Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,207 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by authority- Consumer Affairs Agency (消費者庁, CAA) €1.2m 100 % · 2 cases
- Personal Information Protection Commission (PPC, 個人情報保護委員会) – 0 % · 1 case
What for?
by area of lawAll areas of law
Who?
by company- Excom Global Co., Ltd. (エクスコムグローバル株式会社) €941,067 78 % · 1 case
- Anonymised companies €261,697 22 % · 1 case
- KDDI株式会社 (KDDI Corporation) – 0 % · 1 case
When?
per year, by date of decision| Period | Cases | Total |
|---|---|---|
| 2024 | 1 | €261,697 |
| 2025 | 0 | – |
| 2026 | 2 | €941,067 |
3 cases
19 Aug 2026 KDDI株式会社 (KDDI Corporation)KDDI: data protection authority guidance after leak of 12.2 million email credentials Reprimand or warning
Through a software vulnerability in a mail platform developed by KDDI and provided to several internet service providers, unauthorised parties obtained the credentials (email address and password) of 12,231,954 people; 7,616,173 passwords were stored in plain text, so mailboxes could be read (discovered on 17 June 2026). The authority gave KDDI guidance (shidō) under Art. 147 APPI to improve its technical security measures because access controls against attackers spreading through the system had been inadequate, required a report by 19 October 2026 and also gave such guidance to individual providers responsible for the plain-text storage.
Passwords must never be stored in plain text, and platforms that serve many customers need layered defences against attackers spreading after a breach.
Password security and password reuse
- Authority / court
- Personal Information Protection Commission (PPC, 個人情報保護委員会)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Act on the Protection of Personal Information (APPI, 個人情報の保護に関する法律) Art. 147, Art. 146 Abs. 1
- Action
- Reprimand or warning
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Employees
- 10,000 or more
- Published
- 19 Aug 2026
- PPC – ＫＤＤＩ株式会社及びインターネットサービスプロバイダに対する個人情報の保護に関する法律に基づく行政上の対応並びにメールサービス利用者に対する注意喚起について（令和８年８月19日, PDF） Press release of an authority
- PPC – Pressemitteilung KDDI (19.08.2026) Press release of an authority
Checked against the official source on 4 Oct 2026 · Direct link
Report an error
12 Mar 2026 Excom Global Co., Ltd. (エクスコムグローバル株式会社)Excom Global ('Imoto no WiFi'): surcharge over unsubstantiated 'No. 1' claims €941,067
From February 2020 to May 2024, Excom Global advertised its rental of mobile Wi-Fi routers for travel abroad ('Imoto no WiFi') in travel-guide adverts and on its own websites as number one for customer satisfaction, for being chosen by overseas travellers and for customer service. The commissioned survey, without checking actual use, merely asked for impressions of the websites of the company and nine arbitrarily selected competitors and was also not reproduced accurately; a surcharge of 172,620,000 JPY was imposed.
Anyone advertising survey wins must know and check the methodology – responsibility stays with the advertiser, not the survey provider.
'No. 1' claims and rankings
- Authority / court
- Consumer Affairs Agency (消費者庁, CAA)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Art. 8 Abs. 1 i. V. m. Art. 5 Nr. 1 Act against Unjustifiable Premiums and Misleading Representations (不当景品類及び不当表示防止法, Gesetz Nr. 134/1962)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Culpability
- negligent
- Published
- 12 Mar 2026
Original amount 172,620,000 JPY, converted at the ECB reference rate of 12 Mar 2026.
- エクスコムグローバル株式会社に対する景品表示法に基づく課徴金納付命令について (Eintrag, 12.03.2026) Press release of an authority
- News Release 12.03.2026 mit Surcharge-Bescheid 消表対第181号 (PDF) Decision of an authority
Checked against the official source on 4 Oct 2026 · Direct link
Report an error
2 Aug 2024 a Japanese computer manufacturerComputer maker: surcharge for fictitious reference prices in its online shop €261,697
In its own online shop, the manufacturer set a 'WEB price', at which the devices had never been sold there, against a reduced 'campaign price' for seven notebook models, and announced deadlines after which the discounts still applied (example from October 2022: 187,880 JPY reduced to 148,425 JPY, 21% off). A surcharge of 42,230,000 JPY was imposed for this.
Strikethrough prices must be prices actually charged, and promotional deadlines must be honoured – otherwise both are misleading price claims.
Strikethrough prices and countdown discounts
- Authority / court
- Consumer Affairs Agency (消費者庁, CAA)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Art. 8 Abs. 1 i. V. m. Art. 5 Nr. 2 Act against Unjustifiable Premiums and Misleading Representations (不当景品類及び不当表示防止法, Gesetz Nr. 134/1962)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Culpability
- negligent
- Published
- 2 Aug 2024
Original amount 42,230,000 JPY, converted at the ECB reference rate of 2 Aug 2024.
- Consumer Affairs Agency (消費者庁, CAA), Veröffentlichung der Behörde (Entscheidung 2024) Decision of an authority
Checked against the official source on 8 Oct 2026 · Company name anonymised since 2 Aug 2026 · Direct link