Who was sanctioned, and for what?

From March to May 2025, Kinpodo advertised family funerals in exclusively rented halls under the name 'Chiisana Mori no Ie' in television commercials at a price 'from 104,500 JPY'. In fact, apart from a few cases, customers had to pay at least 308,000 JPY; the order required a corrective notice, measures to prevent recurrence and cessation.

Authority / court

Consumer Affairs Agency (消費者庁, CAA)

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Art. 7 Abs. 1 i. V. m. Art. 5 Nr. 2 Act against Unjustifiable Premiums and Misleading Representations (不当景品類及び不当表示防止法, Gesetz Nr. 134/1962)

Action

Order

Status of proceedings

unknown

Sector

Other

Published

18 Sep 2026

Checked against the official source on 4 Oct 2026 · Direct link

While decommissioned powder extinguishers were being discharged in Oldbury in 2023, a cartridge-type extinguisher exploded and struck a 37-year-old employee on the head, fatally injuring him. There was no risk assessment, no safe system of work, no suitable storage and no restraint system for discharging; the recycling business (20 employees according to its annual accounts) was fined 40,000 GBP plus 17,034.25 GBP in costs.

Authority / court

Birmingham Magistrates' Court (Anklage: Health and Safety Executive)

Area of law

Health and safety and employment law · Workplace safety and accidents

Legal basis

Section 2(1) Health and Safety at Work etc. Act 1974

Action

Fine

Status of proceedings

unknown

Sector

Other

Employees

Under 50

Published

17 Sep 2026

Original amount 40,000 GBP, converted at the ECB reference rate of 14 Sep 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

The Nederlandse Arbeidsinspectie (Netherlands Labour Authority) imposed fines totalling 316,875 EUR on a gym chain in Amsterdam that is not named in the release. For 25 foreign workers the required work permit or combined residence and work permit was missing, and for three people identity had not been established (Wav, Foreign Nationals Employment Act, 234,375 EUR); because of deficient records it could not be verified whether the minimum wage had been paid for all hours worked (WML, Minimum Wage and Minimum Holiday Allowance Act, 60,000 EUR), plus a breach of the Arbeidstijdenwet (Working Hours Act, 22,500 EUR). The company also received two warnings that work may be preventively halted if the same or similar breaches recur.

Authority / court

Nederlandse Arbeidsinspectie

Area of law

Health and safety and employment law · Minimum wage and undeclared work

Legal basis

Wet arbeid vreemdelingen (Wav); Wet minimumloon en minimumvakantiebijslag (WML); Arbeidstijdenwet (ATW)

Action

Fine

Status of proceedings

unknown

Sector

Other

Published

24 Aug 2026

Checked against the official source on 2 Oct 2026 · Direct link

The operator of quinnbet.com will pay £415,986 in lieu of a financial penalty to the Consolidated Fund (the UK Government's general account) under a settlement and contribute to the Commission's investigation costs. The settlement also includes a disgorgement of £193,118, which is not included in the amount shown. A compliance assessment found breaches of the anti-money laundering licence condition LC 12.1.1 paras. 2 and 3 (March 2023 to August 2025) and of the customer interaction requirements under SRCP 3.4.3; following an error during a platform migration, some of the required financial vulnerability checks under SRCP 3.4.4 were also not carried out between February and May 2025. It is the first enforcement action against the company.

Authority / court

Gambling Commission

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

s. 116 Gambling Act 2005; LC 12.1.1 Abs. 2 und 3, SRCP 3.4.3 und SRCP 3.4.4 Abs. 1 der Licence Conditions and Codes of Practice (LCCP)

Action

Fine

Status of proceedings

final

Sector

Other

Repeat case

no

Mitigating circumstances

No previous enforcement action, a swift action plan, full cooperation, early voluntary reporting of some of the failings, voluntary divestment of the funds gained from them and early acceptance of the failings.

Published

20 Aug 2026

Original amount 415,986 GBP, converted at the ECB reference rate of 20 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

According to the HSE, the sawmill failed to protect employees from wood dust (no face-fit testing for respiratory protective equipment, no health surveillance) and let staff drive lift trucks without training; three improvement notices from the HSE (Health and Safety Executive, Britain's workplace safety regulator) were not complied with. The court fined the company, a micro-entity, 20,000 GBP plus 5,000 GBP in costs.

Authority / court

Truro Crown Court (Anklage: Health and Safety Executive)

Area of law

Health and safety and employment law · Workplace safety and accidents

Legal basis

Section 2(1) und Section 33(1)(g) Health and Safety at Work etc. Act 1974

Action

Fine

Status of proceedings

unknown

Sector

Other

Employees

Under 50

Liability of senior managers

Measures against individuals are not reported here.

Published

21 Aug 2026

Original amount 20,000 GBP, converted at the ECB reference rate of 20 Aug 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Attackers obtained the credentials of a user account with administrator rights through phishing and accessed customer data. The Romanian data protection authority (ANSPDCP) criticised the lack of technical and organisational measures and of regular effectiveness testing, imposed 15,728 lei (3,000 EUR) and ordered regular employee training, including on recognising phishing e-mails. Date = publication of the press release; according to the authority, the investigation was concluded in the previous month.

Authority / court

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)

Area of law

Data protection · Data breaches and data security

Legal basis

Art. 32 Abs. 1 lit. b und Abs. 2 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Other

Published

19 Aug 2026

Original amount 15,728 RON, converted at the ECB reference rate of 19 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Finanstilsynet (Norwegian Financial Supervisory Authority) fined the accounting firm Panzer Norge AS, based in Alta, NOK 100,000 under the Anti-Money Laundering Act. The inspection found shortcomings in the firm-wide risk assessment and in customer due diligence, as well as further breaches in risk and quality management and in engagement agreements; the company, which had five employees, essentially did not dispute the breaches.

Authority / court

Finanstilsynet

Area of law

Money laundering and terrorist financing · Customer due diligence

Legal basis

§§ 7, 8, 9, 12 Abs. 4, 13 Abs. 1, 3 und 4, 14, 24 und 49 hvitvaskingsloven

Action

Fine

Status of proceedings

unknown

Sector

Other

Employees

Under 50

Culpability

negligent

Published

17 Sep 2026

Original amount 100,000 NOK, converted at the ECB reference rate of 11 Aug 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Following several complaints, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (Romanian data protection authority, ANSPDCP) found that current and former employees, untrained and without procedural rules, had access to extensive data (including health, family and income data), that data subjects were not informed under Art. 14 GDPR, that excessive data were collected and that automated advertising calls were made without consent. Fines: 78,465 lei (15,000 EUR, Art. 32(4)), 52,310 lei (10,000 EUR, Art. 14), 104,620 lei (20,000 EUR, Art. 5/9 GDPR) and 50,000 lei (Law 506/2004); in addition, an order to provide regular employee training. Date = publication of the press release; according to the authority, the investigation was concluded in June 2026.

Authority / court

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)

Area of law

Data protection · Marketing and consent

Legal basis

Art. 5 Abs. 1 lit. c i. V. m. Art. 9, Art. 14, Art. 32 Abs. 4 DSGVO; Art. 12 Abs. 1 Gesetz 506/2004

Action

Fine

Status of proceedings

unknown

Sector

Other

Published

6 Aug 2026

Original amount 285,395 RON, converted at the ECB reference rate of 6 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

The Oberlandesgericht (OLG, Higher Regional Court) Linz added a forfeiture of 375,000 EUR to the conviction of a limited company under the Verbandsverantwortlichkeitsgesetz (VbVG, Austrian Corporate Criminal Liability Act) for intentionally handling and moving waste in a way that endangered the environment; the suspended corporate fine of 30 daily rates of 500 EUR (15,000 EUR) imposed by the Landesgericht (Regional Court) Salzburg remained in place. From May 2021 to May 2024 and again from May 2025 to February 2026, contrary to the AWG 2002 (Waste Management Act) and partly to an official decision, the company had excavated soil, construction waste, asphalt and concrete rubble accepted for payment and deposited on a plot; removal costs were put at around 3.24 million EUR. Only the forfeiture of EUR 375,000 is recorded as the amount; the corporate fine of EUR 15,000 was conditionally suspended.

Authority / court

Oberlandesgericht Linz (Berufung gegen Urteil des Landesgerichts Salzburg vom 06.03.2026)

Area of law

Environment and sustainability · Waste and hazardous substances

Legal basis

§ 181b Abs. 1 und 2 StGB; §§ 3, 4 Abs. 1 und 3, § 6 Abs. 1, § 14 Abs. 1 VbVG; § 20 Abs. 3 StGB; AWG 2002

Action

Disgorgement of profits

Status of proceedings

final

Sector

Other

Culpability

intentional

Repeat case

no

Mitigating circumstances

No previous convictions of the company; rather low environmental risk. Further circumstances taken into account by the court concern a natural person and are not reported here.

Liability of senior managers

Under the VbVG, the company's liability is linked to the conduct of its managing director.

Checked against the official source on 2 Oct 2026 · Direct link

The U.S. Forced Labor Enforcement Task Force (FLETF) added the cotton and textile producer to the Uyghur Forced Labor Prevention Act (UFLPA) Entity List because it sources cotton from Xinjiang. The company's goods are therefore presumed to have been produced with forced labour on import into the US unless the importer rebuts this.

Authority / court

U.S. Department of Homeland Security (Forced Labor Enforcement Task Force)

Area of law

Supply chain and human rights · Forced and child labour

Legal basis

Uyghur Forced Labor Prevention Act, Section 2(d)(2)(B)(v)

Action

Order

Status of proceedings

unknown

Sector

Other

Published

3 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

According to FINTRAC, The New Brunswick Lotteries and Gaming Corporation is a reporting entity in the casino sector based in Fredericton, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 399,712.50 on the company on 24 July 2026. According to FINTRAC's findings, made during a compliance examination, the company committed one violation of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violation concerned suspicious transaction reporting. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on the New Brunswick Lotteries and Gaming Corporation", published 3 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-03-2-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court

Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)

Area of law

Money laundering and terrorist financing · Suspicious activity reports

Legal basis

PCMLTFA s. 7; Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA

Action

Fine

Status of proceedings

final

Sector

Other

Published

3 Sep 2026

Original amount 399,712.5 CAD, converted at the ECB reference rate of 24 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

The Bundesnetzagentur (Federal Network Agency) imposed fines totalling 34,327 EUR on a call centre that mainly marketed telecoms products: 32,000 EUR for unlawful telephone advertising and 2,327 EUR because consents to sales calls had not been fully documented. The campaign continued despite the gaps and requests to stop calling were sometimes ignored; the company has appealed.

Authority / court

Bundesnetzagentur (BNetzA)

Area of law

Data protection · Marketing and consent

Legal basis

UWG – Verbot unerlaubter Telefonwerbung gegenüber Verbraucherinnen und Verbrauchern; § 7a UWG (Dokumentation und Aufbewahrung von Einwilligungen)

Action

Fine

Status of proceedings

under appeal

Sector

Other

Checked against the official source on 2 Oct 2026 · Direct link

The games supplier will pay £4,750,000 in lieu of a financial penalty under a regulatory settlement, contribute to the Commission's investigation costs and accept an additional licence condition requiring an independent audit within twelve months. Five genuine Evolution games were accessible at scale to consumers in Great Britain via six websites of two operators not licensed by the Gambling Commission; between April 2024 and January 2025, its risk assessment and its anti-money laundering policies and controls did not adequately address risks arising from business partners in particular (LC 12.1.1, LC 12.1.2). After the Commission notified it in December 2024, Evolution immediately and permanently blocked the games for users in Great Britain.

Authority / court

Gambling Commission

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

s. 116 Gambling Act 2005; LC 12.1.1 Abs. 1–3 und LC 12.1.2 der Licence Conditions and Codes of Practice (LCCP); Reg. 18, 19(1)(a) und 28(1) Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017

Action

Fine

Status of proceedings

final

Sector

Other

Mitigating circumstances

A swift action plan with progress updates, full cooperation with the investigation and early acceptance of the failings.

Published

23 Jul 2026

Original amount 4,750,000 GBP, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) imposed 231,826 CAD on the Halifax gaming corporation (casino sector) because it failed to file suspicious transaction reports on attempted transactions despite reasonable grounds for suspicion, did not keep its compliance policies up to date and approved by a senior officer, and did not assess the money laundering risk as required. The penalty was paid in full.

Authority / court

Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)

Area of law

Money laundering and terrorist financing · Suspicious activity reports

Legal basis

Proceeds of Crime (Money Laundering) and Terrorist Financing Act, Part 1, und zugehörige Verordnungen

Action

Fine

Status of proceedings

final

Sector

Other

Published

3 Sep 2026

Original amount 231,826 CAD, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 25 Sep 2026 · Direct link

On the confirmation page of its online cancellation process, a gym operator displayed a highlighted notice with the button "Pause contract via self-service"; in addition, the confirmation button was labelled "Find contract", which the defendant had already acknowledged. In an action brought by the Federation of German Consumer Organisations (Verbraucherzentrale Bundesverband), the BGH ruled that the confirmation page may only contain the information required for the cancellation and the confirmation button, set aside the judgment of the Higher Regional Court of Düsseldorf (OLG Düsseldorf) dismissing the action to that extent and ordered the operator to cease and desist.

Authority / court

Bundesgerichtshof (I. Zivilsenat), Az. I ZR 200/25

Area of law

Consumer protection and online retail · Information duties in online retail

Legal basis

§ 312k Abs. 1 Satz 1, Abs. 2 BGB (Kündigungsbutton)

Action

Order

Status of proceedings

final

Sector

Other

Published

16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

The 2022 examination revealed that for more than two years the remote gaming operator had had no proper customer risk assessment for almost its entire player base; the assessments submitted had been prepared specifically for the examination. In addition, once players reached the deposit threshold of 2,000 EUR, it did not check in good time whether they were politically exposed persons. The Financial Intelligence Analysis Unit (FIAU) imposed 80,907 EUR; the fine was still open to appeal at the time of publication.

