exfiltrated. The Personal Data Protection Commission (PDPC, Singapore's data protection authority) found negligent breaches of the Accountability Obligation – a data protection officer appointed only in April 2024, and apart from the customer-facing privacy policy no internal policies, no complaints process and no information to staff – and of the Protection Obligation, because there were no contracts with the IT vendors covering security tasks, no security reviews and no multi-factor authentication, and the server was still running the unsupported Windows Server 2012. It imposed 47,000 SGD, rejected objections based on COVID-19 losses and comparable cases, and directed among other things policies, security clauses in vendor contracts and a penetration test by a provider licensed by the Cyber Security Agency (CSA).
An outward-facing privacy policy is no substitute for a designated data protection officer or for internal rules that staff know and that apply in day-to-day work.
Internal data protection policies, communicating them to staff, and password rules
Missing or inadequate training played a role in the decision.
- Authority / court
- Personal Data Protection Commission (PDPC)
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- Sections 11(3) und 12 PDPA 2012 (Accountability Obligation); Section 24 PDPA (Protection Obligation); Section 48J(1)(a) PDPA (Financial Penalty); Section 48I PDPA (Directions)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Culpability
- negligent
- Mitigating circumstances
- Voluntary early admission of the breaches (treated as significantly mitigating) and prompt, effective remediation.
- Published
- 8 Jan 2026
Original amount 47,000 SGD, converted at the ECB reference rate of 31 Oct 2025.
- PDPC – Enforcement Decisions: Breach of the Accountability and Protection Obligations by Air Sino-Euro Associates Travel Pte Ltd (veröffentlicht 08.01.2026) Enforcement database of an authority
- PDPC – Decision [2025] SGPDPC [5], Air Sino-Euro Associates Travel Pte. Ltd., Case No. DP-2312-C1857 (31.10.2025), PDF Decision of an authority
Checked against the official source on 4 Oct 2026 · Direct link
Report an error
29 Oct 2025 Forvis Mazars Accountants N.V.AFM: €446,000 fine for Forvis Mazars over cheating in internal training tests €446,000
On 29 October 2025 the Autoriteit Financiële Markten (AFM, Dutch Authority for the Financial Markets) fined the audit firm Forvis Mazars Accountants N.V. 446,000 EUR because its quality control system and business operations did not prevent almost 100 professionals at all levels from cheating in tests forming part of technical training between 2020 and 2023, for example by sharing answers or completing tests together. There were no specific rules or controls on the integrity of such tests, and no internal report about it was received. The fine was reduced because of the limited role of the internal tests in the quality system, good cooperation and measures taken, and was accepted in the simplified procedure.
Mandatory training tests need their own integrity rules and controls, and the speak-up culture must also cover cheating in professional training.
Integrity in mandatory training and speak-up culture
Missing or inadequate training played a role in the decision.
- Authority / court
- Autoriteit Financiële Markten (AFM)
- Area of law
- Capital markets and financial supervision · Organisational requirements
- Legal basis
- Art. 18 Abs. 1 und Art. 21 Abs. 1 Wet toezicht accountantsorganisaties (Wta)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Mitigating circumstances
- Limited role of the internal tests in the quality system, good cooperation, recognition of the importance of culture and behaviour, measures against recurrence; simplified settlement.
- Published
- 31 Oct 2025
- AFM: AFM beboet Forvis Mazars voor examenfraude Press release of an authority
- AFM: Boetebesluit Forvis Mazars Accountants N.V. (29 oktober 2025) Decision of an authority
Checked against the official source on 2 Oct 2026 · Direct link
Report an error
28 Oct 2025 Marina Bay Sands Pte. Ltd.Marina Bay Sands: 315,000 SGD after configuration error in middleware migration €208,955
When API configurations were manually transferred to a new middleware platform (September 2022 to March 2023), a single employee in sole charge omitted an app identifier, so token verification did not apply to the web page of the ArtScience Friends museum programme for at least six months; an attacker exploited this in October 2023 and retrieved data on 665,495 members of the Sands Rewards Lifestyle loyalty programme, which was then offered for sale on the dark web. The Personal Data Protection Commission (PDPC, Singapore's data protection authority) held that the resort had negligently breached the Protection Obligation by relying on this one employee without independent checks or automation. It reduced the provisionally intended 450,000 SGD to 315,000 SGD after the company's representations; no directions were issued because remediation had already been carried out.
