Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe and North America: 718 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

35cases from 15 jurisdictions
€922.6mTotal of monetary amounts (28 cases with an amount)
€290mLargest single case: Uber Technologies Inc. und Uber B.V.
€1.19mMedian per case with an amount

Click a bar to drill down one level.

When?

per quarter, by date of decision
Trend
PeriodCasesTotal
Q3 20230—
Q4 20230—
Q1 20243€3.2m
Q2 20241€98,722
Q3 20241€290m
Q4 20247€249m
Q1 20250—
Q2 20253€279,200
Q3 20254€3.63m
Q4 20253€270.8m
Q1 20262€245,939
Q2 20264€100.2m
Q3 20267€5.19m

35 cases

22 Jul 2024 Uber Technologies Inc. und Uber B.V.Uber: 290 million EUR – driver data sent to the USA for two years without a transfer tool NetherlandsInternational data transfers €290m

Uber stored sensitive data of European drivers – including location, payment and identity document data, and in some cases criminal and health data – on servers in the USA and from August 2021 no longer used any transfer tool. Following complaints from more than 170 French drivers, the Autoriteit Persoonsgegevens (Dutch Data Protection Authority, AP) imposed 290 million EUR; it was the AP’s third fine against Uber.

What organisations can take from it

Intra-group transfers to headquarters are third-country transfers – anyone who lets a transfer tool lapse transfers data without a legal basis.

Authority / court
Autoriteit Persoonsgegevens (AP)
Area of law
Data protection · International data transfers
Legal basis
Art. 44 DSGVO
Action
Fine
Status of proceedings
under appeal
Sector
Transport, logistics and shipping
Employees
10,000 or more
Repeat case
yes
Published
26 Aug 2024

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

28 Aug 2026 MSC Shipmanagement Limited; Hong Kong Spirit Shipping and Trading LimitedMSC Shipmanagement: 1.75 million USD fine for secretly discharging oily bilge water USAWaste and hazardous substances €1.5m

On board the MSC Samira III, senior engineering officers had oily bilge water pumped overboard via the sewage tank, bypassing the oily water separator, in 2024/2025, manipulated the oil content monitoring and falsified the oil record book, which was presented to the Coast Guard in Philadelphia. The operator and the owner each pleaded guilty to two counts under the Act to Prevent Pollution from Ships (APPS) and are paying a combined 1.75 million USD; in addition, there are four years of probation.

What organisations can take from it

Shipping companies must actively monitor practice on board and the oil record book, because instructions given by individual officers are attributed to the company under criminal law.

Relevance to training and awareness

MARPOL obligations on board, oil record book and reporting channels for crews

Authority / court
U.S. District Court for the Eastern District of Pennsylvania (Anklage: DOJ Environment and Natural Resources Division)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Act to Prevent Pollution from Ships (APPS), 33 U.S.C. § 1908
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Employees
10,000 or more
Culpability
intentional
Liability of senior managers
Second Engineer Mikhail Tsurikov also pleaded guilty; sentencing scheduled for 10 September 2026.
Published
28 Aug 2026

Original amount 1,750,000 USD, converted at the ECB reference rate of 28 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

11 Aug 2026 Volga-Dnepr Airlines LLCFederal Court: cargo airline Volga-Dnepr remains on Canadian sanctions list CanadaBreaches of sanctions and embargoes Order

The Russian cargo airline had been added to the list of the Special Economic Measures (Russia) Regulations in April 2023; the Minister of Foreign Affairs rejected the application for delisting. The Federal Court (2026 FC 1048) dismissed the application for judicial review: the Minister had not exercised her broad discretion unreasonably, and there was no procedural error.

What organisations can take from it

Listed logistics partners often remain listed for years – anyone buying air freight must continuously screen carriers and parent companies against sanctions lists.

Relevance to training and awareness

Listings of transport service providers in partner screening

Authority / court
Federal Court (2026 FC 1048); Minister of Foreign Affairs
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Special Economic Measures Act; Special Economic Measures (Russia) Regulations, SOR/2014-58, ss. 2(a), 8
Action
Order
Status of proceedings
unknown
Sector
Transport, logistics and shipping

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

4 Aug 2026 Lime Technology S.r.l., EmTransit S.r.l. (Dott), Bird Rides Italy S.r.l.Rome: 2.675 million EUR against e-scooter and e-bike sharing providers over blocked free rides ItalyInformation duties in online retail €2.68m

The three sharing providers made it difficult for holders of a Metrebus annual pass to access the free-ride passes promised when the concessions were awarded, through inadequate organisation, cumbersome activation and long waiting times, which shortened the usable time; Bird also deactivated accounts without prior notice. The AGCM imposed fines totalling 2.675 million EUR in three proceedings (Lime 1.4 million, Dott 525,000, Bird 750,000 EUR).

