Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,207 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by countryWhat for?
by area of lawAll areas of law
Who?
by companyWhen?
per year, by date of decision| Period | Cases | Total |
|---|---|---|
| 2022 | 1 | €130,000 |
| 2023 | 1 | €19.4m |
| 2024 | 3 | – |
| 2025 | 3 | €46.8m |
| 2026 | 2 | €240,000 |
10 cases
13 Aug 2026 Apple Inc., Apple GmbHBundeskartellamt: Apple aligns tracking prompts for its own and third-party apps Order
The Bundeskartellamt (Federal Cartel Office) declared binding commitments by Apple on its App Tracking Transparency Framework (ATTF), closing its proceedings under Section 19a(2) of the German Competition Act (GWB) and Article 102 TFEU. According to the preliminary assessment, third-party apps had to obtain, for personalised advertising, an additional and more off-putting consent prompt prescribed by Apple, while Apple used a prompt of its own for its own services; in future the prompts will be aligned so that content, wording and design are neutral, and app providers will be able to combine the required prompts more easily.
Platform privacy rules must be equally strict for a company's own and third-party services, otherwise they become a competition problem themselves.
Equal treatment of own and third-party services in consent prompts
- Authority / court
- Bundeskartellamt
- Area of law
- Competition law · Abuse of market power
- Legal basis
- § 19a Abs. 2 GWB, Art. 102 AEUV (Verpflichtungszusagen, Az. B7-54/25)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Employees
- 10,000 or more
- Published
- 17 Aug 2026
- Bundeskartellamt: Apple ändert Regeln für personalisierte Werbung in Apps (17.08.2026) Press release of an authority
- Bundeskartellamt, Beschluss B7-54/25 vom 13.08.2026 (öffentliche Version) Decision of an authority
- Bundeskartellamt, Entscheidungsdatenbank: B7-54/25, Verpflichtungszusagen, Entscheidungsdatum 13.08.2026 Enforcement database of an authority
Checked against the official source on 2 Oct 2026 · Direct link
Report an error
16 Jul 2026 TeamViewer SETeamViewer: cyberattack not disclosed as inside information without delay €240,000
Germany's Federal Financial Supervisory Authority (Bundesanstalt für Finanzdienstleistungsaufsicht, BaFin) imposed a fine of 240,000 EUR on the software company because it had not disclosed the information about a cyberattack it had suffered as inside information without delay. The fine notice is final.
Put serious IT security incidents immediately before the ad hoc disclosure committee as well – the incident response process must take capital market disclosure into account.
Recognising security incidents as potential inside information and reporting them to the ad hoc disclosure committee
- Authority / court
- Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
- Area of law
- Capital markets and financial supervision · Disclosure and reporting obligations
- Legal basis
- Art. 17 Abs. 1 UAbs. 1 MAR (EU) Nr. 596/2014
- Action
- Fine
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Published
- 20 Jul 2026
- TeamViewer SE: BaFin setzt Geldbuße fest Decision of an authority
- Bekanntmachung der BaFin zur TeamViewer SE (Maßnahmenansicht mit Rechtskraftvermerk) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
3 Jun 2025 Vodafone GmbHBfDI: 45 million EUR against Vodafone over fraud in partner agencies and authentication gaps €45m
Malicious employees in partner agencies that broker contracts for Vodafone had created fictitious contracts and contract changes to the detriment of customers. The German Federal Commissioner for Data Protection and Freedom of Information (BfDI) imposed 15 million EUR for inadequate vetting and monitoring of the partner agencies (Art. 28) and 30 million EUR for authentication deficiencies in ‘MeinVodafone’ in combination with the hotline, through which unauthorised persons were able, among other things, to retrieve eSIM profiles; in addition, a reprimand was issued under Art. 32.
Companies that outsource sales to partner agencies must audit how those agencies handle customer data and make misuse technically harder.
Insider threats and oversight of sales partners
- Authority / court
- Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI)
- Area of law
- Data protection · Data processors
- Legal basis
- Art. 28 Abs. 1 S. 1, Art. 32 Abs. 1 DSGVO
- Action
- Fine
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Mitigating circumstances
- Full cooperation including self-incrimination, modernisation of systems, separation from fraudulent partners; fines accepted and paid, plus donations amounting to millions.
