Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 1,370 cases from 35 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by area of lawAll areas of law
Who?
by company- Google LLC €1.19bn 37 % · 1 case
- Google €890m 28 % · 1 case
- Apple €500m 16 % · 2 cases
- Cadence Design Systems Inc. €120.1m 4 % · 1 case
- Comunicaciones Celulares S.A. (TIGO Guatemala) €102.1m 3 % · 1 case
- Apple Inc., Apple Distribution International Ltd, Apple Italia S.r.l. €98.6m 3 % · 1 case
- Anonymised companies €79.5m 2 % · 17 cases
- Vodafone GmbH €45m 1 % · 1 case
- Free Mobile SAS und Free SAS €42m 1 % · 1 case
- Telefónica de España, S.A.U. €20m 1 % · 1 case
- 52 more€108.7m
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 0 | — |
| Q1 2024 | 0 | — |
| Q2 2024 | 0 | — |
| Q3 2024 | 0 | — |
| Q4 2024 | 0 | — |
| Q1 2025 | 1 | €342,745 |
| Q2 2025 | 0 | — |
| Q3 2025 | 0 | — |
| Q4 2025 | 0 | — |
| Q1 2026 | 0 | — |
| Q2 2026 | 0 | — |
| Q3 2026 | 0 | — |
1 case
10 Mar 2025 Telenor ASATelenor ASA: NOK 4m fine over data protection officer set-up and internal control €342,745
Following an inspection, Datatilsynet (Norwegian Data Protection Authority) fined Telenor ASA NOK 4,000,000 because the group parent had not put in place appropriate organisational measures and policies for the position of its data protection officer (Art. 24(1) and (2) GDPR). The authority also issued a reprimand because for about one year there was no reporting line from the data protection officer to the highest management level, and ordered the company to carry out a documented assessment of whether it must designate a data protection officer and to revise its record of processing activities. According to Datatilsynet, the decision has been appealed and a ruling by the Personvernnemnda (Privacy Appeals Board) is expected in autumn 2026. The decision is not final.
The data protection officer's role must be documented – with a direct reporting line to top management, clear rules on the officer's involvement and an assessment of potential conflicts of interest.
Position and independence of the data protection officer
- Authority / court
- Datatilsynet
- Area of law
- Data protection
- Legal basis
- Art. 24 Abs. 1 und 2, Art. 30, Art. 37 Abs. 7, Art. 38 Abs. 2 und 3, Art. 58 Abs. 2 lit. b, d und i DSGVO; § 26 personopplysningsloven
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Telecoms, IT and software
- Employees
- 10,000 or more
- Culpability
- negligent
- Mitigating circumstances
- No specific harm to data subjects was identified; the long case-handling time was taken into account when setting the amount.
- Published
- 14 Mar 2025
Original amount 4,000,000 NOK, converted at the ECB reference rate of 10 Mar 2025.
- Datatilsynet: Telenor ASA er ilagt sanksjoner for mangler ved personvernombudsordning og internkontroll (14.03.2025) Press release of an authority
- Datatilsynet, Vedtak – Personvernombudets rolle i Telenor ASA, 21/03823-45, 10.03.2025 Decision of an authority
Checked against the official source on 28 Sep 2026 · Direct link