What organisations can take from it

Promised benefits must also be redeemable in organisational terms – sluggish processing can itself be unfair.

Relevance to training and awareness

Customer service and redemption of promised services

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Consumer protection and online retail · Information duties in online retail
Legal basis
Codice del Consumo (pratiche commerciali scorrette), Verfahren PS13028, PS13029, PS13030
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Published
6 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

29 Jul 2026 AvisAvis: maximum fine of 1 million EUR for handling fee on traffic fines SpainInformation duties in online retail €1m

The car rental company charged customers an "administration fee" of 33.88 to 45 EUR when a rental car incurred a traffic offence – even though naming the driver is a statutory obligation of the rental company. Spain's Ministry of Social Rights, Consumer Affairs and 2030 Agenda classified this as a very serious infringement and imposed the maximum fine of 1 million EUR; a court had already declared the clause void in 2020.

What organisations can take from it

No additional fee may be charged for fulfilling statutory obligations – least of all after a court has prohibited the clause.

Authority / court
Ministerio de Derechos Sociales, Consumo y Agenda 2030
Area of law
Consumer protection and online retail · Information duties in online retail
Legal basis
Artt. 82, 87.5 y 87.6 TRLGDCU (Real Decreto Legislativo 1/2007)
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Repeat case
yes
Published
29 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

28 Jul 2026 TrenitaliaTrenitalia removes hurdles to refunds for delays following AGCM proceedings ItalyInformation duties in online retail Order

For refunds in the event of delays of 60 minutes or more or cancellations, Trenitalia required prior written confirmation from the call centre or ticket office. The AGCM accepted binding commitments: abolition of the confirmation requirement, strengthened refund channels, an information page on disruptions and an implementation report within three months; no infringement was found.

What organisations can take from it

Additional formalities before statutory refunds act as a hurdle and lead to proceedings.

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Consumer protection and online retail · Information duties in online retail
Legal basis
Codice del Consumo (impegni); EU-Fahrgastrechte im Eisenbahnverkehr
Action
Order
Status of proceedings
final
Sector
Transport, logistics and shipping
Mitigating circumstances
Binding commitments, no finding of an infringement.
Published
30 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

16 Jul 2026 Royal Mail Group LtdTribunal: Royal Mail subjected whistleblower to detriment – £6,978 compensation United KingdomRetaliation against whistleblowers €8,222

The Employment Tribunal in Manchester found that the claimant had been subjected to detriment because of a protected disclosure and awarded her the agreed amount of £6,978.20. The claims for disability discrimination and constructive dismissal were dismissed.

What organisations can take from it

Large organisations, too, must ensure that whistleblowers do not suffer disadvantages in their day-to-day work.

Relevance to training and awareness

How managers handle internal reports

Authority / court
Employment Tribunal
Area of law
Whistleblower protection · Retaliation against whistleblowers
Legal basis
Employment Rights Act 1996, s. 47B (Benachteiligung wegen geschützter Offenlegung)
Action
Other
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Employees
10,000 or more
Published
7 Sep 2026

Original amount 6,978.2 GBP, converted at the ECB reference rate of 16 Jul 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

7 Jul 2026 Unternehmen mit drei Dienstfahrzeugen (in der Mitteilung nicht namentlich genannt)Administrative Court upholds ban on continuous GPS tracking of three company vehicles SloveniaEmployee data Order

The data protection authority had prohibited a company from tracking its three company vehicles continuously by GPS and ordered the data to be erased; narrow purposes such as theft protection while parked remained permitted. The Upravno sodišče Republike Slovenije (Administrative Court of the Republic of Slovenia) upheld this and clarified that employee consent bundled with other declarations is invalid.

What organisations can take from it

Employee consent rarely supports monitoring – and never when it is bundled with other declarations in the form.

Relevance to training and awareness

Consent and proportionality in employee monitoring

Authority / court
Upravno sodišče Republike Slovenije (bekanntgemacht durch den Informacijski pooblaščenec)
Area of law
Data protection · Employee data
Legal basis
Art. 6 Abs. 1 lit. f, Art. 7 Abs. 2 DSGVO
Action
Order
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Published
7 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

22 May 2026 Streamline Shipping Agencies LimitedAberdeen port agency: £146,700 after forklift accident without traffic separation United KingdomWorkplace safety and accidents €169,756

At the Port of Aberdeen, an employee loosening a lorry curtain was struck by a reversing forklift truck and suffered multiple fractures and a degloving injury. Pedestrians and vehicles were not separated during simultaneous loading and unloading. Fine of £146,700.