Security-critical configuration steps when migrating large data sets must not depend on a single person without independent checks or automation.
Human error in manual IT changes: four-eyes principle and automation
- Authority / court
- Personal Data Protection Commission (PDPC)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Section 24 Personal Data Protection Act 2012 (Protection Obligation); Section 48J PDPA (Financial Penalty)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Culpability
- negligent
- Repeat case
- no
- Mitigating circumstances
- Otherwise adequate security arrangements, containment on the day of discovery, admission under the Expedited Decision Procedure, cooperation and voluntary notification of all affected individuals.
- Published
- 28 Oct 2025
Original amount 315,000 SGD, converted at the ECB reference rate of 28 Oct 2025.
- PDPC – Enforcement Decisions: Breach of the Protection Obligation by Marina Bay Sands Pte Ltd (veröffentlicht 28.10.2025) Enforcement database of an authority
- PDPC – Decision [2025] SGPDPC 6, Marina Bay Sands Pte. Ltd., Case No. DP-2310-C1622 (28.10.2025), PDF Decision of an authority
Checked against the official source on 4 Oct 2026 · Direct link
Report an error
21 Oct 2025 Winsor Maintenance Inc., Main Source Group, Inc. u. a. sowie OptumCare Management LLC (Auftraggeberin)Cleaning companies/OptumCare: 438,204 USD – overtime and missed breaks €377,534
More than 90 cleaners in industrial, laboratory and healthcare facilities often worked beyond scheduled hours without overtime pay, received no compensation for split shifts and travel time and were unable to take breaks because of excessive workloads. A web of companies concealed the employer; the Notice of Final Findings of 21 October 2025 established 438,204 USD, with OptumCare jointly liable as the client.
Clients of cleaning and service providers should check working hours and breaks at the provider – otherwise they are jointly liable.
- Authority / court
- California Labor Commissioner's Office (Division of Labor Standards Enforcement)
- Area of law
- Health and safety and employment law · Working time
- Legal basis
- California Labor Code § 2810.3; Overtime, Split Shift, Meal and Rest Periods, Mindestlohn
- Action
- Other
- Status of proceedings
- unknown
- Sector
- Other
- Liability of senior managers
- Measures against individuals are not reported here.
- Published
- 24 Nov 2025
Original amount 438,204 USD, converted at the ECB reference rate of 21 Oct 2025.
Checked against the official source on 28 Sep 2026 · Version 2 · Direct link
Report an error
17 Oct 2025 NOVA Language Company Co., Ltd. (株式会社NOVAランゲージカンパニー)NOVA: order over waiving an enrolment fee that was never charged Order
On the website of its 'NOVA' English schools, NOVA Language Company advertised several courses, for example in September 2024, by waiving an enrolment fee of 22,000 JPY (11,000 JPY for a children's course). The company had not charged anyone such a fee over a considerable recent period; the order required a corrective notice, measures to prevent recurrence and cessation.
A waived charge is only an advantage if it is otherwise actually charged – fictitious fees are misleading price advertising.
Advertising price advantages and fee waivers correctly
- Authority / court
- Consumer Affairs Agency (消費者庁, CAA)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Art. 7 Abs. 1 i. V. m. Art. 5 Nr. 2 Act against Unjustifiable Premiums and Misleading Representations (不当景品類及び不当表示防止法, Gesetz Nr. 134/1962)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 17 Oct 2025
- 株式会社NOVAランゲージカンパニーに対する景品表示法に基づく措置命令について (Eintrag, 17.10.2025) Press release of an authority
- News Release 17.10.2025 mit Maßnahmenanordnung 消表対第1556号 (PDF) Decision of an authority
Checked against the official source on 4 Oct 2026 · Direct link
Report an error
15 Oct 2025 Capita plc und Capita Pension Solutions LimitedICO: £14 million against Capita after ransomware attack affecting 6.6 million people €16.1m
In March 2023, an employee unintentionally downloaded malicious files; although an alert was triggered after ten minutes, the device was only isolated after 58 hours. Attackers stole around one terabyte of data on 6.6 million people (including pension data and criminal record information). Fines imposed by the UK Information Commissioner's Office (ICO): £8 million against Capita plc and £6 million against Capita Pension Solutions.