Authority / court

Financial Intelligence Analysis Unit (FIAU)

Area of law

Money laundering and terrorist financing · Customer due diligence

Legal basis

Reg. 5(5)(a)(ii), 11(5), 21 PMLFTR; FIAU Implementing Procedures Part I und II (Remote Gaming)

Action

Fine

Status of proceedings

unknown

Sector

Other

Published

16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

An employee of the Dundee-based electrical services provider for gyms (around 140 employees) had pointed out that the technicians' holiday pay was being calculated incorrectly; a few days later her home working arrangement was withdrawn, and on 11 June 2025 she was dismissed. The Employment Tribunal upheld her claims for automatically unfair dismissal (s. 103A) and detriment (s. 47B); compensation will be decided separately.

Authority / court

Employment Tribunal

Area of law

Whistleblower protection · Retaliation against whistleblowers

Legal basis

Employment Rights Act 1996, ss. 43B, 47B, 103A

Action

Other

Status of proceedings

unknown

Sector

Other

Employees

50 to 249

Published

23 Jul 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Following a compliance assessment in May and June 2024, the operator of betfred.com will pay £900,000 in lieu of a financial penalty to the Consolidated Fund (the UK Government's general account) under a settlement and contribute to the Commission's investigation costs. The Commission found breaches of the remote customer interaction requirements under SRCP 3.4.3: automated processes to identify signs of harm and to act immediately on strong indicators were lacking, so that one customer lost a further £17,900 within 24 hours of a review without being contacted again. The Commission had already announced sanctions against Petfre in 2022 and 2025.

Authority / court

Gambling Commission

Area of law

Consumer protection and online retail

Legal basis

s. 116 Gambling Act 2005; SRCP 3.4.3 Abs. 1, 2, 4, 7 und 11 der Licence Conditions and Codes of Practice (LCCP)

Action

Fine

Status of proceedings

final

Sector

Other

Repeat case

yes

Mitigating circumstances

A swift action plan with progress updates and full cooperation with the investigation.

Published

30 Jun 2026

Original amount 900,000 GBP, converted at the ECB reference rate of 30 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

After around one million gallons of sulphuric acid were released at the BWC Terminals site in Channelview (Texas) in December 2025, OSHA proposed penalties totalling 3,520,703 USD against three employers. Staffing contractor One Way Environmental Services accounts for 3,045,452 USD for 18 violations classed as wilful and egregious and five as serious, because it sent workers to the clean-up without adequate training, respirator fit tests and safety measures; the hazardous waste contractor Coastal Environmental Solutions faces 392,501 USD and BWC Terminals, which had mixed fresh and spent acid despite warnings, 82,750 USD. The authority allegedly made the findings set out here; this account is not based on a final judgment. The decision is not final.

Authority / court

U.S. Department of Labor – Occupational Safety and Health Administration (OSHA)

Area of law

Health and safety and employment law · Workplace safety and accidents

Legal basis

Occupational Safety and Health Act (u. a. Vorschriften zu Gefahrstoffeinsätzen und Notfallmaßnahmen sowie Atemschutz)

Action

Fine

Status of proceedings

not yet final

Sector

Other

Published

26 Jun 2026

Original amount 3,520,703 USD, converted at the ECB reference rate of 26 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

The company had stored statistically calculated ‘party affinities’ for around 2.2 million people and in some cases sold them to advertising clients – special categories of personal data without consent; in addition, parcel frequency data was further processed for incompatible purposes. The Austrian Data Protection Authority (Datenschutzbehörde, DSB) had imposed 18 million EUR in 2019 and the Federal Administrative Court (Bundesverwaltungsgericht, BVwG) 16 million EUR in 2024; Austria's Supreme Administrative Court (Verwaltungsgerichtshof, VwGH) has now set the fine with final effect at 13 million EUR (plus 100,000 EUR in procedural costs).

Authority / court

Verwaltungsgerichtshof (Ausgangsbescheid: Datenschutzbehörde)

Area of law

Data protection · Marketing and consent

Legal basis

DSGVO Art. 5 Abs. 1 lit. a und b, Art. 6 Abs. 4, Art. 9 Abs. 1 (VwGH Ro 2025/04/0007)

Action

Fine

Status of proceedings

reduced

Sector

Other

Culpability

negligent

Mitigating circumstances

Comprehensive cooperation, deletion of the party affinities, settlements with data subjects, long duration of proceedings (5 years, 10 months).

Published

16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

U.S. Customs and Border Protection (CBP) issued a Withhold Release Order: clothing from Needle Craft Ltd.; Casual Wear Apparel LLC (Jordan) is being detained at all US ports of entry because there are indications of forced labour (ILO indicators including physical and sexual violence, retention of identity documents, restriction of movement and withholding of wages). These are two parallel orders against both manufacturers.

Authority / court

U.S. Customs and Border Protection

Area of law

Supply chain and human rights · Forced and child labour

Legal basis

19 U.S.C. § 1307 (Tariff Act of 1930, Section 307)

Action

Order

Status of proceedings

unknown

Sector

Other

Published

23 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

An employee of the service provider acting as processor for Kaufland România let a third party into a store’s video surveillance room; that person filmed the images and distributed them on social media. Kaufland reported the incident. The Romanian data protection authority (ANSPDCP) imposed 10,200 lei (2,000 EUR) on the processor and ordered additional checks of the work instructions; the fine has been paid. Date = publication of the press release; according to the authority, the investigation was concluded in April 2026.

Authority / court

Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)

Area of law

Data protection · Video surveillance

Legal basis

Art. 29, Art. 32 Abs. 1 lit. b, Abs. 2 und 4 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Other

Published

15 Jun 2026

Original amount 10,200 RON, converted at the ECB reference rate of 15 Jun 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Philip Morris Italia widely promoted heated tobacco devices, e-cigarettes and nicotine products for oral use with phrases such as "senza fumo" (smoke-free) and a "smoke-free future"; the AGCM considered this misleading because it suggested that the products were harmless or less harmful, although they can endanger health and safety. The authority imposed a fine of 7,000,000 EUR and prohibited continuation; the proceedings were triggered by a report from the Ministry of Health.

Authority / court

Autorità Garante della Concorrenza e del Mercato (AGCM)

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Art. 20, 21 Abs. 1 und 3, 22 Codice del consumo (D.lgs. 206/2005)

Action

Fine

Status of proceedings

unknown

Sector

Other

Published

10 Jun 2026

Checked against the official source on 28 Sep 2026 · Direct link

According to the Attorney General's office, the fitness franchisor stated three to six months until studio opening in the disclosure documents filed in New York, although it took more than 13 months on average and its own SEC reports showed longer periods. The Assurance of Discontinuance requires 3,971,250 USD: 3 million USD for 70 harmed franchisees (of which 300,000 USD is a civil penalty) and 971,250 USD in fee refunds to 25 franchisees who never opened. The authority allegedly made the findings set out here; this account is not based on a final judgment.

Authority / court

Office of the New York State Attorney General (Investor Protection Bureau, Franchise Section)

Area of law

Consumer protection and online retail

Legal basis

New York Franchise Sales Act (General Business Law §§ 680 ff., insb. § 687); Executive Law § 63(12)

Action

Disgorgement of profits

Status of proceedings

final

Sector

Other

Published

9 Jun 2026

Original amount 3,971,250 USD, converted at the ECB reference rate of 9 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

The listed hotel group did not publish its 2024 annual financial report on time; the Cyprus Securities and Exchange Commission (CySEC) imposed a total of 16,500 EUR. At the same meeting, eleven other issuers were fined between 1,500 and 17,000 EUR for the same reason; a fine of 13,500 EUR had already been imposed on the company under the same law in 2025.

Authority / court

Cyprus Securities and Exchange Commission (CySEC)

Area of law

Capital markets and financial supervision · Disclosure and reporting obligations

Legal basis

Sec. 9(1), 37(2)(a) Transparency Requirements (Securities Admitted to Trading on a Regulated Market) Law 2007

Action

Fine

Status of proceedings

unknown

Sector

Other

Repeat case

yes

Published

7 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

New Zealand's largest gym chain kept advertising a membership at 6.99 NZD a week on its website, Instagram and Google ads, although all new members had to pay a compulsory 3% surcharge that it presented as a “transaction fee” but which in fact served to raise revenue generally. After pleading guilty to eight representative charges (offending period 21 December 2023 to 30 April 2025), the company was sentenced on 5 June 2026 to a fine of 1,120,000 NZD. According to the Commerce Commission (ComCom, New Zealand's competition and consumer authority), the surcharge affected more than 125,000 members and generated around 1.6 million NZD in additional revenue.

Authority / court

Strafgericht, in der Quelle nicht benannt (Anklage: Commerce Commission)

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Fair Trading Act 1986, ss 11, 40(1)

Action

Fine

Status of proceedings

unknown

Sector

Other

Culpability

intentional

Liability of senior managers

According to the court, the labels “transaction fee” and “Payment Authority Fee” were approved at the highest level; the fee increase was decided by senior executives.

Published

9 Jun 2026

Original amount 1,120,000 NZD, converted at the ECB reference rate of 5 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

The PR agency, which did not appear, lost on all claims: detriment on grounds of whistleblowing (£20,000 for injury to feelings), wrongful termination without notice pay (£3,547.60) and constructive unfair dismissal (basic and compensatory award including a 25 % ACAS uplift). A total of £71,051.82 was awarded.

Authority / court

Employment Tribunal

Area of law

Whistleblower protection · Retaliation against whistleblowers

Legal basis

Employment Rights Act 1996, s. 47B (Benachteiligung wegen geschützter Offenlegung); konstruktive unfaire Kündigung; wrongful dismissal

Action

Other

Status of proceedings

unknown

Sector

Other

Employees

Under 50

Published

22 Jul 2026

Original amount 71,051.82 GBP, converted at the ECB reference rate of 3 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 4 · Direct link

Consulting firm FTI Consulting, Inc. of Washington, D.C. is paying USD 1,050,000 under a settlement with OFAC for apparent violations of the Russia financial sector sanctions. According to OFAC's findings, between April 2019 and May 2021 FTI indirectly extended prohibited debt on six occasions to a Russian state-owned bank subject to Directive 1 under Executive Order 13662: invoices remained unpaid beyond the permitted 14 days or were paid long afterwards while FTI continued to provide services. OFAC treated the apparent violations as non-egregious and not voluntarily self-disclosed; the base penalty was USD 525,000. The settlement amount is above the base penalty; OFAC cited in particular the anticipated impact on future compliance by similarly situated firms. Source: U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), enforcement release "FTI Consulting, Inc., a Global Business Advisory Firm, Settles with OFAC for $1,050,000 Related to Apparent Violations of Dealing in Prohibited Debt of Sanctioned Russian Bank", 1 June 2026, https://ofac.treasury.gov/media/935651/download?inline; summarised in our own words.

Authority / court

U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)

Area of law

Sanctions and export control · Breaches of sanctions and embargoes

Legal basis

Ukraine-/Russia-Related Sanctions Regulations, 31 C.F.R. §§ 589.202, 589.213 i. V. m. Directive 1 zu E.O. 13662 (sechs mutmaßliche Verstöße); Vergleich nach den Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A

Action

Fine

Status of proceedings

final

Sector

Other

Published

1 Jun 2026

Original amount 1,050,000 USD, converted at the ECB reference rate of 1 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

According to FINTRAC, Atlantic Lottery Corporation Inc. is a reporting entity in the casino sector based in Moncton, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 212,025 on the company on 29 May 2026. According to FINTRAC's findings, made during a compliance examination, the company committed 3 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned suspicious transaction reporting, written compliance policies and procedures and assessing and documenting money laundering and terrorist financing risks. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Atlantic Lottery Corporation Inc.", published 9 July 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-07-09-1-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court

Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)

Area of law

Money laundering and terrorist financing · Suspicious activity reports

Legal basis

PCMLTFA s. 7, 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA

Action

Fine

Status of proceedings

final

Sector

Other

Published

9 Jul 2026

Original amount 212,025 CAD, converted at the ECB reference rate of 29 May 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

The ICO fined a UK marketing company £300,000 and issued an enforcement notice. The ICO found that the company had sent more than 5.5 million unsolicited marketing text messages, including messages styled as if they came from bailiffs. The 7726 spam reporting service received over 60,000 complaints. The ICO relied on regulations 22 and 23 of PECR (electronic marketing without consent and concealed sender identity).

Authority / court

Information Commissioner's Office (ICO)

Area of law

Data protection · Marketing and consent

Legal basis

Regulations 22 und 23 PECR; section 55A DPA 1998

Action

Fine

Status of proceedings

unknown

Sector

Other

Original amount 300,000 GBP, converted at the ECB reference rate of 20 May 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Between March 2022 and March 2025 a Hamilton law firm repeatedly breached the AML/CFT Act: it lacked a proper risk assessment, an implemented anti-money laundering programme and adequate records. It also failed to respond, or responded only in part, to information notices from the Department of Internal Affairs (DIA, the AML/CFT supervisor for law firms), thereby obstructing its investigators. After the firm pleaded guilty, the court imposed a fine of 60,000 NZD, taking the firm's size and financial capacity into account.

Authority / court

Strafgericht, in der Quelle nicht benannt (Anklage: Department of Internal Affairs)

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

Anti-Money Laundering and Countering Financing of Terrorism Act 2009

Action

Fine

Status of proceedings

unknown

Sector

Other

Culpability

intentional

Liability of senior managers

According to the Department of Internal Affairs, the firm's partners, as lawyers, also had professional obligations to uphold the law.