What organisations can take from it

Loading and manoeuvring areas need firm rules on who may be where and when if forklifts and pedestrians are working at the same time.

Authority / court
Aberdeen Sheriff Court (Ermittlung: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Regulation 17(1) Workplace (Health, Safety and Welfare) Regulations 1992; Section 33(1)(c) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
final
Sector
Transport, logistics and shipping
Published
28 May 2026

Original amount 146,700 GBP, converted at the ECB reference rate of 22 May 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

8 May 2026 Transport Desgagnés Inc.Transport Desgagnés: 40,000 CAD because a tanker entered an Arctic protected area without a permit Canada, NUEnvironment and sustainability €24,902

The tanker M/T Sarah Desgagnés, operated by the company, entered the Akpait National Wildlife Area in Nunavut on 29 September and 6 October 2024 without the required access permit. The Nunavut Court of Justice imposed 40,000 CAD for the Environmental Damages Fund; the company must publish a notice in a local newspaper and is listed in the Environmental Offenders Registry.

What organisations can take from it

Protected area boundaries belong in every vessel's voyage planning; missing access permits are prosecuted even in remote areas.

Relevance to training and awareness

Protected areas in voyage planning and bridge practice

Authority / court
Nunavut Court of Justice (Ermittlungen: Environment and Climate Change Canada)
Area of law
Environment and sustainability
Legal basis
Wildlife Area Regulations (Canada Wildlife Act), Paragraph 3.3(1)(h)
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Published
8 May 2026

Original amount 40,000 CAD, converted at the ECB reference rate of 8 May 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

4 May 2026 Berliner Verkehrsbetriebe (BVG) AöRBlnBDI reprimands BVG: deletion at service provider not checked, data breach reported too late GermanyData processors Reprimand or warning

A processor of Berlin's public transport operator BVG, which had sent customer letters in early 2025, was hacked; around 180,000 customer records were affected, although they should long since have been deleted after the end of the contract. BVG had never checked the deletion, had not agreed any procedure for data breaches in the data processing agreement and reported the incident only after the 72-hour deadline had expired; the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI) issued a reprimand.

What organisations can take from it

Have service providers prove deletion after the end of the contract, and have an internal procedure that immediately turns indications of a breach into a 72-hour notification.

Relevance to training and awareness

Reporting process for data breaches and management of service providers

Authority / court
Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)
Area of law
Data protection · Data processors
Legal basis
Art. 5 Abs. 2 i. V. m. Abs. 1 lit. c, e, f, Art. 28 Abs. 3 S. 2 lit. f, Art. 32 Abs. 1, Art. 33 DSGVO
Action
Reprimand or warning
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Mitigating circumstances
BVG has announced measures against similar incidents.
Published
4 May 2026
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

1 Apr 2026 MLU B.V. (Rechtsnachfolgerin der Ridetech International B.V., Anbieterin der Yango-App)Yango taxi app: 100 million EUR for transferring data to Russia NetherlandsInternational data transfers €100m

Amsterdam-based Ridetech offered the ride-hailing app Yango in Finland and Norway and transferred data of drivers and customers to the group companies Yandex.Taxi LLC and Yandex LLC in Russia without demonstrating appropriate safeguards. The Autoriteit Persoonsgegevens (Dutch Data Protection Authority, AP) imposed 100 million EUR on the legal successor and prohibited further transfers to Russia.

What organisations can take from it

Transfers to states without legal protection against access by authorities can hardly be safeguarded – group structures with such locations need data localisation in the EU.

Authority / court
Autoriteit Persoonsgegevens (AP)
Area of law
Data protection · International data transfers
Legal basis
Art. 44, Art. 46 iVm Art. 5 Abs. 1 lit. a und Abs. 2 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

22 Jan 2026 Logistics business: fines for minimum wage, reporting and foreign employment violations GermanyMinimum wage and undeclared work €13,731

Between June and December 2023, a logistics and transport business withheld a total of around 2,000 EUR in minimum wages from several employees, breached reporting and immediate notification obligations, and in July/August 2023 employed a foreign national without a residence permit. The fines: 5,231 EUR (minimum wage), 750 EUR each (reporting obligations) and 7,000 EUR (unauthorised employment of foreign nationals), totalling 13,731 EUR (date = publication).

What organisations can take from it

Even small wage arrears are penalised individually alongside reporting and residence violations – HR processes for new hires need a fixed checklist.