Security alerts need binding response times and an adequately staffed SOC – known vulnerabilities must be remedied across the group.
Handling malicious downloads and security alerts
- Authority / court
- Information Commissioner's Office (ICO)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- UK GDPR Art. 5 Abs. 1 lit. f, Art. 32
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Employees
- 10,000 or more
- Culpability
- negligent
- Mitigating circumstances
- £45 million had provisionally been proposed; reduced, among other things, for security improvements, credit monitoring for those affected and cooperation with authorities and the NCSC.
- Published
- 15 Oct 2025
Original amount 14,000,000 GBP, converted at the ECB reference rate of 15 Oct 2025.
- Capita fined £14m for data breach affecting over 6m people Press release of an authority
- ICO Enforcement: Capita plc Enforcement database of an authority
- ICO Monetary Penalty Notice: Capita plc and Capita Pension Solutions Limited Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
15 Oct 2025 Biffa Waste Services LtdBiffa: £2.48m fine after fatal accident involving a reversing lorry €2.85m
Waste company Biffa was fined £2.48m and ordered to pay £5,768.06 in costs after a worker at its Bradford waste transfer station was struck and killed by a reversing skip wagon on 10 August 2023. The Health and Safety Executive found that the segregation of pedestrians and vehicles was not effectively monitored; CCTV showed that workers routinely bypassed the protected routes.
Control measures on paper are not enough; whether they are actually followed must be monitored continuously.
Traffic routes, reversing and supervision in yards
- Authority / court
- Leeds Magistrates' Court (Anklage: Health and Safety Executive)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Reg. 5(1) Management of Health and Safety at Work Regulations 1999
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Mitigating circumstances
- Guilty plea.
- Published
- 17 Oct 2025
Original amount 2,480,000 GBP, converted at the ECB reference rate of 15 Oct 2025.
- HSE: Biffa fined almost £2.5 million after worker crushed by skip wagon (17.10.2025) Press release of an authority
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
13 Oct 2025 Sport & Spa Gest, S.L.AEPD: 17,600 EUR against sports centre over location tags for swimmers €17,600
The operator of a sports facility rented a Bluetooth system with which swimmers were located in the pool via tags and their training was recorded. The Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) imposed 8,000 EUR for the processing of special categories of data and – after a 20% reduction for immediate payment – 4,000, 2,400 and 3,200 EUR for lack of a legal basis, insufficient information and a deficient impact assessment (17,600 EUR in total); the request for reconsideration was unsuccessful.
New tracking or sensor technology in customer-facing operations requires a legal basis, information and a genuine impact assessment in advance.
- Authority / court
- Agencia Española de Protección de Datos (AEPD)
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- Art. 6 Abs. 1, Art. 9 Abs. 1, Art. 13, Art. 35 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Mitigating circumstances
- Partial immediate payment (20% reduction under Art. 85 LPACAP).
- AEPD Resolución PS/00160/2024 (EXP202308414) Decision of an authority
- AEPD Resolución recurso de reposición PS/00160/2024 (Datum der Ausgangsentscheidung 13.10.2025) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
6 Oct 2025 Zu Disain OÜZu Disain must delete personal data collected from the land register by script Order
The company had used an automated script to carry out mass queries in the electronic land register and stored data of natural persons without demonstrating a legal basis; it did not respond to requests from the supervisory authority. The Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate, AKI) ordered erasure with proof or a statement of a legal basis with a balancing of interests; a penalty payment of 2,000 EUR was threatened.
Publicly accessible register data remain personal data – automated scraping requires its own legal basis.
Public registers are no licence for data collection
- Authority / court
- Andmekaitse Inspektsioon (AKI)
- Area of law
- Data protection
- Legal basis
- § 56 Abs. 1 IKS; Art. 58 Abs. 2 lit. d, Art. 5 Abs. 1 lit. a, Art. 6 Abs. 1 DSGVO
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Other
- Ettekirjutus-hoiatus nr 2.1.-4/25/1239-2660-6 (Zu Disain OÜ), 06.10.2025 Decision of an authority
- Andmekaitse Inspektsioon – veröffentlichte Ettekirjutused (Liste) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Sep 2025 Platinum Gaming LimitedPlatinum Gaming (Unibet): £10m fine for AML and player protection failings €11.5m
The Gambling Commission imposed a financial penalty of £10,000,000, a warning and an additional licence condition requiring an external audit on the operator of unibet.co.uk and uk.bingo.com. Between January 2023 and May 2024, its money laundering risk assessment did not take account of accounts previously closed over money laundering or terrorist financing concerns, so blocked customers could open new accounts; the AML policy was unclear about which level of due diligence applied when, and customers showing clear signs of harm were not contacted. It is the second enforcement action against the company, following one in 2023.