Published

24 Apr 2026

Original amount 60,000 NZD, converted at the ECB reference rate of 24 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Following complaints, the labour inspectorate found, among other things, outstanding minimum wages at the temporary staffing agency in Leamington; an audit for 2022 showed that hundreds of employees were owed a total of CA$234,212 in regular wages, public holiday pay and vacation pay. The company did not comply with the 2023 orders to pay; in proceedings held in its absence, the court imposed CA$100,000 on the company (plus victim fine surcharge).

Authority / court

Provincial Offences Court Windsor (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)

Area of law

Health and safety and employment law · Minimum wage and undeclared work

Legal basis

Employment Standards Act, 2000 (Ontario), ss. 103(8), 106, 132, 136

Action

Fine

Status of proceedings

unknown

Sector

Other

Liability of senior managers

Measures against individuals are not reported here.

Published

3 Jun 2026

Original amount 100,000 CAD, converted at the ECB reference rate of 23 Apr 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Under an agreement with the Securities and Futures Commission (SFC, Hong Kong's securities regulator), PricewaterhouseCoopers Hong Kong has undertaken to set aside 1,000,000,000 HKD to compensate independent minority shareholders of China Evergrande Group; in return the regulator will take no further action, without any admission of liability. China Evergrande's audited revenue was allegedly overstated by 44.79% for 2019 and 69.03% for 2020, and PwC Hong Kong, as auditor, was allegedly concerned in the dissemination of false information, allegedly did not maintain its independence and allegedly acquiesced in management's manipulation of audit samples and site inspections.

Authority / court

Securities and Futures Commission (SFC)

Area of law

Capital markets and financial supervision · Market abuse and insider dealing

Legal basis

s. 277 SFO (Cap. 571) (Auffassung der SFC, von PwC HK nicht anerkannt)

Action

Other

Status of proceedings

final

Sector

Other

Published

23 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

In a ransomware attack on the membership management system of Yau Yat Chuen Garden City Club Limited, a private, non-profit recreational club, reported on 31 October 2025, data of 9,045 current and former members and supplementary card holders were affected, including identity card or passport numbers. The attacker exploited a known vulnerability in outdated remote access software of the external service provider and reached the server, which had been left logged in, without further authentication; antivirus software and firewall were outdated, and personal data had been kept longer than necessary. In its investigation report published on 23 April 2026 the PCPD (Privacy Commissioner for Personal Data, Hong Kong's data protection authority) found breaches of DPP 4(1) and DPP 2(2) and served an enforcement notice.

Authority / court

Privacy Commissioner for Personal Data (PCPD), Hongkong

Area of law

Data protection · Data breaches and data security

Legal basis

Personal Data (Privacy) Ordinance, Data Protection Principles 4(1) und 2(2); Enforcement Notice

Action

Order

Status of proceedings

unknown

Sector

Other

Published

23 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

For online bookings, the driving schools only showed a mandatory booking fee at checkout instead of in the initial price. Following an admission and settlement, the CMA imposed a penalty of 4.2 million GBP (40 % discount on 7 million GBP) and ordered refunds of more than 760,000 GBP to more than 80,000 customers. According to the annual accounts filed with the UK companies register for financial year 2026, the company had around 6,776 employees.

Authority / court

Competition and Markets Authority (CMA)

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Digital Markets, Competition and Consumers Act 2024

Action

Fine

Status of proceedings

final

Sector

Other

Employees

1,000 to 9,999

Mitigating circumstances

Admission and early settlement (40 % discount).

Published

15 Apr 2026

Original amount 4,200,000 GBP, converted at the ECB reference rate of 15 Apr 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

An employer installed the software Spyrix Employee Monitoring on the work computers of individual employees, which for months recorded screen content, audio and even private e-mails and conversations without informing the employees. The supervisory authority, the Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia, IP), imposed 71,474 EUR on the company.

Authority / court

Informacijski pooblaščenec Republike Slovenije (IP)

Area of law

Data protection · Employee data

Legal basis

Art. 5 und Art. 6 Abs. 1 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Other

Culpability

intentional

Liability of senior managers

Measures against individuals are not reported here.

Published

9 Apr 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

From 2022 to 2025, the company exported containers of supposedly clean plastic that was in fact contaminated with electronic waste such as cables and circuit boards; in some cases, the waste was hidden at the back of the container, and further containers were shipped despite prohibition notices from August 2024. The company pleaded guilty and was fined 80,000 GBP; in addition, it was ordered to pay 45,000 GBP in costs and a 2,000 GBP surcharge. According to the annual accounts filed with the UK companies register for financial year 2025, the company had around 19 employees.

Authority / court

Preston Magistrates' Court (Anklage: Environment Agency)

Area of law

Environment and sustainability · Waste and hazardous substances

Legal basis

Vorschriften zur grenzüberschreitenden Abfallverbringung (Notifizierung und Zustimmung); Verstoß gegen Untersagungsverfügungen

Action

Fine

Status of proceedings

unknown

Sector

Other

Employees

Under 50

Culpability

intentional

Repeat case

yes

Mitigating circumstances

Guilty plea.

Published

2 Apr 2026

Original amount 80,000 GBP, converted at the ECB reference rate of 24 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 5 · Direct link

A person complained that Fitsypro had not responded to their request for access, rectification and erasure of November 2023. Three requests for information from the Datu valsts inspekcija (Latvian Data State Inspectorate, DVI) between 2024 and 2026 went unanswered, and nobody attended the hearing. The DVI imposed 1,500 EUR and requested the information by 21 April 2026.

Authority / court

Datu valsts inspekcija (DVI)

Area of law

Data protection · Data subject rights and transparency

Legal basis

Art. 58 Abs. 1 lit. e, Art. 83 Abs. 5 lit. e DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Other

Culpability

intentional

Checked against the official source on 25 Sep 2026 · Direct link

Malta's Financial Intelligence Analysis Unit (FIAU) imposed 225,730 EUR, a penalty payment of 2,000 EUR per day and a follow-up directive on the licensed gambling operator, which works through a network of independently operated betting shops in an EU member state. The company was unable to link customers' cumulative deposits across different shops and only checked customers from a single deposit of 2,000 EUR upwards, so the threshold could be circumvented. The company has appealed.

Authority / court

Financial Intelligence Analysis Unit (FIAU)

Area of law

Money laundering and terrorist financing · Customer due diligence

Legal basis

Regulation 21 PMLFTR; Verstöße gegen Regulations 5(5)(a)(ii), 7, 9(1) PMLFTR und FIAU Implementing Procedures

Action

Fine

Status of proceedings

under appeal

Sector

Other

Published

16 Apr 2026

Checked against the official source on 25 Sep 2026 · Direct link

The UK Department for Business and Trade publicly named the nursery operator Busy Bees Nurseries Limited in round 23 of the National Minimum Wage Naming Scheme. According to investigations by HM Revenue & Customs (HMRC), the company had paid a total of 9,056 workers less than the statutory minimum wage between April 2017 and October 2022 and had to repay £485,374.05 – on average around £54 per person. According to the ministry, the 389 employers named in this round also received penalties totalling around £12.6 million; the amount per company is not published.

Authority / court

Department for Business and Trade (DBT) und HM Revenue & Customs (HMRC), National Minimum Wage Naming Scheme

Area of law

Health and safety and employment law · Minimum wage and undeclared work

Legal basis

Britisches Mindestlohnrecht (National Minimum Wage / National Living Wage); National Minimum Wage Naming Scheme

Action

Order

Status of proceedings

unknown

Sector

Other

Employees

1,000 to 9,999

Published

19 Mar 2026

Original amount 485,374.05 GBP, converted at the ECB reference rate of 19 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

From 12 May 2006 to 4 February 2025, the model agreement of France’s largest ski instructors’ union prohibited instructors of the Écoles du Ski Français from teaching for competing ski schools or their own clients and threatened exclusion for breaches; the Autorité de la concurrence (French Competition Authority) regarded this as a restriction of competition by object on the market for ski tuition. It imposed EUR 3.4 million, for the first time in an ordinary procedure calculated on the basis of the members’ turnover, and ordered the union to amend the rules, publish the decision and, if it cannot pay, call on its members for contributions.

Authority / court

Autorité de la concurrence

Area of law

Competition law · Cartels and collusion

Legal basis

Art. 101 Abs. 1 AEUV; Art. L. 420-1 Code de commerce; Bemessung nach Art. L. 464-2 Code de commerce (Umsetzung der ECN+-Richtlinie)

Action

Fine

Status of proceedings

under appeal

Sector

Other

Published

17 Mar 2026

Checked against the official source on 2 Oct 2026 · Direct link

From 1987 to March 2025, the association of temporary work agencies (around 40 members) obliged its members in its code of ethics not to poach each other’s temporary workers. The Autoridade da Concorrência (Portuguese Competition Authority, AdC) regarded this as an anticompetitive decision by an association in the labour market and imposed 4,519,000 EUR, calculated on the basis of the members’ turnover; the decision can be appealed (date = press release).

Authority / court

Autoridade da Concorrência (AdC)

Area of law

Competition law · Cartels and collusion

Legal basis

Lei da Concorrência (Lei n.º 19/2012), Art. 9.º

Action

Fine

Status of proceedings

unknown

Sector

Other

Published

12 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

In March 2026 the ICO fined a small UK direct marketing company £130,000 and also served an enforcement notice. According to the ICO, over almost eleven months in 2024 the company had staff make more than 230,000 marketing calls to lines that had been on the UK's opt-out register for sales calls (Telephone Preference Service, TPS) for over 28 days, prompting 12 complaints. The ICO treated this as a breach of regulation 21 of PECR.

Authority / court

Information Commissioner's Office (ICO)

Area of law

Data protection · Marketing and consent

Legal basis

Regulations 21 und 24 PECR; section 55A DPA 1998

Action

Fine

Status of proceedings

unknown

Sector

Other

Original amount 130,000 GBP, converted at the ECB reference rate of 12 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

The Openbaar Ministerie (OM, Dutch Public Prosecution Service) imposed penalty orders totalling 1,125,000 EUR on four companies from Barneveld that belonged to the same group at the time and are not named in the releases, consisting of 660,000 EUR in fines and 465,000 EUR in confiscation of unlawfully obtained gains. According to the OM, between 2013 and 2016 the firms accepted excessively contaminated sand, cleaned it inadequately or incorrectly and deliberately mixed it with cleaner sand for reuse, in breach of permit conditions and the Wet milieubeheer (Environmental Management Act) and involving forgery. The companies initially lodged an objection (verzet) but withdrew it, so the penalty orders are final (release of 2 July 2026).

Authority / court

Openbaar Ministerie (OM), Functioneel Parket

Area of law

Environment and sustainability · Waste and hazardous substances

Legal basis

Vorschriften der Umgebungsgenehmigungen (omgevingsvergunningen); Wet milieubeheer; valsheid in geschrift; Strafbefehle des OM

Action

Fine

Status of proceedings

final

Sector

Other

Culpability

intentional

Mitigating circumstances

The companies have adapted or ceased their activities, and measures have been taken within the group.

Published

10 Mar 2026

Checked against the official source on 2 Oct 2026 · Direct link

The Montreal-based World Anti-Doping Agency (WADA), a foundation under Swiss private law, entered into a compliance agreement under PIPEDA with the Privacy Commissioner of Canada, under which an investigation opened in November 2024 following a complaint is held in abeyance and will be discontinued once the agreement is fulfilled. WADA must ensure that anti-doping organisations use athletes' personal information in the ADAMS system only for anti-doping purposes from 1 January 2027, amend the World Anti-Doping Code and the ADAMS agreements accordingly, document a control mechanism and report quarterly. WADA disputes any contravention and the Commissioner's jurisdiction; if it fails to comply, the Commissioner may apply to the Federal Court for an order.

Authority / court

Office of the Privacy Commissioner of Canada (OPC)

Area of law

Data protection

Legal basis

Personal Information Protection and Electronic Documents Act (PIPEDA), Sections 17.1 und 17.2 (Compliance Agreement)

Action

Other

Status of proceedings

unknown

Sector

Other

Published

17 Mar 2026

Checked against the official source on 3 Oct 2026 · Direct link

According to FINTRAC, Northern Isga Foundation is a non-profit charitable organisation based in Glenevis, Alberta, that receives a portion of a casino's revenues and is therefore a reporting entity. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 91,162.50 on the foundation on 2 March 2026. According to FINTRAC's findings, made during a compliance examination, the foundation committed 4 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned written compliance policies and procedures, assessing and documenting money laundering and terrorist financing risks, the compliance training programme and the prescribed review of the compliance programme. According to FINTRAC, the foundation has appealed the decision to the Federal Court. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Northern Isga Foundation", published 26 March 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-03-26-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court

Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

PCMLTFA s. 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c), 156(1)(d), 156(1)(e), 156(1)(f); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA

Action

Fine

Status of proceedings

under appeal

Sector

Other

Published

26 Mar 2026

Original amount 91,162.5 CAD, converted at the ECB reference rate of 2 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Despite repeated follow-ups by the trade union, the cleaning company did not respond to a union member’s access request and also failed to comply with the order of the Danish Data Protection Agency (Datatilsynet) to decide on the request. Datatilsynet reported the company; the case was closed on 2 March 2026 with a fine notice of 60,000 DKK.

Authority / court

Anklagemyndigheden (Bødeforelæg) auf Anzeige der Datatilsynet

Area of law

Data protection · Data subject rights and transparency

Legal basis

DSGVO Art. 15; Nichtbefolgung einer Anordnung der Datatilsynet; databeskyttelsesloven

Action

Fine

Status of proceedings

final

Sector

Other

Original amount 60,000 DKK, converted at the ECB reference rate of 2 Mar 2026.