Relevance to training and awareness

Immediate notification and checking of work permits when hiring

Authority / court
Hauptzollamt Karlsruhe (Finanzkontrolle Schwarzarbeit)
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
§ 21 Abs. 1 Nr. 11 MiLoG; § 111 Abs. 1 Nr. 2 SGB IV; § 404 Abs. 2 Nr. 3 SGB III
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Published
22 Jan 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

2 Jan 2026 Poczta Polska S.A.Poczta Polska: 978,128 PLN because the data protection officer was not independent PolandData protection €232,208

The function of data protection officer was performed by a manager who was at the same time responsible for security and protection of classified information and thus monitored their own activities; there was no conflict analysis. Poland’s data protection authority (UODO) imposed 978,128 PLN and referred to numerous previous reprimands and orders against the company.

What organisations can take from it

Data protection officers must not be responsible for the processes they monitor – check dual roles for conflicts of interest in advance.

Authority / court
Prezes Urzędu Ochrony Danych Osobowych (UODO)
Area of law
Data protection
Legal basis
Art. 38 Abs. 3 und 6 DSGVO (DKN.5131.4.2025)
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Employees
10,000 or more
Repeat case
yes
Mitigating circumstances
During the proceedings the function was made independent and placed directly under the management board.
Published
26 Jan 2026

Original amount 978,128 PLN, converted at the ECB reference rate of 2 Jan 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

23 Dec 2025 Ryanair DAC, Ryanair Holdings plcItaly: 255.8 million EUR against Ryanair for obstructing travel agencies ItalyAbuse of market power €255.8m

From April 2023 until at least April 2025, Ryanair obstructed travel agencies from buying Ryanair flights in combination with other services, for example through facial recognition procedures, account deletions, blocking of means of payment and restrictive partner agreements. The AGCM considered this to be an abuse of a dominant position and imposed fines of 255,761,692 EUR on a joint and several basis.

What organisations can take from it

Dominant providers must not use technical barriers to force sales partners and resellers out of the market.

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Competition law · Abuse of market power
Legal basis
Art. 102 AEUV
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Employees
10,000 or more
Published
23 Dec 2025

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

23 Dec 2025 Amazon France Logistique SASConseil d'État reduces CNIL fine against Amazon France Logistique to 15 million EUR FranceEmployee data €15m

In 2023, the French data protection authority (CNIL) had imposed 32 million EUR for the real-time monitoring of warehouse staff through scanner metrics. France's supreme administrative court (Conseil d'État) held that three metrics (‘Stow Machine Gun’, ‘Idle Time’, ‘Latency’) were covered by legitimate interest, but upheld the findings on the 31-day retention of all metrics, information deficiencies and security flaws in the video surveillance, and reduced the fine to 15 million EUR.

What organisations can take from it

Store employee performance metrics only for as long and in as much detail as their specific purpose requires.

Authority / court
Conseil d'État
Area of law
Data protection · Employee data
Legal basis
Art. 5 Abs. 1 lit. c, Art. 12, 13, 32 DSGVO
Action
Fine
Status of proceedings
reduced
Sector
Transport, logistics and shipping
Employees
10,000 or more

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

24 Nov 2025 SIA "EUROPARK LATVIA"Europark Latvia pays 25,000 EUR for payment reminders sent to outdated addresses LatviaData protection €25,000

Following several complaints, the Datu valsts inspekcija (Latvian Data State Inspectorate, DVI) examined how the parking operator collects contractual penalties: invoices were sent to previous rather than current registered addresses, claims were handed over to debt collection services and entered in the database of Kredītinformācijas Birojs. The authority found breaches of the principles of lawfulness, data minimisation and confidentiality and of the accountability obligation and imposed 25,000 EUR (previous year’s turnover according to the decision: 8,323,178 EUR).

What organisations can take from it

Anyone collecting debts or reporting them to credit agencies must first ensure that address data are up to date.

Relevance to training and awareness

Data quality in receivables management

Authority / court
Datu valsts inspekcija (DVI)
Area of law
Data protection
Legal basis
Art. 5 Abs. 1 lit. a, c, f und Abs. 2, Art. 83 Abs. 5 lit. a DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Culpability
intentional
Mitigating circumstances
Practice changed after the proceedings began; contracts concluded with the population and vehicle registers (PMLP, CSDD)

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

3 Sep 2025 Fracht FWO Inc.Freight forwarder Fracht FWO chartered blocked Venezuelan airline with Mahan Air jet USABreaches of sanctions and embargoes €1.38m

In May 2022, bypassing internal compliance procedures, the Houston freight forwarder engaged a blocked Venezuelan state-owned airline for a shipment from Mexico to Argentina; the aircraft used, which was also blocked, was operated by Iran's Mahan Air. The US Treasury's Office of Foreign Assets Control (OFAC) classified the case as egregious and not voluntarily self-disclosed, partly because two vice presidents bypassed the screening under time pressure.