Anyone closing accounts over money laundering concerns must technically prevent the same customers from returning with new accounts.
Recognising blocked customers and timely customer interaction where there are signs of harm
- Authority / court
- Gambling Commission
- Area of law
- Money laundering and terrorist financing · Internal controls
- Legal basis
- LC 12.1.1 Abs. 1–3 und LC 12.1.2 sowie SRCP 3.4.3 der Licence Conditions and Codes of Practice (LCCP); s. 117(1)(a) und (b) Gambling Act 2005
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Repeat case
- yes
- Mitigating circumstances
- The company cooperated throughout the investigation.
- Published
- 22 Oct 2025
Original amount 10,000,000 GBP, converted at the ECB reference rate of 22 Sep 2025.
- Gambling Commission, Public register: Platinum Gaming Limited – regulatory actions (Entscheidung 22.09.2025) Enforcement database of an authority
- Gambling Commission: £10m fine for online operator Platinum Gaming Limited (22.10.2025) Press release of an authority
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
18 Sep 2025 SIA „SĒME“Latvia: 46,300 EUR for SĒME for obstructing a Competition Council dawn raid €46,300
During an unannounced inspection by the Konkurences padome (Latvian Competition Council) on 6 November 2024 in a suspected cartel case, the company partly refused to provide information, and an internet block set up on a computer was not lifted in time. The authority penalised both as procedural infringements with 18,519.86 EUR and 27,779.80 EUR, totalling 46,299.66 EUR, even though it closed the underlying cartel case for lack of evidence.
Companies should have clear dawn-raid rules so that explanations are given and IT access is released to investigators immediately.
Conduct during competition authority inspections
- Authority / court
- Konkurences padome (Lettischer Wettbewerbsrat)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Art. 9.4 Abs. 1 Nr. 5 Konkurences likums (Wettbewerbsgesetz)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Published
- 30 Sep 2025
- KP lēmums Nr. 20, lieta PP/2.2-8/25/2 (SĒME), 18.09.2025 Decision of an authority
- Konkurences padomes lēmumi (Nr. 17, Statuss: Spēkā, paziņots 30.09.2025) Enforcement database of an authority
Checked against the official source on 28 Sep 2026 · Direct link
Report an error
9 Sep 2025 Imerys Minerals LimitedImerys Minerals: £430,000 enforcement undertaking over china clay discharges €496,364
The Environment Agency accepted an enforcement undertaking from Imerys Minerals: the company pays £430,000 to Westcountry Rivers Trust and covers the agency's costs. Between September 2021 and July 2023, china clay effluent had been discharged without a permit at six sites in Cornwall.
Unauthorised discharges at several sites can together lead to a substantial payment.
Permit requirements for discharges from mineral extraction
- Authority / court
- Environment Agency
- Area of law
- Environment and sustainability · Emissions and permits
- Legal basis
- Reg. 38(1) Environmental Permitting (England and Wales) Regulations 2010/2016
- Action
- Other
- Status of proceedings
- final
- Sector
- Other
Original amount 430,000 GBP, converted at the ECB reference rate of 9 Sep 2025.
- Environment Agency: Enforcement undertakings accepted by the Environment Agency (Eintrag EU867) Enforcement database of an authority
Checked against the official source on 3 Oct 2026 · Direct link
Report an error
3 Sep 2025 SURYS SAS (Gruppe Imprimerie Nationale)Hologram manufacturer SURYS: CJIP of 18.4 million EUR in the Ukrainian passport case €18.4m
From 2013, SURYS supplied security holograms for Ukrainian passports to the state-owned company Polygraph via an interposed Estonian company; the investigation (following a request for mutual legal assistance from Ukraine's National Anti-Corruption Bureau, NABU) concerned misappropriation of public funds, bribery of foreign public officials and money laundering. Public interest fine of 18,363,007 EUR, plus 3,770,000 EUR in damages to the Ukrainian state and a three-year AFA compliance programme.