Checked against the official source on 25 Sep 2026 · Direct link

School and sports academy IMG Academy, LLC of Bradenton, Florida, is paying USD 1,720,000 under a settlement with OFAC for apparent violations of the counternarcotics sanctions. According to OFAC's findings, between 2019 and 2025 IMG Academy entered into tuition agreements for the children of two individuals on the SDN List because of their ties to a sanctioned Mexican drug cartel and processed the related payments; 89 dealings were involved in total. OFAC treated the apparent violations as non-egregious and not voluntarily self-disclosed because an investigation was already under way when the academy reported them; the settlement amount equals the base penalty. Source: U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), enforcement release "IMG Academy, LLC Settles with OFAC for $1.7 Million Related to Apparent Violations of Counternarcotics Sanctions", 12 February 2026, https://ofac.treasury.gov/media/935006/download?inline; summarised in our own words.

Authority / court

U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)

Area of law

Sanctions and export control · Breaches of sanctions and embargoes

Legal basis

Foreign Narcotics Kingpin Sanctions Regulations, 31 C.F.R. § 598.202 (89 mutmaßliche Verstöße); Vergleich nach den Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A

Action

Fine

Status of proceedings

final

Sector

Other

Published

12 Feb 2026

Original amount 1,720,000 USD, converted at the ECB reference rate of 12 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

The ICO fined TMAC Ltd £100,000 and issued an enforcement notice. The ICO found that between 8 February and 24 September 2024 the company made 260,332 unsolicited marketing calls to numbers registered with the Telephone Preference Service (TPS). Recipients were also not given the caller details required by regulation 24 of PECR. The legal basis is regulations 21 and 24 of PECR.

Authority / court

Information Commissioner's Office (ICO)

Area of law

Data protection · Marketing and consent

Legal basis

Regulations 21(1)(b) und 24 PECR; section 55A DPA 1998

Action

Fine

Status of proceedings

unknown

Sector

Other

Original amount 100,000 GBP, converted at the ECB reference rate of 3 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Since 2020, the only association of tour guides in the Azores (57 active members, around 43% of active guides) had recommended a fee table to its members by e-mail as minimum prices. Following a complaint, the Autoridade da Concorrência (Portuguese Competition Authority, AdC) imposed 8,200 EUR, taking the economic situation into account (date = press release).

Authority / court

Autoridade da Concorrência (AdC)

Area of law

Competition law · Cartels and collusion

Legal basis

Lei da Concorrência (Lei n.º 19/2012), Art. 9.º; Art. 101 AEUV

Action

Fine

Status of proceedings

unknown

Sector

Other

Published

29 Jan 2026

Checked against the official source on 25 Sep 2026 · Direct link

The agency conducted telephone pre-screening interviews with applicants on behalf of client companies, recorded them without valid consent, stored them indefinitely and presented itself as the client company in doing so. The Austrian Data Protection Authority (Datenschutzbehörde, DSB) imposed 25,500 EUR (plus 2,550 EUR in costs) for lack of a legal basis and transparency; the company has lodged an appeal against the amount of the fine with the Federal Administrative Court (Bundesverwaltungsgericht).

Authority / court

Datenschutzbehörde

Area of law

Data protection · Data subject rights and transparency

Legal basis

DSGVO Art. 5 Abs. 1 lit. a, c und e, Art. 6 Abs. 1, Art. 12, 13

Action

Fine

Status of proceedings

under appeal

Sector

Other

Employees

Under 50

Mitigating circumstances

No relevant previous violations, cooperation in the proceedings; adjustment of the starting amount to the company's small size.

Checked against the official source on 25 Sep 2026 · Direct link

Following numerous complaints about marketing calls for the gas supplier ZENITH, the Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority) found that the call centre engaged had insufficient security measures and called persons without valid consent. By Decision 44/2025, One Way received 40,000 EUR each as processor and as controller, together with an order to delete the data of persons without valid consent; ZENITH and two other service providers were also held liable (10,000, 10,000 and 5,000 EUR).

Authority / court

Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority)

Area of law

Data protection · Marketing and consent

Legal basis

Art. 5, 6, 7, 29, 32 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Other

Repeat case

yes

Checked against the official source on 25 Sep 2026 · Direct link

Without registering as a data broker, the Texas reseller traded in the names and contact details of millions of people, sorted by illnesses such as Alzheimer's or addiction, by age, presumed ethnicity and political views. In addition to the fine, the California Privacy Protection Agency (CPPA) requires it to stop selling data on all Californians.

Authority / court

California Privacy Protection Agency (CPPA)

Area of law

Data protection · Marketing and consent

Legal basis

California Delete Act (Registrierungspflicht für Datenhändler)

Action

Fine

Status of proceedings

final

Sector

Other

Published

8 Jan 2026

Original amount 45,000 USD, converted at the ECB reference rate of 30 Dec 2025.

Checked against the official source on 25 Sep 2026 · Direct link

In a promotional letter of January 2025 for its paid fan club 'TEAM26', the baseball club Chiba Lotte Marines gave the impression that every new member would definitely receive a ball hand-signed by a player at the booth by the stadium, although only some members received one. Instead of an order, a commitment plan was approved on 23 December 2025 – a board resolution, information for consumers, measures to prevent recurrence, allegedly a partial refund of annual fees and reports on implementation; no infringement was thereby established.

Authority / court

Consumer Affairs Agency (消費者庁, CAA)

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Art. 30, Art. 31 Abs. 1 und 3 (Zusagenverfahren), Verdacht eines Verstoßes gegen Art. 5 Nr. 2 Act against Unjustifiable Premiums and Misleading Representations (不当景品類及び不当表示防止法, Gesetz Nr. 134/1962)

Action

Other

Status of proceedings

unknown

Sector

Other

Published

23 Dec 2025

Checked against the official source on 4 Oct 2026 · Direct link

Four online licensees trading as Paddy Power and Betfair (PPB Entertainment Limited, PPB Counterparty Services Limited, Betfair Casino Limited, TSE Malta LP) will pay a total of £2,000,000 in lieu of a financial penalty under a settlement and contribute to the Commission's investigation costs. An assessment in April and May 2024 found that their customer interaction systems identified signs of harm such as rapidly rising deposits or very long gambling sessions too late; one customer, for example, staked £86,000 within 16 days without a manual account review. The company had already been penalised in 2023 for marketing to vulnerable customers.

Authority / court

Gambling Commission

Area of law

Consumer protection and online retail

Legal basis

s. 116 Gambling Act 2005; SRCP 3.4.3 Abs. 1, 4, 7, 8 und 11 der Licence Conditions and Codes of Practice (LCCP)

Action

Fine

Status of proceedings

final

Sector

Other

Repeat case

yes

Mitigating circumstances

Full cooperation, early acceptance of the failings and swift implementation of an action plan.

Published

17 Dec 2025

Original amount 2,000,000 GBP, converted at the ECB reference rate of 17 Dec 2025.

Checked against the official source on 3 Oct 2026 · Direct link

The CONSOB (Italian securities regulator) imposed a fine of EUR 190,000 on Juventus Football Club S.p.A. under Art. 187-quinquies of the Consolidated Law on Finance (TUF) because market manipulation within the meaning of Art. 187-ter TUF and Art. 15 MAR committed in its interest was attributed to it. According to the findings, the financial statements for 30 June 2020 and 30 June 2021 and the related announcements contained false or misleading information, including on gains from reciprocal player transfers, on deferred salary payments and on buy-back agreements. The decision is not final.

Authority / court

CONSOB (Commissione Nazionale per le Società e la Borsa)

Area of law

Capital markets and financial supervision · Market abuse and insider dealing

Legal basis

Art. 187-ter und 187-quinquies Abs. 1 lit. a D.Lgs. 58/1998 (TUF); Art. 15 Verordnung (EU) 596/2014 (MAR); Art. 6 Abs. 3 Gesetz 689/1981

Action

Fine

Status of proceedings

under appeal

Sector

Other

Culpability

intentional

Mitigating circumstances

The CONSOB noted that the company had strengthened its internal control system after the breaches.

Liability of senior managers

Measures against individuals are not reported here.

Published

2 Jan 2026

Checked against the official source on 28 Sep 2026 · Direct link

At the end of 2008 Aktiengesellschaft Hallenstadion Zürich and Ticketcorner AG agreed that the arena would only be let to organisers selling at least 50% of tickets through Ticketcorner, which hindered other ticketing providers. After the Federal Supreme Court found a competition-law infringement in 2020 and remitted the case (2C_113/2017), the Wettbewerbskommission (WEKO, Swiss Competition Commission) classed both companies' conduct in 2009 to 2011 as abuse of a dominant position and, by decision of 15 December 2025, fined the Hallenstadion around CHF 50,000 and Ticketcorner around CHF 65,000. The arena operator had concluded an amicable settlement; the decision can be appealed to the Federal Administrative Court.

Authority / court

Wettbewerbskommission (WEKO)

Area of law

Competition law · Abuse of market power

Legal basis

Kartellgesetz (KG): Missbrauch einer marktbeherrschenden Stellung; Rückweisung BGer 2C_113/2017 vom 12.02.2020

Action

Fine

Status of proceedings

unknown

Sector

Other

Mitigating circumstances

The arena operator concluded an amicable settlement with WEKO.

Published

22 Jan 2026

Original amount 115,000 CHF, converted at the ECB reference rate of 15 Dec 2025.

Checked against the official source on 2 Oct 2026 · Direct link

The ICO fined ZMLUK Limited £105,000. The ICO found that the company had sent unsolicited marketing emails for energy-saving products; the notice gives the period as 1 January to 21 July 2023. The ICO found a serious breach of regulation 22 of PECR (electronic marketing without consent). Under the notice, timely payment reduces the amount by 20% to £84,000.

Authority / court

Information Commissioner's Office (ICO)

Area of law

Data protection · Marketing and consent

Legal basis

Regulation 22 PECR; section 55A DPA 1998

Action

Fine

Status of proceedings

unknown

Sector

Other

Original amount 105,000 GBP, converted at the ECB reference rate of 11 Dec 2025.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

The FCA, through its supervisor OPBAS, publicly censured the Institute of Certified Bookkeepers. The professional body is responsible for anti-money laundering supervision of more than 3,000 bookkeepers in the UK. The FCA found that between January 2022 and July 2023 it did not supervise its members effectively or on a risk basis; among other things it suspended inspections for more than nine months and did not keep adequate records of its supervision.

Authority / court

Financial Conduct Authority (FCA)

Area of law

Money laundering and terrorist financing

Legal basis

Regulation 16 Oversight of Professional Body AML and CTF Supervision Regulations 2017; Regulations 17 und 46 MLRs 2017

Action

Reprimand or warning

Status of proceedings

final

Sector

Other

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

The FSRA (Financial Services Regulatory Authority, the financial regulator of Abu Dhabi Global Market, ADGM) fined the operator of a business centre, registered as a company service provider, allegedly 51,000 USD for anti-money laundering failings between December 2022 and December 2023. The firm had not carried out a business risk assessment and could not show a risk assessment for any of its 104 customers (tenants), nor had it verified any of them, because its outsourced compliance provider treated only the external operator of the centre as a customer; in addition, after the money laundering reporting officer (MLRO) had been absent for a long period, a replacement was only appointed after about ten months and the regulator was not promptly informed. Without the 20% discount for early settlement the fine would have been 63,750 USD.

Authority / court

Financial Services Regulatory Authority (ADGM)

Area of law

Money laundering and terrorist financing · Customer due diligence

Legal basis

Section 232 FSMR 2015; AML Rules 4.1.1(1), 4.1.1(2)(a) und (d), 6.1.1, 7.1.1(1)(a) und (b), 7.1.2(1)(a), 8.3.1(1)(d), 8.3.2, 8.4.1(c), 12.1.1(1), 15.6.1(d)

Action

Fine

Status of proceedings

final

Sector

Other

Repeat case

no

Mitigating circumstances

No previous non-compliance, cooperation and a remediation programme; 20% discount for early settlement.

Original amount 51,000 USD, converted at the ECB reference rate of 24 Nov 2025.

Checked against the official source on 3 Oct 2026 · Direct link

On 13 November 2025, the Nevada Gaming Control Board (NGCB) filed a disciplinary complaint for unsuitable methods of operation in connection with an illegal bookmaker and at the same time concluded a settlement of 7.8 million USD with conditions attached to the gaming licences. The conditions relate primarily to improving the AML programme and to additional training and awareness-raising for employees; the Nevada Gaming Commission (NGC) adopted the settlement as its order on 20 November 2025 (Case No. 25-03).

Authority / court

Nevada Gaming Commission (NGC) auf Beschwerde des Nevada Gaming Control Board (NGCB)

Area of law

Money laundering and terrorist financing · Customer due diligence

Legal basis

Glücksspielrecht Nevada (unsuitable methods of operation)

Action

Fine

Status of proceedings

final

Sector

Other

Employees

10,000 or more

Mitigating circumstances

Numerous remedial measures already implemented

Published

13 Nov 2025

Original amount 7,800,000 USD, converted at the ECB reference rate of 20 Nov 2025.

Checked against the official source on 27 Sep 2026 · Version 2 · Direct link

The Bundesnetzagentur (Federal Network Agency) fined a call centre focused on energy marketing 104,400 EUR for unlawful telephone advertising. Callers frequently posed falsely as the local energy provider or as the person's own supplier and tried to disguise the promotional nature of the calls.

Authority / court

Bundesnetzagentur (BNetzA)

Area of law

Data protection · Marketing and consent

Legal basis

UWG – Verbot unerlaubter Telefonwerbung gegenüber Verbraucherinnen und Verbrauchern

Action

Fine

Status of proceedings

unknown

Sector

Other

Checked against the official source on 2 Oct 2026 · Direct link

U.S. Customs and Border Protection (CBP) issued a Withhold Release Order: clothing and textiles from Firemount Group Ltd. (Mauritius) are being detained at all US ports of entry because there are indications of forced labour (ILO indicators including abuse of vulnerability, debt bondage, deception, and intimidation and threats).