What organisations can take from it

Urgent customer orders never justify skipping sanctions screening of carriers and of the aircraft or vessels used.

Relevance to training and awareness

Business partner screening under time pressure, circumvention of internal approvals

Authority / court
U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Venezuela-, Iran-, Proliferations- und Terrorismus-Sanktionsprogramme (OFAC); IEEPA
Action
Fine
Status of proceedings
final
Sector
Transport, logistics and shipping
Culpability
negligent
Repeat case
no
Mitigating circumstances
No prior violations in five years, immediate remediation, substantial cooperation
Liability of senior managers
According to OFAC, the violation was driven primarily by two vice presidents who bypassed internal screening processes.
Published
3 Sep 2025

Original amount 1,610,775 USD, converted at the ECB reference rate of 3 Sep 2025.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

27 Aug 2025 V.Ships Norway A.S.V.Ships Norway: 2 million USD fine for oil pollution and falsified oil record books USAWaste and hazardous substances €1.73m

On board the tanker M/T Swift Winchester, a hose connected the incinerator's waste oil tank to the sewage tank from February to August 2022, so that oily waste bypassed the pollution prevention equipment and went into the sea; in August 2022, an oily water separator filter was also hosed down with degreaser on deck and the oily mixture ran overboard. The vessel called at Baton Rouge and Port Arthur with a knowingly falsified oil record book. The ship management company pleaded guilty and is paying a fine of 2 million USD.

What organisations can take from it

When a crew member reports misconduct to management, the company must intervene immediately; otherwise it is liable for the continued pollution.

Relevance to training and awareness

Handling oil residues on board and honest documentation

Authority / court
U.S. District Court for the Eastern District of Texas (Anklage: DOJ Environment and Natural Resources Division)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Act to Prevent Pollution from Ships (APPS)
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Culpability
intentional
Published
27 Aug 2025

Original amount 2,000,000 USD, converted at the ECB reference rate of 27 Aug 2025.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

26 Aug 2025 GXO Logistics, Inc. und Wincanton LimitedGXO/Wincanton: supermarket warehouse logistics must be sold after takeover United KingdomMerger control Order

GXO had already acquired Wincanton in April 2024; the Competition and Markets Authority (CMA) imposed a hold-separate order, appointed a monitoring trustee and, in Phase 2, found a lessening of competition in dedicated warehousing services for grocery retail. Under the final undertakings, GXO committed to divest Wincanton’s business serving supermarket customers.

What organisations can take from it

Anyone completing a deal before the merger review has concluded bears the risk of having to give up parts of the acquired business again.

Authority / court
Competition and Markets Authority (CMA)
Area of law
Competition law · Merger control
Legal basis
Enterprise Act 2002, ss. 41, 82, 90 (Final Undertakings)
Action
Order
Status of proceedings
final
Sector
Transport, logistics and shipping

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

2 Jul 2025 Key Holding, LLCLogistics company Key Holding: Colombian subsidiary organised 36 shipments to Cuba USABreaches of sanctions and embargoes €517,929

After the acquisition of a Colombian logistics company in December 2021, the latter organised 36 freight shipments to Cuba worth around 3.06 million USD up to July 2023. Neither the US parent nor the subsidiary had a sanctions compliance programme for foreign companies; the US Treasury's Office of Foreign Assets Control (OFAC) assessed the case as non-egregious and voluntarily self-disclosed.

What organisations can take from it

After an acquisition, roll out the sanctions compliance programme to the new foreign subsidiary immediately – the Cuba embargo applies to US-controlled subsidiaries worldwide.

Relevance to training and awareness

Sanctions compliance after acquisitions

Authority / court
U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Cuban Assets Control Regulations (31 C.F.R. part 515)
Action
Fine
Status of proceedings
final
Sector
Transport, logistics and shipping
Culpability
negligent
Repeat case
no
Mitigating circumstances
Voluntary self-disclosure, no prior violations, remedial measures after discovery
Published
2 Jul 2025

Original amount 608,825 USD, converted at the ECB reference rate of 2 Jul 2025.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

18 Jun 2025 Waxholms Ångfartygs AktiebolagWaxholmsbolaget: fine for processing a captain’s breathalyser test results SwedenEmployee data €6,801

The shipping company processed results of on-board breath alcohol tests that could be attributed to a complainant employed as a captain. The Swedish Authority for Privacy Protection (IMY) regarded this as processing without a legal basis and as unlawful processing of health data and imposed 75,000 SEK.

What organisations can take from it

Monitoring data such as alcohol test results are employees’ health data – access, storage and legal basis must be settled before such tests are introduced.

