Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 756 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by authority- Commission nationale de l'informatique et des libertés (CNIL) €43.7m 72 % · 2 cases
- Parquet national financier (PNF); Validierung durch das Tribunal judiciaire de Paris €16.1m 26 % · 1 case
- Parquet national financier (PNF); Validierung durch den Präsidenten des Tribunal judiciaire de Paris €499,150 1 % · 1 case
- Autorité des marchés financiers (AMF), Commission des sanctions €420,000 1 % · 1 case
What for?
by area of lawAll areas of law
Who?
by companyWhen?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 0 | — |
| Q1 2024 | 0 | — |
| Q2 2024 | 0 | — |
| Q3 2024 | 1 | €420,000 |
| Q4 2024 | 0 | — |
| Q1 2025 | 0 | — |
| Q2 2025 | 1 | €16.1m |
| Q3 2025 | 0 | — |
| Q4 2025 | 1 | €1.7m |
| Q1 2026 | 2 | €42.5m |
| Q2 2026 | 0 | — |
| Q3 2026 | 0 | — |
5 cases
18 Feb 2026 Périphériques et Matériels de Contrôle SAS (Groupe Carrus)Betting terminal manufacturer PMC: CJIP over payments to the head of state-owned PMU Mali €499,150
From 2008 to 2011, the Paris-based supplier of betting and gaming terminals made unjustified payments of 78,972 EUR to the head of the majority state-owned Pari Mutuel Urbain Mali, with which it had a supply contract awarded without a tender. The case was triggered by a report from TRACFIN (the French financial intelligence unit). Public interest fine of 499,150 EUR (including 335,000 EUR already seized) and a three-year AFA compliance programme.
Managers of state-controlled companies are also public officials – even small private payments to them create a risk of criminal liability for medium-sized companies.
Payments to heads of state-owned companies abroad
- Authority / court
- Parquet national financier (PNF); Validierung durch den Präsidenten des Tribunal judiciaire de Paris
- Area of law
- Bribery and corruption · Bribery of public officials
- Legal basis
- Art. 41-1-2 Code de procédure pénale (CJIP); Bestechung ausländischer Amtsträger und Geldwäsche
- Action
- Fine
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Employees
- 50 to 249
- Culpability
- intentional
- Liability of senior managers
- The CJIP does not address the criminal liability of natural persons.
- Published
- 18 Feb 2026
- Communiqué de presse du procureur de la République financier – CJIP PMC Press release of an authority
- Convention judiciaire d'intérêt public – Périphériques et Matériels de Contrôle SAS Decision of an authority
- Ministère de la Justice: Conventions judiciaires d'intérêt public (Verzeichnis) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
8 Jan 2026 Free Mobile SAS und Free SASCNIL: 42 million EUR against Free Mobile and Free after data leak affecting 24 million contracts €42m
Following an attack in October 2024 in which data relating to around 24 million customer contracts, including IBANs, was exfiltrated, the French data protection authority (CNIL) imposed 27 million EUR on Free Mobile and 15 million EUR on Free (42 million EUR in total). The authority objected to VPN access without adequate authentication, deficient detection of suspicious access, incomplete notification of data subjects and, at Free Mobile, excessively long retention of old contracts; orders with deadlines were also issued.
Put remote access such as VPN behind multi-factor authentication, and consistently delete legacy data from terminated contracts.
- Authority / court
- Commission nationale de l'informatique et des libertés (CNIL)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 5 Abs. 1 lit. e, Art. 32, Art. 34 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Mitigating circumstances
- During the proceedings, the companies introduced multi-factor authentication, a Security Operations Centre and improved logging.
- Published
- 14 Jan 2026
- Violation de données : sanction de 42 millions d'euros à l'encontre des sociétés FREE MOBILE et FREE Press release of an authority
- Délibération SAN-2026-001 du 8 janvier 2026 (FREE MOBILE) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Dec 2025 Nexpublica FranceCNIL: 1.7 million EUR against processor Nexpublica over security flaws €1.7m
As a processor, Nexpublica developed and operated the case management software ‘Public CRM’ for the disability authority MDPH Nord. Following two data breaches in 2022, audits revealed critical vulnerabilities that had existed since 2021, such as outdated SHA-1 hashing; the French data protection authority (CNIL) imposed 1.7 million EUR directly on the service provider.
Processors are themselves liable for the data security of their software; do not leave known vulnerabilities unaddressed until the next breach.
- Authority / court
- Commission nationale de l'informatique et des libertés (CNIL)
- Area of law
- Data protection · Data processors
- Legal basis
- Art. 32 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Délibération SAN-2025-015 du 22 décembre 2025 (NEXPUBLICA FRANCE) Decision of an authority
- Les sanctions prononcées par la CNIL Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
19 Jun 2025 Exclusive Networks Corporate SASIT distributor Exclusive Networks: CJIP of 16 million EUR following a whistleblower report €16.1m
In 2021, a whistleblower reported payments by subsidiaries in Indonesia, Malaysia, Vietnam, Thailand and India to contractual partners; the investigation concerned private-sector bribery and bribery of foreign public officials. The CJIP provides for a public interest fine of 16,074,511 EUR (including 1 million EUR already seized) and a three-year AFA compliance programme.
A functioning whistleblowing system uncovers foreign risks – companies should investigate reports themselves before the authorities do.
Payments to sales partners in Asia, whistleblowing systems
- Authority / court
- Parquet national financier (PNF); Validierung durch das Tribunal judiciaire de Paris
- Area of law
- Bribery and corruption · Commercial bribery
- Legal basis
- Art. 41-1-2 Code de procédure pénale (CJIP); Bestechung im privaten Sektor und ausländischer Amtsträger
- Action
- Fine
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Employees
- 1,000 to 9,999
- Culpability
- intentional
- Liability of senior managers
- The CJIP does not address the criminal liability of natural persons.
- Published
- 19 Jun 2025
- Communiqué de presse du procureur de la République financier – CJIP Exclusive Networks Corporate Press release of an authority
- CJIP société Exclusive Networks Corporate (16.06.2025) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
19 Jul 2024 Parrot SAParrot: misleading half-yearly report and insider dealing ahead of a takeover bid €420,000
In its 2018 half-yearly report, the drone manufacturer disseminated misleading information on the absence of impairment indicators for the drone division, on goodwill and on earnings; in addition, the deputy managing director used inside information about a planned takeover bid. Sanctions: Parrot 150,000 EUR, CEO Henri Seydoux 60,000 EUR, Gilles Labossière 210,000 EUR.
Impairment tests for loss-making divisions and trading bans for management are particularly sensitive in a takeover context.
Insider dealing ban for executives in connection with takeover plans
- Authority / court
- Autorité des marchés financiers (AMF), Commission des sanctions
- Area of law
- Capital markets and financial supervision · Market abuse and insider dealing
- Legal basis
- Art. 12 Abs. 1 lit. c, Art. 15 MAR; Art. 8 und 14 MAR
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Liability of senior managers
- Henri Seydoux (Président-directeur général): 60,000 EUR; Gilles Labossière (directeur général délégué): 210,000 EUR, including for insider dealing
- Décision SAN-2024-07 Decision of an authority
- Décision n° 7 du 19 juillet 2024 (PDF) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link