- Published
- 3 Jun 2025
- Pressemitteilung 6/2025: BfDI verhängt Geldbußen gegen Vodafone Press release of an authority
- BfDI – Übersicht Pressemitteilungen (Datum 03.06.2025) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
14 May 2025 SAP SESAP: failure to publish notice on the 2022 annual financial report €1.75m
SAP had not published an announcement stating from when and at which internet address the 2022 annual financial report was publicly available in addition to the company register (Hinweisbekanntmachung). BaFin imposed a fine of 1.75 million EUR; the notice is final.
Even seemingly formal disclosure steps such as the notice announcement need a fixed place in the financial calendar – the range of fines extends up to five per cent of total turnover.
- Authority / court
- Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
- Area of law
- Capital markets and financial supervision · Disclosure and reporting obligations
- Legal basis
- § 114 Abs. 1 Satz 2 WpHG
- Action
- Fine
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Published
- 27 May 2025
- SAP SE: BaFin setzt Geldbuße fest Decision of an authority
- Bekanntmachung der BaFin zur SAP SE (Maßnahmenansicht mit Rechtskraftvermerk) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
9 Apr 2025 Alphabet Inc. (Google)Bundeskartellamt: Google commitments on Automotive Services and Google Maps Platform Order
In two decisions under Section 19a of the German Competition Act (GWB), the Bundeskartellamt (Federal Cartel Office) declared commitments by Google binding: the services in Google Automotive Services (Maps, Play, Assistant) will in future also be licensed to car manufacturers individually, incentive clauses such as advertising revenue sharing and default settings will be dropped, and interoperability with other providers will be ensured. For the Google Maps Platform, contractual restrictions on combining it with other providers' map services are lifted; the commitments on Automotive Services apply to cars registered in Germany and, owing to uniform EU registration rules, to the European market, while those on the Maps Platform apply at least to licensees with a billing address in the EEA.
Tying and exclusivity incentives in platform services are under scrutiny under Section 19a GWB; individually licensable, interoperable offerings reduce the risk.
- Authority / court
- Bundeskartellamt
- Area of law
- Competition law · Abuse of market power
- Legal basis
- § 19a GWB (für bindend erklärte Verpflichtungszusagen; Az. B7-25/22)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Employees
- 10,000 or more
- Published
- 9 Apr 2025
- Bundeskartellamt: Google muss Wettbewerbsbeschränkungen bei Google Automotive Services und bei der Google Maps Platform abstellen (09.04.2025) Press release of an authority
- Bundeskartellamt: Verfahren gegen große Digitalkonzerne auf der Basis von § 19a GWB (Stand September 2026) Official register or notice
Checked against the official source on 2 Oct 2026 · Direct link
Report an error
19 Dec 2024 Worldcoin FoundationBayLDA: reprimand and erasure orders against Worldcoin over iris codes Order
Following an investigation of the iris-scanning service begun in 2023, the BayLDA (Bavarian data protection authority for the private sector) issued a decision agreed at European level against the Worldcoin Foundation: a reprimand because iris codes had for a time been stored in plain text, and orders to erase certain iris codes and SMPC shares collected without an adequate legal basis, to provide a GDPR-compliant erasure procedure and to obtain explicit consent. The company has challenged the decision in court; a fine is to be decided separately.
Biometric features cannot be reset – processing them requires explicit consent, secure storage and a working erasure procedure.
Biometric data: consent, erasure and security
- Authority / court
- Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- Art. 58 Abs. 2 lit. b, d, f, g DSGVO i. V. m. Art. 5 Abs. 1 lit. a, Art. 9 Abs. 1, Art. 17 Abs. 1 und Art. 32 DSGVO
- Action
- Order
- Status of proceedings
- under appeal
- Sector
- Telecoms, IT and software
- Published
- 19 Dec 2024
- BayLDA-Pressemitteilung 19.12.2024: Erste Ergebnisse der Worldcoin-Untersuchung Press release of an authority
- BayLDA-Bescheid gegen die Worldcoin Foundation (englische Fassung, veröffentlicht im EDPB-Register der Art.-60-Entscheidungen) Decision of an authority
- BayLDA Tätigkeitsbericht 2024, Kap. 14.1 Worldcoin-Untersuchung (Klage des Unternehmens) Official register or notice
Checked against the official source on 2 Oct 2026 · Direct link
Report an error
10 Jun 2024 a German network equipment manufacturerBundeskartellamt: almost €16m on network equipment maker for resale price maintenance Fine
The Bundeskartellamt (Federal Cartel Office) fined a German network equipment manufacturer and one responsible individual a total of almost 16 million EUR for resale price maintenance: the manufacturer's staff coordinated increases in consumer prices for its products with six electronics retailers, in some cases demanded target prices, monitored prices with dedicated software and in some cases threatened supply stops or reduced terms. The case began with an anonymous tip-off to the whistleblowing system and further market information; the decisions are final following a settlement, and no fines were imposed on the retailers.
