Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe and North America: 1,370 cases from 35 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

Telecoms, IT and software GoDaddy Inc. Clear all filters

1case from 1 jurisdiction

—Total of monetary amounts (0 cases with an amount)

—Largest single case

—Median per case with an amount

Click a bar to drill down one level.

by amount by number of cases

Where?

by region

All jurisdictions

USA — 0 % · 1 case

What for?

by area of law

All areas of law

Information security and cyber — 0 % · 1 case

Who?

by company

When?

per quarter, by date of decision

Trend
Period	Cases	Total
Q3 2023	0	—
Q4 2023	0	—
Q1 2024	0	—
Q2 2024	0	—
Q3 2024	0	—
Q4 2024	0	—
Q1 2025	0	—
Q2 2025	1	—
Q3 2025	0	—
Q4 2025	0	—
Q1 2026	0	—
Q2 2026	0	—
Q3 2026	0	—

1 case

Newest first Highest amounts

21 May 2025 GoDaddy Inc.FTC: GoDaddy must set up an information security programme after hosting security gaps USASecurity measures and risk management Order

According to the Federal Trade Commission (FTC, the US consumer protection authority), the web host did not use multi-factor authentication for its hosting services, monitored security threats inadequately and did not secure connections to customer data, yet advertised “award-winning security”. The final order prohibits false statements about security and requires a comprehensive information security programme and regular reviews by independent assessors.

What organisations can take from it

Be able to prove basics such as MFA and threat monitoring before advertising security – otherwise the advertising promise itself becomes the violation.

Relevance to training and awareness

MFA, monitoring and honest security promises

Authority / court: Federal Trade Commission (FTC)
Area of law: Information security and cyber · Security measures and risk management
Legal basis: Section 5 FTC Act
Action: Order
Status of proceedings: final
Sector: Telecoms, IT and software
Published: 21 May 2025

Sources

FTC Finalizes Order with GoDaddy over Data Security Failures Press release of an authority
FTC Takes Action Against GoDaddy for Alleged Lax Data Security for Its Website Hosting Services Press release of an authority

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

How the radar is compiled

Official sources only

Every case is based on a decision, press release or database of an authority or a court. Press and law-firm reports count at most as additional references.

Four-eyes check

Whoever enters a case may not approve it. A second, independent check compares company, date, amount and area of law with the source. Only then is the case published.

Comparable amounts

Amounts are converted at the ECB reference rate on the day of the decision. Each case also shows the original amount.

Corrections on record

A correction is a new version that is checked again. Every change is logged. You can report errors directly on each case.

Case texts are translated from the German original. Where a translation is not yet available, the German text is shown and marked “(German original)”. Names of authorities, laws and companies are given as in the source (company names until they are anonymised).

Company names are anonymised two years after the decision in a case, in line with the practice of many supervisory authorities. The official sources remain linked.

The radar reports on published decisions and is not legal advice. Decisions that are not yet final are marked as such where the status is known.

Embed the radar on your website

Who was sanctioned, and for what?

Ready for training that sticks?