Authority / court

U.S. Customs and Border Protection

Area of law

Supply chain and human rights · Forced and child labour

Legal basis

19 U.S.C. § 1307 (Tariff Act of 1930, Section 307)

Action

Order

Status of proceedings

unknown

Sector

Other

Published

18 Nov 2025

Checked against the official source on 25 Sep 2026 · Direct link

The ICO fined Lead Pronto Ltd £30,000 and issued an enforcement notice. The ICO found that the company had sent unsolicited text messages promoting government-funded boiler grants. The ICO found a serious breach of regulation 22 of PECR (electronic marketing without consent).

Authority / court

Information Commissioner's Office (ICO)

Area of law

Data protection · Marketing and consent

Legal basis

Regulation 22 PECR; section 55A DPA 1998

Action

Fine

Status of proceedings

unknown

Sector

Other

Original amount 30,000 GBP, converted at the ECB reference rate of 6 Nov 2025.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

In October 2022 the roof of an industrial cool room gave way while seven workers were moving equipment on it; they fell around five metres into the cool room. The Industrial Court convicted the company of breaching its health and safety duty with a fine of AUD 480,000 and of breaching s 46 of the WHS Act with a further AUD 20,000, a total of AUD 500,000.

Authority / court

SafeWork NSW / Industrial Court of NSW

Area of law

Health and safety and employment law · Workplace safety and accidents

Legal basis

ss 32, 19(1) und s 46 Work Health and Safety Act 2011 (NSW)

Action

Fine

Status of proceedings

unknown

Sector

Other

Published

31 Mar 2026

Original amount 500,000 AUD, converted at the ECB reference rate of 31 Oct 2025.

Checked against the official source on 3 Oct 2026 · Direct link

After a cyberattack on the travel agency became public in December 2023, data on 336,759 individuals in its booking system was affected, in some cases including full images of identity cards, passports and birth certificates; part of the data was exfiltrated. The Personal Data Protection Commission (PDPC, Singapore's data protection authority) found negligent breaches of the Accountability Obligation – a data protection officer appointed only in April 2024, and apart from the customer-facing privacy policy no internal policies, no complaints process and no information to staff – and of the Protection Obligation, because there were no contracts with the IT vendors covering security tasks, no security reviews and no multi-factor authentication, and the server was still running the unsupported Windows Server 2012. It imposed 47,000 SGD, rejected objections based on COVID-19 losses and comparable cases, and directed among other things policies, security clauses in vendor contracts and a penetration test by a provider licensed by the Cyber Security Agency (CSA).

Authority / court

Personal Data Protection Commission (PDPC)

Area of law

Data protection · Data subject rights and transparency

Legal basis

Sections 11(3) und 12 PDPA 2012 (Accountability Obligation); Section 24 PDPA (Protection Obligation); Section 48J(1)(a) PDPA (Financial Penalty); Section 48I PDPA (Directions)

Action

Fine

Status of proceedings

unknown

Sector

Other

Culpability

negligent

Mitigating circumstances

Voluntary early admission of the breaches (treated as significantly mitigating) and prompt, effective remediation.

Published

8 Jan 2026

Original amount 47,000 SGD, converted at the ECB reference rate of 31 Oct 2025.

Checked against the official source on 4 Oct 2026 · Direct link

On 29 October 2025 the Autoriteit Financiële Markten (AFM, Dutch Authority for the Financial Markets) fined the audit firm Forvis Mazars Accountants N.V. 446,000 EUR because its quality control system and business operations did not prevent almost 100 professionals at all levels from cheating in tests forming part of technical training between 2020 and 2023, for example by sharing answers or completing tests together. There were no specific rules or controls on the integrity of such tests, and no internal report about it was received. The fine was reduced because of the limited role of the internal tests in the quality system, good cooperation and measures taken, and was accepted in the simplified procedure.

Authority / court

Autoriteit Financiële Markten (AFM)

Area of law

Capital markets and financial supervision · Organisational requirements

Legal basis

Art. 18 Abs. 1 und Art. 21 Abs. 1 Wet toezicht accountantsorganisaties (Wta)

Action

Fine

Status of proceedings

final

Sector

Other

Mitigating circumstances

Limited role of the internal tests in the quality system, good cooperation, recognition of the importance of culture and behaviour, measures against recurrence; simplified settlement.

Published

31 Oct 2025

Checked against the official source on 2 Oct 2026 · Direct link

When API configurations were manually transferred to a new middleware platform (September 2022 to March 2023), a single employee in sole charge omitted an app identifier, so token verification did not apply to the web page of the ArtScience Friends museum programme for at least six months; an attacker exploited this in October 2023 and retrieved data on 665,495 members of the Sands Rewards Lifestyle loyalty programme, which was then offered for sale on the dark web. The Personal Data Protection Commission (PDPC, Singapore's data protection authority) held that the resort had negligently breached the Protection Obligation by relying on this one employee without independent checks or automation. It reduced the provisionally intended 450,000 SGD to 315,000 SGD after the company's representations; no directions were issued because remediation had already been carried out.

Authority / court

Personal Data Protection Commission (PDPC)

Area of law

Data protection · Data breaches and data security

Legal basis

Section 24 Personal Data Protection Act 2012 (Protection Obligation); Section 48J PDPA (Financial Penalty)

Action

Fine

Status of proceedings

unknown

Sector

Other

Culpability

negligent

Repeat case

no

Mitigating circumstances

Otherwise adequate security arrangements, containment on the day of discovery, admission under the Expedited Decision Procedure, cooperation and voluntary notification of all affected individuals.

Published

28 Oct 2025

Original amount 315,000 SGD, converted at the ECB reference rate of 28 Oct 2025.

Checked against the official source on 4 Oct 2026 · Direct link

More than 90 cleaners in industrial, laboratory and healthcare facilities often worked beyond scheduled hours without overtime pay, received no compensation for split shifts and travel time and were unable to take breaks because of excessive workloads. A web of companies concealed the employer; the Notice of Final Findings of 21 October 2025 established 438,204 USD, with OptumCare jointly liable as the client.

Authority / court

California Labor Commissioner's Office (Division of Labor Standards Enforcement)

Area of law

Health and safety and employment law · Working time

Legal basis

California Labor Code § 2810.3; Overtime, Split Shift, Meal and Rest Periods, Mindestlohn

Action

Other

Status of proceedings

unknown

Sector

Other

Liability of senior managers

Measures against individuals are not reported here.

Published

24 Nov 2025

Original amount 438,204 USD, converted at the ECB reference rate of 21 Oct 2025.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

On the website of its 'NOVA' English schools, NOVA Language Company advertised several courses, for example in September 2024, by waiving an enrolment fee of 22,000 JPY (11,000 JPY for a children's course). The company had not charged anyone such a fee over a considerable recent period; the order required a corrective notice, measures to prevent recurrence and cessation.

Authority / court

Consumer Affairs Agency (消費者庁, CAA)

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Art. 7 Abs. 1 i. V. m. Art. 5 Nr. 2 Act against Unjustifiable Premiums and Misleading Representations (不当景品類及び不当表示防止法, Gesetz Nr. 134/1962)

Action

Order

Status of proceedings

unknown

Sector

Other

Published

17 Oct 2025

Checked against the official source on 4 Oct 2026 · Direct link

In March 2023, an employee unintentionally downloaded malicious files; although an alert was triggered after ten minutes, the device was only isolated after 58 hours. Attackers stole around one terabyte of data on 6.6 million people (including pension data and criminal record information). Fines imposed by the UK Information Commissioner's Office (ICO): £8 million against Capita plc and £6 million against Capita Pension Solutions.

Authority / court

Information Commissioner's Office (ICO)

Area of law

Data protection · Data breaches and data security

Legal basis

UK GDPR Art. 5 Abs. 1 lit. f, Art. 32

Action

Fine

Status of proceedings

final

Sector

Other

Employees

10,000 or more

Culpability

negligent

Mitigating circumstances

£45 million had provisionally been proposed; reduced, among other things, for security improvements, credit monitoring for those affected and cooperation with authorities and the NCSC.

Published

15 Oct 2025

Original amount 14,000,000 GBP, converted at the ECB reference rate of 15 Oct 2025.

Checked against the official source on 25 Sep 2026 · Direct link

Waste company Biffa was fined £2.48m and ordered to pay £5,768.06 in costs after a worker at its Bradford waste transfer station was struck and killed by a reversing skip wagon on 10 August 2023. The Health and Safety Executive found that the segregation of pedestrians and vehicles was not effectively monitored; CCTV showed that workers routinely bypassed the protected routes.

Authority / court

Leeds Magistrates' Court (Anklage: Health and Safety Executive)

Area of law

Health and safety and employment law · Workplace safety and accidents

Legal basis

Reg. 5(1) Management of Health and Safety at Work Regulations 1999

Action

Fine

Status of proceedings

final

Sector

Other

Mitigating circumstances

Guilty plea.

Published

17 Oct 2025

Original amount 2,480,000 GBP, converted at the ECB reference rate of 15 Oct 2025.

Checked against the official source on 3 Oct 2026 · Direct link

The operator of a sports facility rented a Bluetooth system with which swimmers were located in the pool via tags and their training was recorded. The Spanish data protection authority (Agencia Española de Protección de Datos, AEPD) imposed 8,000 EUR for the processing of special categories of data and – after a 20% reduction for immediate payment – 4,000, 2,400 and 3,200 EUR for lack of a legal basis, insufficient information and a deficient impact assessment (17,600 EUR in total); the request for reconsideration was unsuccessful.

Authority / court

Agencia Española de Protección de Datos (AEPD)

Area of law

Data protection · Data subject rights and transparency

Legal basis

Art. 6 Abs. 1, Art. 9 Abs. 1, Art. 13, Art. 35 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Other

Mitigating circumstances

Partial immediate payment (20% reduction under Art. 85 LPACAP).

Checked against the official source on 25 Sep 2026 · Direct link

The company had used an automated script to carry out mass queries in the electronic land register and stored data of natural persons without demonstrating a legal basis; it did not respond to requests from the supervisory authority. The Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate, AKI) ordered erasure with proof or a statement of a legal basis with a balancing of interests; a penalty payment of 2,000 EUR was threatened.

Authority / court

Andmekaitse Inspektsioon (AKI)

Area of law

Data protection

Legal basis

§ 56 Abs. 1 IKS; Art. 58 Abs. 2 lit. d, Art. 5 Abs. 1 lit. a, Art. 6 Abs. 1 DSGVO

Action

Order

Status of proceedings

unknown

Sector

Other

Checked against the official source on 25 Sep 2026 · Direct link

The Gambling Commission imposed a financial penalty of £10,000,000, a warning and an additional licence condition requiring an external audit on the operator of unibet.co.uk and uk.bingo.com. Between January 2023 and May 2024, its money laundering risk assessment did not take account of accounts previously closed over money laundering or terrorist financing concerns, so blocked customers could open new accounts; the AML policy was unclear about which level of due diligence applied when, and customers showing clear signs of harm were not contacted. It is the second enforcement action against the company, following one in 2023.

Authority / court

Gambling Commission

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

LC 12.1.1 Abs. 1–3 und LC 12.1.2 sowie SRCP 3.4.3 der Licence Conditions and Codes of Practice (LCCP); s. 117(1)(a) und (b) Gambling Act 2005

Action

Fine

Status of proceedings

unknown

Sector

Other

Repeat case

yes

Mitigating circumstances

The company cooperated throughout the investigation.

Published

22 Oct 2025

Original amount 10,000,000 GBP, converted at the ECB reference rate of 22 Sep 2025.

Checked against the official source on 3 Oct 2026 · Direct link

During an unannounced inspection by the Konkurences padome (Latvian Competition Council) on 6 November 2024 in a suspected cartel case, the company partly refused to provide information, and an internet block set up on a computer was not lifted in time. The authority penalised both as procedural infringements with 18,519.86 EUR and 27,779.80 EUR, totalling 46,299.66 EUR, even though it closed the underlying cartel case for lack of evidence.

Authority / court

Konkurences padome (Lettischer Wettbewerbsrat)

Area of law

Competition law · Cartels and collusion

Legal basis

Art. 9.4 Abs. 1 Nr. 5 Konkurences likums (Wettbewerbsgesetz)

Action

Fine

Status of proceedings

final

Sector

Other

Published

30 Sep 2025

Checked against the official source on 28 Sep 2026 · Direct link

The Environment Agency accepted an enforcement undertaking from Imerys Minerals: the company pays £430,000 to Westcountry Rivers Trust and covers the agency's costs. Between September 2021 and July 2023, china clay effluent had been discharged without a permit at six sites in Cornwall.

Authority / court

Environment Agency

Area of law

Environment and sustainability · Emissions and permits

Legal basis

Reg. 38(1) Environmental Permitting (England and Wales) Regulations 2010/2016

Action

Other

Status of proceedings

final

Sector

Other

Original amount 430,000 GBP, converted at the ECB reference rate of 9 Sep 2025.

Checked against the official source on 3 Oct 2026 · Direct link

From 2013, SURYS supplied security holograms for Ukrainian passports to the state-owned company Polygraph via an interposed Estonian company; the investigation (following a request for mutual legal assistance from Ukraine's National Anti-Corruption Bureau, NABU) concerned misappropriation of public funds, bribery of foreign public officials and money laundering. Public interest fine of 18,363,007 EUR, plus 3,770,000 EUR in damages to the Ukrainian state and a three-year AFA compliance programme.

Authority / court

Parquet national financier (PNF); Validierung durch den Präsidenten des Tribunal judiciaire de Paris

Area of law

Bribery and corruption · Bribery of public officials

Legal basis

Art. 41-1-2 Code de procédure pénale (CJIP); Bestechung ausländischer Amtsträger, Geldwäsche

Action

Fine

Status of proceedings

final

Sector

Other

Employees

250 to 999

Culpability

intentional

Liability of senior managers

The CJIP does not address the criminal liability of natural persons.