Target price lists and monitoring of retailers' prices by sales staff are evidence of resale price maintenance; sales teams need clear limits on price management.
Resale price maintenance by sales teams
- Authority / court
- Bundeskartellamt
- Area of law
- Competition law · Cartels and collusion
- Action
- Fine
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Mitigating circumstances
- Expedited settlement.
- Published
- 2 Jul 2024
- Bundeskartellamt, Presse (Übersicht) (Entscheidung 2024) Press release of an authority
Checked against the official source on 2 Oct 2026 · Company name anonymised since 10 Jun 2026 · Direct link
Report an error
1 May 2024 a Swiss IT service provider and two Swiss federal officesFDPIC: data protection infringements at IT service provider and two federal offices after ransomware attack Other
Following the hacker attack on an IT service provider, the Swiss Federal Data Protection and Information Commissioner (Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter, EDÖB) found that personal data of two federal offices had reached the service provider via support processes without the necessary data protection safeguards. The service provider subsequently retained the data in breach of data protection law and partly in breach of contract.
Real data does not belong in service providers' support and test environments – clients must control disclosure and deletion.
Passing real data to service providers for support
- Authority / court
- Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter (EDÖB)
- Area of law
- Data protection · Data processors
- Legal basis
- Datenschutzgesetz (DSG)
- Action
- Other
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Published
- 1 May 2024
- EDÖB, Medienmitteilungen (Übersicht) (Entscheidung 2024) Press release of an authority
Checked against the official source on 28 Sep 2026 · Version 4 · Company name anonymised since 1 May 2026 · Direct link
Report an error
4 Dec 2023 a large Swiss telecommunications groupWEKO: CHF 18.4 million against telecoms group over fibre network roll-out strategy €19.4m
The group expanded its fibre-optic network in such a way that competitors were not given Layer 1 access from the local exchanges. WEKO considered this to be an abuse of a dominant position, imposed a sanction of CHF 18,362,014, required the group to retrofit the network and imposed procedural costs of CHF 927,307.
Dominant network operators must assess infrastructure decisions for their consequences for competitors' access.
- Authority / court
- Wettbewerbskommission (WEKO)
- Area of law
- Competition law · Abuse of market power
- Legal basis
- Art. 7 Abs. 1 i.V.m. Abs. 2 lit. a und e KG, Art. 49a Abs. 1 KG
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Telecoms, IT and software
- Employees
- 10,000 or more
Original amount 18,362,014 CHF, converted at the ECB reference rate of 4 Dec 2023.
- WEKO, Entscheide (Übersicht) (Entscheidung 2023) Decision of an authority
Checked against the official source on 28 Sep 2026 · Version 4 · Company name anonymised since 4 Dec 2025 · Direct link
Report an error
22 Nov 2022 a German business that commissioned sales calls for telecommunications servicesBNetzA: €130,000 fine on business that commissioned unlawful sales calls for telecoms services €130,000
The Bundesnetzagentur (Federal Network Agency) fined a business that had commissioned sales calls for telecommunications services 130,000 EUR for unlawful telephone advertising. On the same day a separate decision of 148,000 EUR was issued against the business behind a campaign for electricity supply contracts.
Even a business that merely commissions sales calls can itself be fined – consent of the people called should be checked before a campaign starts.
Consent and proof of consent for telephone marketing
- Authority / court
- Bundesnetzagentur (BNetzA)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- UWG – Verbot unerlaubter Telefonwerbung gegenüber Verbraucherinnen und Verbrauchern
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Bundesnetzagentur, Maßnahmen gegen unerlaubte Telefonwerbung mit Archiv-Übersicht der Bußgelder ab 2017 (Übersicht) (Entscheidung 2022) Enforcement database of an authority
Checked against the official source on 7 Oct 2026 · Version 2 · Company name anonymised since 22 Nov 2024 · Direct link