Relevance to training and awareness

Employee health data (alcohol tests)

Authority / court
Integritetsskyddsmyndigheten (IMY)
Area of law
Data protection · Employee data
Legal basis
DSGVO Art. 6, Art. 9
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Published
18 Jun 2025

Original amount 75,000 SEK, converted at the ECB reference rate of 18 Jun 2025.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

14 May 2025 Norfolk Southern Railway CompanyNorfolk Southern: EPA fine for locomotives without valid emissions certification USAEmissions and permits €266,631

In the view of the U.S. Environmental Protection Agency (EPA), the freight railway operated locomotives without a certificate of conformity, did not comply with the conditions of a testing exemption for several locomotives and operated locomotives in breach of the applicable emission standards. Under the settlement (Consent Agreement and Final Order), the company is paying a civil penalty of 299,000 USD.

What organisations can take from it

Converted vehicles or vehicles exempted for testing are also subject to certification and restoration obligations, which must be tracked in fleet management.

Authority / court
U.S. Environmental Protection Agency (EPA), Region 3
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Clean Air Act §§ 203(a), 213(d) (42 U.S.C. §§ 7522(a), 7547(d)); 40 C.F.R. § 1068.101
Action
Fine
Status of proceedings
final
Sector
Transport, logistics and shipping
Employees
10,000 or more

Original amount 299,000 USD, converted at the ECB reference rate of 14 May 2025.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

11 Apr 2025 Svarog Shipping & Trading Company LimitedTanker shipping company Svarog left OFSI information request unanswered United KingdomBreaches of sanctions and embargoes €5,768

In the context of investigations into dealings with a Sovcomflot subsidiary, the fuel shipping company registered in the UK and operating from Cyprus did not respond in time to a formal information request from HM Treasury's Office of Financial Sanctions Implementation (OFSI); a response only came after contact via its auditors. No sanctions breach as such was found, but the information offence was.

What organisations can take from it

Information requests from sanctions authorities need a clear intake channel and deadline monitoring – merely missing the deadline is already an offence.

Relevance to training and awareness

Handling requests from authorities and deadlines

Authority / court
HM Treasury, Office of Financial Sanctions Implementation (OFSI)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Russia (Sanctions) (EU Exit) Regulations 2019, regs. 72, 74(1)(a)
Action
Fine
Status of proceedings
final
Sector
Transport, logistics and shipping
Culpability
negligent
Mitigating circumstances
Minor, indirect harm; the response was provided subsequently
Published
8 May 2025

Original amount 5,000 GBP, converted at the ECB reference rate of 11 Apr 2025.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

19 Dec 2024 AAR Corp.Aviation services provider AAR pays 55.6 million USD for bribery in Nepal and South Africa USABribery of public officials €53.5m

Through an agent and a joint venture partner, AAR paid sham commissions to public officials in order to secure the sale of two Airbus A330s to Nepal Airlines and maintenance services for South African Airways Technical. SEC: 23,451,100 USD in disgorgement and 5,785,524 USD in interest; DOJ criminal penalty of 26,363,029 USD under a Non-Prosecution Agreement.

What organisations can take from it

State-owned airlines are public contracting entities – scrutinise commissions to intermediaries in aircraft transactions rigorously.

Relevance to training and awareness

Agents and joint venture partners in transactions with state-owned airlines

Authority / court
U.S. Securities and Exchange Commission (SEC); U.S. Department of Justice
Area of law
Bribery and corruption · Bribery of public officials
Legal basis
FCPA (Anti-Bestechung, Buchführung, interne Kontrollen); Non-Prosecution Agreement
Action
Fine
Status of proceedings
final
Sector
Transport, logistics and shipping
Employees
1,000 to 9,999
Culpability
intentional
Mitigating circumstances
Disclosure following press reports, cooperation (forensics, translations, witnesses) and remedial measures.
Liability of senior managers
A former senior employee of an AAR subsidiary, Deepak Sharma (named in the SEC order), was involved.
Published
19 Dec 2024

Original amount 55,599,653 USD, converted at the ECB reference rate of 19 Dec 2024.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

13 Dec 2024 C.H. Robinson International, Inc.C.H. Robinson: foreign subsidiaries transported Iranian and Cuban goods USABreaches of sanctions and embargoes €244,999

From November 2018 to February 2022, five foreign subsidiaries of the logistics group acquired through takeovers brokered or transported a total of 82 shipments involving Iranian or Cuban goods or an Iranian airline. The main cause was that their booking systems had not yet been integrated into the group's screening processes; the US Treasury's Office of Foreign Assets Control (OFAC) considered the case non-egregious and voluntarily self-disclosed.

What organisations can take from it

Connect acquired freight forwarders to central screening quickly; until then, interim controls on origin and carrier are needed.