Published

3 Sep 2025

Checked against the official source on 25 Sep 2026 · Direct link

According to FINTRAC, Saskatchewan Indian Gaming Authority is a reporting entity in the casino sector. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 1,175,000 on the company on 28 August 2025. According to FINTRAC's findings, made during a compliance examination, the company committed 3 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned suspicious transaction reporting and written compliance policies and procedures. Specifically, according to FINTRAC, four suspicious transaction reports were missing, three reports filed contained no indicators of suspicion, and the regulator found shortcomings in patron risk rating in 41 of 100 instances reviewed. According to FINTRAC, the company has appealed the decision to the Federal Court. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Saskatchewan Indian Gaming Authority", published 12 September 2025, https://fintrac-canafe.canada.ca/pen/amps/pen-2025-09-12-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court

Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)

Area of law

Money laundering and terrorist financing · Suspicious activity reports

Legal basis

PCMLTFA s. 7, 9(1), 9.6(1); PCMLTF Regulations 156(1)(b); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA

Action

Fine

Status of proceedings

under appeal

Sector

Other

Published

12 Sep 2025

Original amount 1,175,000 CAD, converted at the ECB reference rate of 28 Aug 2025.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

In 2020 the company rented two acres of land in Essa Township, presented to the owners as a site for receiving wood to be turned into landscaping material; from April to August 2020, however, hundreds of truckloads of construction and demolition waste were dumped there, and by April 2023 there was still no confirmation that the ordered clean-up had taken place. The court convicted the company under the Environmental Protection Act of depositing waste at an unapproved site and fined it CAD 500,000 plus a victim fine surcharge of CAD 125,000. Measures against individuals are not set out here.

Authority / court

Gericht in Barrie (Ermittlung und Anklage: Ontario Ministry of the Environment, Conservation and Parks)

Area of law

Environment and sustainability · Waste and hazardous substances

Legal basis

Environmental Protection Act (Ontario), RSO 1990, c E.19 – Ablagerung von Abfällen auf einem nicht zugelassenen Abfallstandort

Action

Fine

Status of proceedings

unknown

Sector

Other

Liability of senior managers

Measures against individuals are not set out here.

Published

11 Feb 2026

Original amount 500,000 CAD, converted at the ECB reference rate of 28 Aug 2025.

Checked against the official source on 3 Oct 2026 · Direct link

The FSRA (Financial Services Regulatory Authority, the financial regulator of Abu Dhabi Global Market, ADGM) fined the registered auditor in ADGM, a branch of a foreign company, allegedly 20,400 USD for anti-money laundering failings between February 2022 and February 2024. In seven of 28 customer files reviewed, 397 screening alerts relating to four customers remained unresolved after a change of screening software, positive matches were dismissed without adequate justification, media reports alleging possible evasion of non-UAE sanctions by one customer were missed, the business risk assessment contained no assessment of targeted financial sanctions risk, and the source of funds and wealth of politically exposed persons was not verified. Without the 20% discount for early settlement the fine would have been 25,500 USD.

Authority / court

Financial Services Regulatory Authority (ADGM)

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

Section 232 FSMR 2015; AML Rules 4.1.1(1), 4.1.1(2)(a) und (d), 6.1.1, 7.1.1, 7.1.2(1)(a), 7.1.3, 8.3.1(1)(b), 8.3.2, 8.4.1(c), 8.6.1, 11.2.1(1); Art. 21 Cabinet Decision No. 74 of 2020

Action

Fine

Status of proceedings

final

Sector

Other

Repeat case

no

Mitigating circumstances

No previous breaches of the AML rules, cooperation and substantial remediation (15% reduction); 20% discount for early settlement; the failings concerned only the ADGM entity and no other entities of the UHY group.

Original amount 20,400 USD, converted at the ECB reference rate of 26 Aug 2025.

Checked against the official source on 3 Oct 2026 · Direct link

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) imposed 72,750 CAD on the auditing and accountancy firm with four offices in British Columbia: approved written compliance policies, a documented risk assessment and the prescribed two-yearly effectiveness review were all lacking. The penalty was paid.

Authority / court

Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

Proceeds of Crime (Money Laundering) and Terrorist Financing Act, Part 1, und zugehörige Verordnungen

Action

Fine

Status of proceedings

final

Sector

Other

Published

9 Oct 2025

Original amount 72,750 CAD, converted at the ECB reference rate of 25 Jul 2025.

Checked against the official source on 25 Sep 2026 · Direct link

According to FINTRAC, British Columbia Lottery Corporation is a reporting entity in the casino sector based in Kamloops, British Columbia. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 1,075,000 on the company on 17 July 2025. According to FINTRAC's findings, made during a compliance examination, the company committed 3 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned suspicious transaction reporting, written compliance policies and procedures and enhanced measures for high-risk situations. Specifically, according to FINTRAC, two suspicious transaction reports were missing; the corporation also failed to identify a patron as high risk despite the rate of play and volume of funds and did not apply enhanced due diligence. According to FINTRAC, the company has appealed the decision to the Federal Court. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on British Columbia Lottery Corporation", published 28 August 2025, https://fintrac-canafe.canada.ca/pen/amps/pen-2025-08-28-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court

Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)

Area of law

Money laundering and terrorist financing · Suspicious activity reports

Legal basis

PCMLTFA s. 7, 9.6(1), 9.6(3); PCMLTF Regulations 156(1)(b), 157; Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA

Action

Fine

Status of proceedings

under appeal

Sector

Other

Published

28 Aug 2025

Original amount 1,075,000 CAD, converted at the ECB reference rate of 17 Jul 2025.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

According to FINTRAC, Canadian National Exhibition Association is a reporting entity in the casino sector based in Toronto, Ontario. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 199,000 on the company on 11 July 2025. According to FINTRAC's findings, made during a compliance examination, the company committed 2 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned assessing and documenting money laundering and terrorist financing risks and the prescribed review of the compliance programme. According to FINTRAC, the company has appealed the decision to the Federal Court. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on CNE Casino", published 4 September 2025, https://fintrac-canafe.canada.ca/pen/amps/pen-2025-09-04-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court

Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

PCMLTFA s. 9.6(1); PCMLTF Regulations 156(1)(c), 156(1)(f); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA

Action

Fine

Status of proceedings

under appeal

Sector

Other

Published

4 Sep 2025

Original amount 199,000 CAD, converted at the ECB reference rate of 11 Jul 2025.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

A UK exporter not named by HMRC paid a compound settlement of £1,160,725.67 in May 2025 over alleged breaches of the Russia sanctions. According to HMRC, it had made goods available to Russia. According to HMRC, it was at the time of the notice the largest settlement the authority had concluded for a breach of the Russia sanctions; among the lessons, HMRC highlights the risk of supplying Russian companies with operations in third countries.

Authority / court

HM Revenue & Customs (HMRC)

Area of law

Sanctions and export control · Breaches of sanctions and embargoes

Legal basis

Russia (Sanctions) (EU Exit) Regulations 2019

Action

Fine

Status of proceedings

final

Sector

Other

Published

8 Jul 2025

Original amount 1,160,725.67 GBP, converted at the ECB reference rate of 8 Jul 2025.

Checked against the official source on 3 Oct 2026 · Direct link

The ICO fined the Scottish charity Birthlink £18,000. The ICO found that the organisation had destroyed around 4,800 personal records; according to the ICO, up to ten per cent of them may be irreplaceable.

Authority / court

Information Commissioner's Office (ICO)

Area of law

Data protection · Data breaches and data security

Legal basis

Art. 5(1)(f), 5(2), 32(1)-(2) und 33 UK GDPR; section 155 DPA 2018

Action

Fine

Status of proceedings

unknown

Sector

Other

Original amount 18,000 GBP, converted at the ECB reference rate of 24 Jun 2025.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

The CNIL (French data protection authority) fined Solocal Marketing Services, a subsidiary of the Solocal group, EUR 900,000 and ordered it, subject to a penalty payment of EUR 10,000 per day, to stop electronic marketing without valid consent. On behalf of advertisers, the company had sent SMS and e-mail marketing to contacts that data brokers had obtained through misleadingly designed prize-draw and product-testing forms, and it could not provide proof of consent for one main supplier (Art. L. 34-5 CPCE, the French Post and Electronic Communications Code; Art. 7 GDPR). The company has challenged the sanction before the Conseil d'État (French supreme administrative court).

Authority / court

Commission nationale de l'informatique et des libertés (CNIL), formation restreinte

Area of law

Data protection · Marketing and consent

Legal basis

Art. L. 34-5 Code des postes et des communications électroniques (CPCE); Art. 7 DSGVO

Action

Fine

Status of proceedings

under appeal

Sector

Other

Culpability

negligent

Mitigating circumstances

The CNIL took into account the measures taken since the inspections to achieve compliance.

Published

21 May 2025

Checked against the official source on 2 Oct 2026 · Direct link

The CNIL (French data protection authority) fined the data broker Caloga EUR 80,000. The company had sent e-mail marketing on behalf of advertisers to contacts whose consent had been obtained through misleading prize-draw and product-testing forms, had not allowed one-click unsubscription from all four of its databases and had passed contact data to partners without a sound legal basis (Art. L. 34-5 CPCE, the French Post and Electronic Communications Code; Art. 5(1)(e) and 6 GDPR).

Authority / court

Commission nationale de l'informatique et des libertés (CNIL), formation restreinte

Area of law

Data protection · Marketing and consent

Legal basis

Art. L. 34-5 Code des postes et des communications électroniques (CPCE); Art. 5 Abs. 1 lit. e und Art. 6 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Other

Employees

Under 50

Culpability

negligent

Mitigating circumstances

It was taken into account that the company had ceased its activity entirely in 2024.

Published

27 May 2025

Checked against the official source on 2 Oct 2026 · Direct link

The Gambling Commission imposed a financial penalty of £2,022,000, a warning and an additional licence condition on the betting operator. Between September 2022 and November 2023 the company breached the anti-money laundering licence condition LC 12.1.1, a customer interaction requirement (SRCP 3.4.3 para. 9c) and a specific condition of its licence; it had also not sufficiently considered the AML guidance in OCP 2.1.1. The Commission had already announced a payment by Spreadex in August 2022.

Authority / court

Gambling Commission

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

LC 12.1.1 Abs. 1–3, SRCP 3.4.3 Abs. 9c, besondere Lizenzauflage und OCP 2.1.1 der Licence Conditions and Codes of Practice (LCCP); s. 117(1)(a) und (b) Gambling Act 2005

Action

Fine

Status of proceedings

unknown

Sector

Other

Repeat case

yes

Mitigating circumstances

The company cooperated throughout the investigation.

Published

15 May 2025

Original amount 2,022,000 GBP, converted at the ECB reference rate of 7 May 2025.

Checked against the official source on 3 Oct 2026 · Direct link

Spelinspektionen (Swedish Gambling Authority) issued the gambling operator Spooniker Ltd (licensed for sites including unibet.se, mariacasino.se and bingo.se) a warning and an administrative fine of 10,000,000 SEK. A follow-up review covering May 2023 to April 2024 again found that, for the five new customers with the highest deposits, the company had not established the source of funds sufficiently or in good time; several of these customers were able to keep depositing even though the deposits could not plausibly have been financed from their known annual taxable income. The authority considered the breaches serious and repeated (earlier decision of 17 November 2022); the Förvaltningsrätten (Administrative Court) in Linköping dismissed the appeal on 2 July 2026, and the judgment is final.

Authority / court

Spelinspektionen

Area of law

Money laundering and terrorist financing · Customer due diligence

Legal basis

3 kap. 1, 13 och 16 §§ samt 4 kap. 1 och 2 §§ lagen (2017:630) om åtgärder mot penningtvätt och finansiering av terrorism; 18 kap. 17–19 §§ spellagen (2018:1138)

Action

Fine

Status of proceedings

final

Sector

Other

Repeat case

yes

Published

6 May 2025

Original amount 10,000,000 SEK, converted at the ECB reference rate of 5 May 2025.

Checked against the official source on 28 Sep 2026 · Direct link

From September 2022 to November 2023 the audit firm registered in ADGM, subject to AML duties as a DNFBP, lacked an adequate business risk assessment, did not sufficiently examine customers' ownership structures and businesses, omitted a customer risk assessment in one case and did not appoint a new MLRO in time. After a 20% discount for early settlement the FSRA allegedly imposed USD 14,080 (otherwise USD 17,600).

Authority / court

Financial Services Regulatory Authority (ADGM)

Area of law

Money laundering and terrorist financing · Customer due diligence

Legal basis

Section 232 Financial Services and Markets Regulations 2015 (ADGM); AML Rules 6.1.1, 7.1.1, 8.3.1, 8.3.2, 12.1.1 (ADGM AML Rules)

Action

Fine

Status of proceedings

final

Sector

Other

Mitigating circumstances

Early settlement (20% discount), full cooperation and substantial remediation.

Original amount 14,080 USD, converted at the ECB reference rate of 30 Apr 2025.

Checked against the official source on 3 Oct 2026 · Direct link

A County Court jury convicted SKM Services Pty Ltd of aggravated pollution – having negligently caused or allowed an environmental hazard that created a considerable risk of serious danger to public health – and of three counts of air pollution; the company was fined 1.14 million AUD. The 2017 fire at the recycling plant in Coolaroo had spread through stockpiles of cardboard and other recyclables, burned for more than a week and led to evacuations in the neighbourhood; according to the court's findings, the company and its director contributed to the extent of the pollution by increasing the volumes stored although an earlier fire had reduced the processing capacity. Measures against individuals are not set out here.

Authority / court

Environment Protection Authority Victoria (EPA Victoria)

Area of law

Environment and sustainability · Waste and hazardous substances

Legal basis

Environment Protection Act 1970 (Vic): schwere Umweltverschmutzung (aggravated pollution), Luftverschmutzung

Action

Fine

Status of proceedings

unknown

Sector

Other

Culpability

negligent

Liability of senior managers

Measures against individuals are not set out here.