If a state customer insists on an interposed trader without any discernible added value, treat this as a red flag for misappropriation and bribery.
Interposed trading companies and sales agents
- Authority / court
- Parquet national financier (PNF); Validierung durch den Präsidenten des Tribunal judiciaire de Paris
- Area of law
- Bribery and corruption · Bribery of public officials
- Legal basis
- Art. 41-1-2 Code de procédure pénale (CJIP); Bestechung ausländischer Amtsträger, Geldwäsche
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Employees
- 250 to 999
- Culpability
- intentional
- Liability of senior managers
- The CJIP does not address the criminal liability of natural persons.
- Published
- 3 Sep 2025
- Communiqué de presse du procureur de la République financier – CJIP SURYS Press release of an authority
- Convention judiciaire d'intérêt public – SURYS (08.07.2025) Decision of an authority
- Ministère de la Justice: Conventions judiciaires d'intérêt public (Verzeichnis) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
28 Aug 2025 Saskatchewan Indian Gaming AuthorityFINTRAC: CAD 1,175,000 penalty on Saskatchewan Indian Gaming Authority for 3 violations of anti-money laundering obligations €731,540
According to FINTRAC, Saskatchewan Indian Gaming Authority is a reporting entity in the casino sector. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 1,175,000 on the company on 28 August 2025. According to FINTRAC's findings, made during a compliance examination, the company committed 3 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned suspicious transaction reporting and written compliance policies and procedures. Specifically, according to FINTRAC, four suspicious transaction reports were missing, three reports filed contained no indicators of suspicion, and the regulator found shortcomings in patron risk rating in 41 of 100 instances reviewed. According to FINTRAC, the company has appealed the decision to the Federal Court. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Saskatchewan Indian Gaming Authority", published 12 September 2025, https://fintrac-canafe.canada.ca/pen/amps/pen-2025-09-12-eng; summarised in our own words; not an official version and not a reproduction of the original.
- Authority / court
- Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
- Area of law
- Money laundering and terrorist financing · Suspicious activity reports
- Legal basis
- PCMLTFA s. 7, 9(1), 9.6(1); PCMLTF Regulations 156(1)(b); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Other
- Published
- 12 Sep 2025
Original amount 1,175,000 CAD, converted at the ECB reference rate of 28 Aug 2025.
- Administrative monetary penalty on Saskatchewan Indian Gaming Authority (12.09.2025) Decision of an authority
- FINTRAC – Public notice of administrative monetary penalties Enforcement database of an authority
Checked against the official source on 28 Sep 2026 · Version 3 · Direct link
Report an error
28 Aug 2025 11705580 Canada Inc.Illegal construction waste dumping: CAD 500,000 fine for 11705580 Canada Inc. €311,294
In 2020 the company rented two acres of land in Essa Township, presented to the owners as a site for receiving wood to be turned into landscaping material; from April to August 2020, however, hundreds of truckloads of construction and demolition waste were dumped there, and by April 2023 there was still no confirmation that the ordered clean-up had taken place. The court convicted the company under the Environmental Protection Act of depositing waste at an unapproved site and fined it CAD 500,000 plus a victim fine surcharge of CAD 125,000. Measures against individuals are not set out here.
Anyone renting land for supposed recycling projects is liable, together with its management, if waste is dumped there without approval.
Waste disposal and approvals for waste sites
- Authority / court
- Gericht in Barrie (Ermittlung und Anklage: Ontario Ministry of the Environment, Conservation and Parks)
- Area of law
- Environment and sustainability · Waste and hazardous substances
- Legal basis
- Environmental Protection Act (Ontario), RSO 1990, c E.19 – Ablagerung von Abfällen auf einem nicht zugelassenen Abfallstandort
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Liability of senior managers
- Measures against individuals are not set out here.
- Published
- 11 Feb 2026
Original amount 500,000 CAD, converted at the ECB reference rate of 28 Aug 2025.
- Ontario Newsroom, Court Bulletin (MECP): Company and Directors Fined $1,025,000 for Environmental Protection Act Violations, 11.02.2026 Press release of an authority
- Ontario Newsroom API: Court Bulletin 1007029 (maschinenlesbare Fassung) Press release of an authority
Checked against the official source on 3 Oct 2026 · Direct link