Relevance to training and awareness

Integrating acquired companies into sanctions screening

Authority / court
U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Iranian Transactions and Sanctions Regulations; Cuban Assets Control Regulations
Action
Fine
Status of proceedings
final
Sector
Transport, logistics and shipping
Employees
10,000 or more
Culpability
negligent
Repeat case
no
Mitigating circumstances
Voluntary self-disclosure, no prior violations, swift remediation
Published
13 Dec 2024

Original amount 257,690 USD, converted at the ECB reference rate of 13 Dec 2024.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

22 Nov 2024 RyanairRyanair: 107.8 million EUR fine for cabin baggage and seat fees in Spain SpainMisleading advertising and pricing €107.8m

The Spanish Ministry of Consumer Affairs sanctioned Ryanair for charging for hand luggage in the cabin, surcharges for adjacent seats for children and persons requiring assistance, refusal of cash payments at airports, an excessive fee for printing boarding passes and non-transparent price information. At 107,775,777 EUR, Ryanair accounted for the largest share of the total fine of 179 million EUR imposed on five low-cost airlines.

What organisations can take from it

Unavoidable additional charges and surcharges must be included transparently in the final price and must be legally permissible.

Authority / court
Ministerio de Derechos Sociales, Consumo y Agenda 2030
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Art. 47 TRLGDCU (Real Decreto Legislativo 1/2007), infracciones muy graves
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Employees
10,000 or more
Published
22 Nov 2024

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

22 Nov 2024 United Parcel Service Inc. (UPS)UPS: goodwill of UPS Freight division incorrectly valued – 45 million USD USADisclosure and reporting obligations €43.2m

UPS based the valuation of UPS Freight on a consultant's appraisal of around 2 billion USD, although its own analyses had arrived at only about 650 million USD, and did not record a required goodwill impairment. UPS is paying 45 million USD and must introduce training for certain executives, board members and employees and engage an independent compliance consultant.

What organisations can take from it

Valuation reports are only as good as the information given to the valuers – internal findings must feed into impairment tests.

Authority / court
U.S. Securities and Exchange Commission (SEC)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Section 17(a)(2),(3) Securities Act; Reporting-, Buchführungs-, interne Kontroll- und Disclosure-Controls-Vorschriften des Exchange Act
Action
Fine
Status of proceedings
final
Sector
Transport, logistics and shipping

Original amount 45,000,000 USD, converted at the ECB reference rate of 22 Nov 2024.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

22 Nov 2024 VuelingVueling: 39.3 million EUR fine over additional fees and non-transparent prices SpainMisleading advertising and pricing €39.3m

In the same package of sanctions against low-cost airlines, Vueling received a fine of 39,264,412 EUR, including for fees for cabin baggage, surcharges for seats next to accompanied children and misleading omissions in the presentation of prices on its website. The order concludes the administrative proceedings; an action before the Audiencia Nacional (Spain's National High Court) could be brought within two months.

What organisations can take from it

Price components that almost every customer has to pay must not be added later as optional extras.

Authority / court
Ministerio de Derechos Sociales, Consumo y Agenda 2030
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Art. 47 TRLGDCU (Real Decreto Legislativo 1/2007), infracciones muy graves
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Published
22 Nov 2024

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

13 Nov 2024 Foodinho S.r.l. (Glovo-Gruppe)Garante: 5 million EUR against Glovo subsidiary Foodinho over monitoring of riders ItalyEmployee data €5m

The delivery platform unlawfully processed data on more than 35,000 riders: facial recognition for identity verification, location tracking even outside working hours and automated assessments without human review. Foodinho had already been sanctioned with 2.6 million EUR in 2021; in addition to 5 million EUR, the Italian data protection authority (Garante per la protezione dei dati personali) prohibited the biometric processing.

What organisations can take from it

Algorithmic management of workers requires transparency and human review, and must not include tracking outside working hours.

Authority / court
Garante per la protezione dei dati personali
Area of law
Data protection · Employee data
Legal basis
DSGVO (u. a. Transparenz, biometrische Daten, automatisierte Entscheidungen)
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Repeat case
yes
Published
22 Nov 2024

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

13 Nov 2024 Posti Jakelu OyPosti: 2.4 million EUR for automatically created e-mailboxes – court annuls fine FinlandData subject rights and transparency overturned

Customers who ordered, for example, mail forwarding automatically received an electronic OmaPosti mailbox that could not be deselected separately; they were also informed insufficiently and in part incorrectly about the activation. The sanctions board of the Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman) found no contractual legal basis for this bundling and imposed 2.4 million EUR together with a reprimand and an order to rectify the situation. On 3 November 2025 the Helsinki Administrative Court upheld the reprimand and the order on account of the insufficient information but annulled the fine, as it considered the processing necessary for the contract on Posti’s electronic services.

