Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe and North America: 718 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

1case from 1 jurisdiction
€5mTotal of monetary amounts
€5mLargest single case: Luka Inc.
€5mMedian per case with an amount

Click a bar to drill down one level.

When?

per quarter, by date of decision
Trend
PeriodCasesTotal
Q3 20230—
Q4 20230—
Q1 20240—
Q2 20240—
Q3 20240—
Q4 20240—
Q1 20250—
Q2 20251€5m
Q3 20250—
Q4 20250—
Q1 20260—
Q2 20260—
Q3 20260—

1 case

10 Apr 2025 Luka Inc.Garante: 5 million EUR against Replika operator Luka over lack of legal basis ItalyAI systems €5m

The US operator of the Replika chatbot had not determined a legal basis for the processing, had an inadequate privacy notice and, despite declaring that minors were excluded, had no age verification. Italy's data protection authority (Garante per la protezione dei dati personali) imposed 5 million EUR and opened further proceedings concerning the training of the underlying language model.

What organisations can take from it

A declared exclusion of minors is worthless without effective age verification at registration and during use.

Authority / court
Garante per la protezione dei dati personali
Area of law
AI and digital regulation · AI systems
Legal basis
DSGVO (Rechtmäßigkeit, Transparenz, Schutz Minderjähriger)
Action
Fine
Status of proceedings
under appeal
Sector
Telecoms, IT and software
Published
19 May 2025

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

Ready for training that sticks?

Try it free for 14 days — from 1 user, no credit card, ends automatically.

Start free trial