Published

16 Apr 2025

Original amount 1,140,000 AUD, converted at the ECB reference rate of 16 Apr 2025.

Checked against the official source on 3 Oct 2026 · Direct link

Informa D&B processed data on sole traders that originated from the business census kept by the chambers of commerce and had been acquired through a contract with Camerdata, without a legal basis and without informing the data subjects. The AEPD imposed 900,000 EUR each for breaching Art. 6(1) and Art. 14 GDPR, 1,800,000 EUR in total, and ordered the processing to stop and the data to be erased; the request for reconsideration was dismissed.

Authority / court

Agencia Española de Protección de Datos (AEPD)

Area of law

Data protection · Data subject rights and transparency

Legal basis

Art. 6 Abs. 1, Art. 14 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Other

Published

19 Dec 2025

Checked against the official source on 28 Sep 2026 · Direct link

In 2022, attackers used brute force to penetrate the law firm's network via a rarely used administrator account without MFA and stole 32 GB of highly sensitive data, which appeared on the dark web. The firm only learned of this from the National Crime Agency and reported the incident to the UK Information Commissioner's Office (ICO) only 43 days later.

Authority / court

Information Commissioner's Office (ICO)

Area of law

Data protection · Data breaches and data security

Legal basis

UK GDPR Art. 5 Abs. 1 lit. f, Art. 32 Abs. 1 und 2, Art. 33 Abs. 1

Action

Fine

Status of proceedings

unknown

Sector

Other

Employees

Under 50

Culpability

negligent

Published

16 Apr 2025

Original amount 60,000 GBP, converted at the ECB reference rate of 14 Apr 2025.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Two gym operators announced a fee increase of 6 EUR a month and treated silence or the failure to exercise a special right of termination as consent. In an action brought by the Austrian Federal Chamber of Labour (Bundesarbeitskammer), the OGH upheld the prohibition of such increases without express agreement and the publication of the judgment; it dismissed claims for repayment and information.

Authority / court

Oberster Gerichtshof (OGH), GZ 4 Ob 51/25s

Area of law

Consumer protection and online retail · Information duties in online retail

Legal basis

§ 6 Abs. 1 Z 2, § 28a KSchG; §§ 1a, 14 UWG

Action

Order

Status of proceedings

final

Sector

Other

Checked against the official source on 25 Sep 2026 · Direct link

The MTE (Ministry of Labour and Employment) entered Gerezim Mineração Ltda. on 6 October 2025 in the register of employers that have kept workers in conditions akin to slavery (the ‘Lista Suja’). The entry followed a labour inspection in 2024 at Fazenda Pindaíba in Bocaiúva (MG) involving 34 affected workers; the administrative finding was issued on 4 April 2025.

Authority / court

Ministério do Trabalho e Emprego (MTE), Inspeção do Trabalho

Area of law

Supply chain and human rights · Forced and child labour

Legal basis

Portaria Interministerial MTE/MDHC/MIR nº 18/2024, Art. 2

Action

Other

Status of proceedings

unknown

Sector

Other

Published

6 Oct 2025

Checked against the official source on 3 Oct 2026 · Direct link

The college failed to pay 14 employees wages of almost CA$185,000 and ignored the labour inspectorate's orders to pay from 2019/2020. The court imposed CA$270,000 on the company, in addition to the outstanding wages.

Authority / court

Provincial Offences Court Toronto (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)

Area of law

Health and safety and employment law · Minimum wage and undeclared work

Legal basis

Employment Standards Act, 2000 (Ontario), ss. 103(8), 106, 132, 136

Action

Fine

Status of proceedings

unknown

Sector

Other

Liability of senior managers

Measures against individuals are not reported here.

Published

28 May 2025

Original amount 270,000 CAD, converted at the ECB reference rate of 28 Mar 2025.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

The ICO fined AFK Letters Co Ltd £90,000 and also issued an enforcement notice. The ICO found that between January and September 2023 the company made around 95,000 marketing calls to numbers registered with the Telephone Preference Service, which led to complaints to the ICO and the TPS. The company could not show that the people called had consented. Early payment reduces the penalty to £72,000.

Authority / court

Information Commissioner's Office (ICO)

Area of law

Data protection · Marketing and consent

Legal basis

Regulation 21 PECR; section 55A DPA 1998; section 40 DPA 1998 (Enforcement Notice)

Action

Fine

Status of proceedings

unknown

Sector

Other

Original amount 90,000 GBP, converted at the ECB reference rate of 27 Mar 2025.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

The Colosseum's ticketing service provider did not prevent tour operators from buying up basic tickets in bulk using bots, and itself reserved large allocations for more expensive packages; as a result, visitors could hardly find regular tickets. The AGCM imposed a fine of 7 million EUR on CoopCulture and further fines on six tour providers (including Tiqets, GetYourGuide, Musement), almost 20 million EUR in total.

Authority / court

Autorità Garante della Concorrenza e del Mercato (AGCM)

Area of law

Consumer protection and online retail · Misleading advertising and pricing

Legal basis

Art. 20, comma 2 Codice del Consumo (CoopCulture); Artt. 24, 25, 23 comma 1 lett. bb-bis (Touranbieter)

Action

Fine

Status of proceedings

unknown

Sector

Other

Published

8 Apr 2025

Checked against the official source on 25 Sep 2026 · Direct link

On 14 March 2025 OFSI published a report on breaches by three UK charities – Sahara Hands, Peculiar Peoples' Palace Ministries and Impact Planet – of information requirements under counter-terrorism sanctions law; OFSI did not impose a monetary penalty. According to OFSI's findings, the organisations had failed without reasonable excuse to provide information in response to a formal request, despite three letters. OFSI made clear that this concerns an information offence only and that it holds no information indicating any further breach of the sanctions regulations. OFSI considers it possible that out-of-date contact details on the Charity Commission register played a role, but did not treat this as mitigating. Type of measure: Breach published by OFSI instead of a monetary penalty (disclosure under s. 149(3) PACA 2017). The publication does not mention any pending review. Source: Office of Financial Sanctions Implementation (OFSI), HM Treasury, "Disclosure notice: 14 March 2025", 14 March 2025, https://www.gov.uk/government/publications/disclosure-notice-14-march-2025. Contains public sector information licensed under the Open Government Licence v3.0 (https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/).

Authority / court

HM Treasury, Office of Financial Sanctions Implementation (OFSI)

Area of law

Sanctions and export control · Breaches of sanctions and embargoes

Legal basis

Counter-Terrorism (International Sanctions) (EU Exit) Regulations 2019, reg. 36(6); Veröffentlichung nach s. 149(3) Policing and Crime Act 2017

Action

Other

Status of proceedings

unknown

Sector

Other

Published

14 Mar 2025

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

The CNMV (Comisión Nacional del Mercado de Valores, Spanish securities market regulator) found that the two companies had committed market manipulation when trading in shares of a listed Spanish photovoltaic company in the fourth quarter of 2022. On 5 March 2025 the CNMV Board imposed EUR 1,500,000 each on Liquidaciones Vizcaya SL and Albujón Solar 81 SL, EUR 3,000,000 in total. The decision is final as regards the two companies.

Authority / court

Comisión Nacional del Mercado de Valores (CNMV)

Area of law

Capital markets and financial supervision · Market abuse and insider dealing

Legal basis

Art. 282.15 Ley del Mercado de Valores (Real Decreto Legislativo 4/2015) i. V. m. Art. 15 MAR

Action

Fine

Status of proceedings

final

Sector

Other

Liability of senior managers

Measures against individuals are not reported here.

Published

8 Aug 2025

Checked against the official source on 28 Sep 2026 · Direct link

The FSRA (Financial Services Regulatory Authority, the financial regulator of Abu Dhabi Global Market, ADGM) withdrew, with effect from 27 February 2025, the law firm's registration as a designated non-financial business or profession (DNFBP) for anti-money laundering purposes, which it needs to operate in ADGM. The firm had not filed its annual AML returns for 2019 to 2023 and, in the regulator's view, lacked adequate systems and controls; fines had already been imposed in 2021 (10,000 USD for the missing 2019 return) and in 2023 (26,000 USD for the missing goAML registration). The Decision Notice of 21 January 2025 was not referred to the Appeals Panel.

Authority / court

Financial Services Regulatory Authority (ADGM)

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

Section 251 FSMR 2015; AML Rules 4.6.1, 15.2.1(1)(b), 15.7.1(2)(c), 15.7.2(1)(a) und (b)

Action

Order

Status of proceedings

final

Sector

Other

Repeat case

yes

Checked against the official source on 3 Oct 2026 · Direct link

In 2020, Synot and a sole trader jointly acquired control of the gambling operator SLOV-MATIC, transferred shares and replaced corporate bodies before notifying the concentration. Under a settlement, the Protimonopolný úrad Slovenskej republiky (Antimonopoly Office of the Slovak Republic, PMÚ SR) imposed 400,000 EUR on Synot and 28,500 EUR on the entrepreneur; final since 7 March 2025.

Authority / court

Protimonopolný úrad Slovenskej republiky (PMÚ SR)

Area of law

Competition law · Merger control

Legal basis

Slowakisches Wettbewerbsschutzgesetz (Anmeldepflicht und Vollzugsverbot)

Action

Fine

Status of proceedings

final

Sector

Other

Mitigating circumstances

Voluntary subsequent notification, admission and settlement (50% reduction).

Published

10 Mar 2025

Checked against the official source on 27 Sep 2026 · Version 2 · Direct link

The online operator will pay £1,187,500 in lieu of a financial penalty under a settlement and contribute to the Commission's investigation costs. The settlement also includes a divestment of £220,334, which is not included in the amount shown. A compliance assessment found breaches between May 2023 and October 2024 of the anti-money laundering licence condition LC 12.1.1 para. 3 and of requirements on customer interaction, customer identification, information to customers, reporting of key events and display of rules; the self-exclusion requirements were breached from October 2022 to May 2024, so that, for example, one self-excluded customer was able to set up more than 100 accounts. The Commission had already announced a fine against the company in 2022.

Authority / court

Gambling Commission

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

s. 116 Gambling Act 2005; LC 12.1.1 Abs. 3, SRCP 3.4.3, SRCP 3.9.1, LC 4.2.1, LC 15.2.1, SRCP 4.2.6 und SRCP 3.5.3 der Licence Conditions and Codes of Practice (LCCP)

Action

Fine

Status of proceedings

final

Sector

Other

Repeat case

yes

Mitigating circumstances

An action plan following the December 2023 assessment, full cooperation with regular updates, early acceptance of the failings and a voluntarily agreed external audit on anti-money laundering and safer gambling, including to improve internal training.

Published

4 Mar 2025

Original amount 1,187,500 GBP, converted at the ECB reference rate of 4 Feb 2025.

Checked against the official source on 3 Oct 2026 · Direct link

The Sø- og Handelsretten (Danish Maritime and Commercial High Court) imposed a civil fine of 20,000,000 DKK on the accounting and IT service provider ECIT Account A/S. From 2004 to 2020 the company acted as cartel facilitator, formalising and maintaining an agreement among several nightclubs not to open branches in each other's towns or within a set radius, among other things through the chair of their joint purchasing company. It was the first civil competition fine imposed by a court since the 2021 legislative amendment; the Konkurrencerådet (Danish Competition Council) had sought at least 30 million DKK. The decision is not final.

Authority / court

Sø- og Handelsretten (auf Bußgeldantrag des Konkurrencerådet)

Area of law

Competition law · Cartels and collusion

Legal basis

Konkurrenceloven § 6 stk. 1, jf. stk. 2 nr. 3, jf. stk. 3; § 23 stk. 1 nr. 1; § 23 b

Action

Fine

Status of proceedings

under appeal

Sector

Other

Culpability

intentional

Mitigating circumstances

No proven economic benefit from facilitating the agreement; the company did not initiate the cartel.

Published

27 Jan 2025

Original amount 20,000,000 DKK, converted at the ECB reference rate of 27 Jan 2025.

Checked against the official source on 28 Sep 2026 · Direct link

The CONSOB (Italian securities regulator) imposed a fine of 120,000 EUR on the audit firm BDO Italia S.p.A. under Art. 62(5) of Legislative Decree 231/2007. In its audit engagements for a crypto-asset service provider and its parent company, BDO had, between 17 June 2021 and 2 January 2023, inadequately assessed the clients' money laundering risk, failed to apply enhanced due diligence and neglected ongoing monitoring. The Corte d'Appello (Court of Appeal) of Milan dismissed the firm's objection on 29 April 2026.

Authority / court

CONSOB (Commissione Nazionale per le Società e la Borsa)

Area of law

Money laundering and terrorist financing · Customer due diligence

Legal basis

Art. 15 Abs. 2, 17 Abs. 3, 19 Abs. 1 lit. d, 24 Abs. 1 und 62 Abs. 5 D.Lgs. 231/2007; Art. 6, 20, 28 und 31 CONSOB-Verordnung Nr. 20570/2018

Action

Fine

Status of proceedings

unknown

Sector

Other

Culpability

negligent

Repeat case

yes

Mitigating circumstances

The CONSOB noted the firm's cooperation, albeit required of it, during the on-site inspection and the adjustments to its internal procedures that it had since begun.

Published

30 Jan 2025

Checked against the official source on 28 Sep 2026 · Direct link

In January 2025 the Competition Tribunal (Hong Kong's specialist competition court) imposed allegedly agreed penalties on two cleaning companies that, from at least May 2016 to August 2018, exchanged confidential bid information in 17 tenders of the Hong Kong Housing Authority (the public housing authority) for cleaning services at public housing estates (contract value around 180 million HKD) – price fixing under the First Conduct Rule (the ban on anti-competitive agreements); the case came to light through a complaint from a group that included cleaners at a housing estate. Hong Kong Commercial Cleaning Services Limited received 10,960,000 HKD, and Man Shun Hong Kong & Kln Cleaning Company Limited received 11,300,000 HKD on 20 January 2025. The amount and the facts have not been confirmed against the primary source.