What organisations can take from it

Do not sell add-on services on the back of the contractual legal basis – anything not necessary for the main contract requires a separate choice.

Authority / court
Tietosuojavaltuutetun toimisto – seuraamuskollegio (Datenschutzbeauftragter, Sanktionsgremium)
Area of law
Data protection · Data subject rights and transparency
Legal basis
DSGVO Art. 6 Abs. 1 lit. b, Art. 13, Art. 25
Action
Fine
Status of proceedings
overturned
Sector
Transport, logistics and shipping
Published
15 Nov 2024

Amount in EUR; no ECB reference rate is available for this currency.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

10 Jun 2024 Favre SA Transports Internationaux TIR Martigny; weitere Parteien: Favre et Studer SA, RETRIPA VALAIS SA, TMR, Centre de Transferts Martigny SAWEKO: sanction against Valais transport and waste disposal firm over bid rigging SwitzerlandCartels and collusion €98,722

Companies engaged in the collection, transport and disposal of waste in Valais colluded on bids. WEKO imposed a sanction of CHF 95,138 on Favre SA TIR Martigny (Favre et Studer: CHF 0), approved amicable settlements and apportioned the procedural costs among four companies.

What organisations can take from it

Municipal waste disposal contracts are a focus of competition authorities – contacts about bids among competitors are off-limits, including among SMEs.

Relevance to training and awareness

Collusion in municipal waste disposal tenders

Authority / court
Wettbewerbskommission (WEKO)
Area of law
Competition law · Cartels and collusion
Legal basis
Art. 5 Abs. 3 i.V.m. Abs. 1 KG, Art. 49a Abs. 1 KG
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Mitigating circumstances
Amicable settlements; leniency programme (Favre et Studer free of sanctions)

Original amount 95,138 CHF, converted at the ECB reference rate of 10 Jun 2024.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

20 Mar 2024 Koninklijke Luchtvaart Maatschappij N.V. (KLM)Amsterdam District Court: KLM advertising on sustainable flying misleading NetherlandsMisleading environmental and sustainability claims Other

In a collective action brought by the Fossielvrij foundation, the Amsterdam District Court (Rechtbank Amsterdam) found that 15 KLM advertising claims were misleading and unlawful: they suggested sustainable flying or that offsetting products actually compensate for the climate impact, although biofuels and reforestation reduce it only marginally. KLM bears the costs of the proceedings; further claims were dismissed (ECLI:NL:RBAMS:2024:1512).

What organisations can take from it

Offsetting and SAF offerings must not create the impression of climate-neutral travel; associations can challenge such claims in court.

Relevance to training and awareness

Climate claims and offsetting offers in customer communication

Authority / court
Rechtbank Amsterdam
Area of law
Environment and sustainability · Misleading environmental and sustainability claims
Legal basis
Wet oneerlijke handelspraktijken (Art. 6:193a ff. BW)
Action
Other
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Employees
10,000 or more
Published
20 Mar 2024

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

28 Feb 2024 Ελληνικά Ταχυδρομεία Α.Ε. (ΕΛΤΑ, Hellenic Post)Greece: almost 3 million EUR against Hellenic Post after ransomware attack GreeceData breaches and data security €3m

In a cyber attack in 2022, attackers obtained administrator access, disabled protective software, encrypted files and later published stolen data on the darknet. The Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority) found that the postal company had not implemented the necessary technical and organisational measures or its own security policy and, by Decision 10/2024, imposed 2,995,140 EUR.

What organisations can take from it

A security policy on paper offers no protection – what is examined is whether it has actually been implemented.

Relevance to training and awareness

Cyber defence, handling of administrator accounts

Authority / court
Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 5 Abs. 1 lit. f, Art. 32 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

22 Jan 2024 Hamburger Hafen und Logistik AGHHLA: failure to publish notices on financial reports GermanyDisclosure and reporting obligations €200,000

HHLA had not announced from when and at which internet address the 2021 annual financial report and the 2022 half-yearly financial report were publicly available. The fine has been final since 14 February 2024.

What organisations can take from it

Safeguard recurring mandatory publications by means of a checklist with named responsible persons and deadlines.

Authority / court
Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
§ 114 Abs. 1 Satz 2 i. V. m. § 117 Nr. 1 und § 115 Abs. 1 Satz 2 i. V. m. § 117 Nr. 2 WpHG
Action
Fine
Status of proceedings
final
Sector
Transport, logistics and shipping
Published
2 Feb 2024

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text — no contact details and no IP address.

Ready for training that sticks?

Try it free for 14 days — from 1 user, no credit card, ends automatically.

Start free trial