Authority / court

Competition Tribunal (Hongkong), auf Antrag der Competition Commission

Area of law

Competition law · Cartels and collusion

Legal basis

Competition Ordinance (Cap. 619), s. 6 (First Conduct Rule), s. 91 (Beteiligung), s. 93(1) (pecuniary penalty), ss. 101–102 (Disqualifikation)

Action

Fine

Status of proceedings

final

Sector

Other

Mitigating circumstances

Cooperation discount of 9% for Hong Kong Commercial Cleaning (admission only after the trial dates had been fixed, less than five months before trial); for Man Shun a cooperation discount of 15% (admission before any witness statements were filed) and a further 20% reduction because the full penalty would have undermined its viability; payment in four and eight quarterly instalments respectively.

Liability of senior managers

Measures against individuals are not set out here.

Published

20 Jan 2025

Original amount 22,260,000 HKD, converted at the ECB reference rate of 20 Jan 2025.

Checked against the official source on 3 Oct 2026 · Direct link

Under a court settlement (Stipulation and Order of Settlement) with the US Department of Justice and the EPA, Stericycle will pay a civil penalty of 9,500,000 USD for RCRA violations in its hazardous waste transport, storage and disposal business, which it operated until April 2020. The company lost track of shipments, delivered waste without the required manifests or to facilities not chosen by the customer, stored it too long at transfer facilities and failed to submit thousands of manifests to the EPA's e-Manifest system on time. According to the EPA, it is the first judicial action to enforce the e-Manifest requirements. The authority allegedly made the findings set out here; this account is not based on a final judgment.

Authority / court

U.S. Environmental Protection Agency (EPA) / U.S. Department of Justice (U.S. District Court, Southern District of New York)

Area of law

Environment and sustainability · Waste and hazardous substances

Legal basis

Resource Conservation and Recovery Act (RCRA), 42 U.S.C. § 6901 ff., e-Manifest-Vorschriften

Action

Fine

Status of proceedings

unknown

Sector

Other

Published

17 Jan 2025

Original amount 9,500,000 USD, converted at the ECB reference rate of 17 Jan 2025.

Checked against the official source on 3 Oct 2026 · Direct link

The operator of admiralcasino.co.uk will pay £977,887 in lieu of a financial penalty under a settlement and contribute to the Commission's investigation costs. The settlement also includes a divestment of £22,113, which is not included in the amount shown. Between September 2022 and June 2023 it did not implement its money laundering controls effectively – a bank statement submitted as proof of address showing unusual transactions was only scrutinised four months later – and between December 2022 and June 2023 its customer interaction fell short of the requirements. The Commission had already accepted a regulatory settlement from the company in 2021.

Authority / court

Gambling Commission

Area of law

Money laundering and terrorist financing · Internal controls

Legal basis

s. 116 Gambling Act 2005; LC 12.1.1 Abs. 3 und SRCP 3.4.3 Abs. 1 und 8 der Licence Conditions and Codes of Practice (LCCP)

Action

Fine

Status of proceedings

final

Sector

Other

Repeat case

yes

Mitigating circumstances

A swift action plan with progress updates, full cooperation with information provided by agreed deadlines and early acceptance of the failings.

Published

9 Jan 2025

Original amount 977,887 GBP, converted at the ECB reference rate of 9 Jan 2025.

Checked against the official source on 3 Oct 2026 · Direct link

After a wooden pallet collapsed in 2021, sodium hypochlorite (bleach) ran into a manhole that the specialist packing company believed led to the foul sewer; in fact it discharged into the River Holme, and more than 800 fish died. Fine of 2,666.67 GBP after an early guilty plea, 8,973.67 GBP in total including costs and victim surcharge. According to its annual accounts, the business had an average of 25 employees.

Authority / court

Kirklees Magistrates' Court (Anklage: Environment Agency)

Area of law

Environment and sustainability · Waste and hazardous substances

Legal basis

Regulation 12(1)(b) und 38(1)(a) Environmental Permitting (England and Wales) Regulations 2016

Action

Fine

Status of proceedings

unknown

Sector

Other

Employees

Under 50

Culpability

negligent

Mitigating circumstances

Early guilty plea, full cooperation, clean-up and new storage and handling procedures

Published

24 Jan 2025

Original amount 2,666.67 GBP, converted at the ECB reference rate of 9 Jan 2025.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

The Bundesnetzagentur (Federal Network Agency) fined a call centre marketing electricity and gas supply contracts 225,000 EUR for unlawful telephone advertising. According to the agency, the share of complaints about energy sales calls fell in 2024, partly because of its large-scale proceedings in the energy sector.

Authority / court

Bundesnetzagentur (BNetzA)

Area of law

Data protection · Marketing and consent

Legal basis

UWG – Verbot unerlaubter Telefonwerbung gegenüber Verbraucherinnen und Verbrauchern

Action

Fine

Status of proceedings

unknown

Sector

Other

Checked against the official source on 7 Oct 2026 · Version 2 · Direct link

From 2022 to March 2024, the Croatian Hunting Association offered hunter training below cost and financed this from areas in which it holds a statutory monopoly in order to drive out competitors. The Agencija za zaštitu tržišnog natjecanja (Croatian Competition Agency, AZTN) imposed 89,935.20 EUR and ordered separate cost accounting; the High Administrative Court dismissed the action on 17 December 2025.

Authority / court

Agencija za zaštitu tržišnog natjecanja (AZTN)

Area of law

Competition law · Abuse of market power

Legal basis

Art. 13 Nr. 1 Zakon o zaštiti tržišnog natjecanja (ZZTN)

Action

Fine

Status of proceedings

final

Sector

Other

Published

10 Feb 2025

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

A Spanish professional sports organisation required its members to control access to certain spectator areas biometrically without first carrying out a valid data protection impact assessment. The Spanish data protection authority AEPD imposed a fine of EUR 1 million for breaching Art. 35 GDPR and ordered the biometric processing to be suspended until a proper impact assessment is in place.

Authority / court

Agencia Española de Protección de Datos (AEPD)

Area of law

Data protection

Legal basis

Art. 35 DSGVO (Art. 83 Abs. 4 lit. a DSGVO)

Action

Fine

Status of proceedings

unknown

Sector

Other

Checked against the official source on 28 Sep 2026 · Direct link

According to the Federal Trade Commission (FTC, the US consumer protection authority), three attacks between 2014 and 2020 affected more than 344 million guests worldwide, including 5.25 million unencrypted passport numbers; one intrusion went undetected for 14 months. The FTC alleges inadequate password, access, firewall and segmentation controls, failure to patch, insufficient logging and too little MFA; the order finalised in December 2024 requires a security programme with annual certification to the FTC for 20 years, independent assessments every two years, data minimisation and a deletion option for US customers. In parallel, Marriott pays 52 million USD to 49 states and Washington, D.C.

Authority / court

Federal Trade Commission (FTC)

Area of law

Information security and cyber · Security measures and risk management

Legal basis

Section 5 FTC Act

Action

Order

Status of proceedings

final

Sector

Other

Employees

10,000 or more

Published

20 Dec 2024

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Californian musical instrument manufacturer Córdoba Music Group LLC is paying USD 41,591 under a settlement with OFAC for apparent violations of the Iran sanctions. According to OFAC's findings, between November 2019 and March 2022 the company made nine shipments of instruments and accessories worth USD 118,831 to a trading company in Dubai, knowing that the goods were destined for an Iranian distributor. According to OFAC, the company apparently did not realise, partly owing to a lack of compliance training, that indirect exports to Iran were prohibited. This came to light after the company was acquired by a new owner. OFAC treated the apparent violations as non-egregious and voluntarily self-disclosed; the base penalty was USD 59,416. Source: U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), enforcement release "Córdoba Music Group LLC Settles with OFAC for $41,591 Related to Apparent Violations of the Iranian Transactions and Sanctions Regulations", 18 December 2024, https://ofac.treasury.gov/media/933726/download?inline; summarised in our own words.

Authority / court

U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)

Area of law

Sanctions and export control · Breaches of sanctions and embargoes

Legal basis

Iranian Transactions and Sanctions Regulations, 31 C.F.R. § 560.204(a) (neun Lieferungen); Vergleich nach den Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A

Action

Fine

Status of proceedings

final

Sector

Other

Published

18 Dec 2024

Original amount 41,591 USD, converted at the ECB reference rate of 18 Dec 2024.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Following a complaint – one of several complaints about cookie banners lodged with European data protection authorities – the Swedish Authority for Privacy Protection (IMY) found that the betting operator did not make withdrawing consent as easy as giving it and, through the misleading design of the banner (choice of colours, contrast, rejection only as a link), made informed, freely given consent more difficult. IMY issued a reprimand; ATG had since changed the banner.

Authority / court

Integritetsskyddsmyndigheten (IMY)

Area of law

Data protection · Cookies and tracking

Legal basis

DSGVO Art. 6, Art. 7 Abs. 3

Action

Reprimand or warning

Status of proceedings

unknown

Sector

Other

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

The South African subsidiary of McKinsey & Company entered into a three-year DPA with a penalty of USD 122,850,000; up to half is credited against payments to South African authorities. According to the Department, between at least 2012 and 2016 it obtained confidential information from two South African state-owned companies (logistics and energy) on consulting contracts and bid knowing that South African partner firms would pass part of their fees on to officials as bribes. According to the Department, the profit from the scheme was about USD 85 million.

Authority / court

U.S. Department of Justice (Criminal Division, Fraud Section; USAO Southern District of New York)

Area of law

Bribery and corruption · Bribery of public officials

Legal basis

Foreign Corrupt Practices Act (FCPA): Verschwörung zum Verstoß gegen die Anti-Bribery-Vorschriften (Criminal Information, Southern District of New York)

Action

Fine

Status of proceedings

unknown

Sector

Other

Mitigating circumstances

Credit was given for immediate, proactive cooperation, reporting of discovered attempts to delete records, personnel consequences, additional anti-corruption training in Africa and a temporary halt to work for state-owned enterprises.

Liability of senior managers

Measures against individuals are not reported here.

Published

5 Dec 2024

Original amount 122,850,000 USD, converted at the ECB reference rate of 5 Dec 2024.

Checked against the official source on 28 Sep 2026 · Direct link

The ICO fined Money Bubble Ltd £120,000 and issued an enforcement notice. The ICO found that in October and November 2022 the company made around 169,000 marketing calls to numbers registered with the Telephone Preference Service without being able to show consent; complaints were made to the ICO and the TPS. Early payment reduces the penalty to £96,000.

Authority / court

Information Commissioner's Office (ICO)

Area of law

Data protection · Marketing and consent

Legal basis

Regulations 21 und 24 PECR; section 55A DPA 1998; section 40 DPA 1998 (Enforcement Notice)

Action

Fine

Status of proceedings

unknown

Sector

Other

Original amount 120,000 GBP, converted at the ECB reference rate of 5 Dec 2024.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Without informing them, the residence permit consultancy sent a client couple’s marriage certificate and proof of salary to a sister company in Georgia for translation; the documents subsequently appeared publicly on the Scribd platform. The Επίτροπος Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Commissioner for Personal Data Protection) imposed 2,000 EUR each for an impermissible transfer to a third country and for lack of security measures, as well as a reprimand for insufficient cooperation.

Authority / court

Επίτροπος Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Commissioner for Personal Data Protection)

Area of law

Data protection · International data transfers

Legal basis

Art. 5 Abs. 1 lit. f, Art. 31, Art. 44 DSGVO

Action

Fine

Status of proceedings

unknown

Sector

Other

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

The Комисия за защита на конкуренцията (Bulgarian Commission for the Protection of Competition, KZK) found that three suppliers had fixed prices and shared markets in public tenders by various contracting authorities for professional work shoes (Art. 15 ZZK – Bulgarian Protection of Competition Act, Art. 101 TFEU). Sanctions: 1,678,897 leva (Technomat-Merkuriy), 657,675 leva (disabled persons’ cooperative Zdravohod) and 409,424 leva (Kavaler Union 2001), a total of 2,745,996 leva. Appeals have been lodged against the decision.

Authority / court

Комисия за защита на конкуренцията (КЗК, Bulgarische Wettbewerbskommission)

Area of law

Competition law · Cartels and collusion

Legal basis

Art. 15 Abs. 1 Nr. 1 und 2 ZZK; Art. 101 Abs. 1 lit. a und c AEUV

Action

Fine

Status of proceedings

under appeal

Sector

Other

Original amount 2,745,996 BGN, converted at the ECB reference rate of 21 Nov 2024.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

The company entered into a three-year DPA; under the guidelines USD 54 million would have been appropriate, but because of a demonstrated inability to pay a penalty of USD 10 million was agreed, of which up to USD 4 million is credited against the SEC civil penalty. From 2017 to 2019 the company, then trading as 500.com, agreed to pay about USD 1.9 million to consultants, intended to reach Japanese officials as cash, travel, entertainment and gifts, in order to win an integrated resort bid in Japan; the payments were booked as consultancy fees under sham contracts. The authority allegedly made the findings set out here; this account is not based on a final judgment.

Authority / court

U.S. Department of Justice (Criminal Division, Fraud Section; USAO District of New Jersey)

Area of law

Bribery and corruption · Bribery of public officials

Legal basis

Foreign Corrupt Practices Act (FCPA): Verschwörung zum Verstoß gegen die Anti-Bribery- und Books-and-Records-Vorschriften sowie Verstoß gegen die Books-and-Records-Vorschriften (Criminal Information, District of New Jersey)

Action

Fine

Status of proceedings

final

Sector

Other

Mitigating circumstances

The penalty was capped at USD 10 million because of the company's financial condition; limited, reactive cooperation and remediation were credited (10% reduction off the bottom of the guidelines range).

Liability of senior managers

Measures against individuals are not set out here.

Published

18 Nov 2024