Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 756 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by countryWhat for?
by area of lawAll areas of law
- Data protection 11 cases 48 % · €413.3m
- Consumer protection and online retail 5 cases 22 % · €150.7m
- Health and safety and employment law 4 cases 17 % · €49,231
- Capital markets and financial supervision 1 case 4 % · €200,000
- Competition law 1 case 4 % · €255.8m
- Environment and sustainability 1 case 4 % ·
Who?
by company- Amazon France Logistique SAS 1 case 5 % · €15m
- Avis 1 case 5 % · €1m
- Berliner Verkehrsbetriebe (BVG) AöR 1 case 5 % ·
- Foodinho S.r.l. (Glovo-Gruppe) 1 case 5 % · €5m
- Hamburger Hafen und Logistik AG 1 case 5 % · €200,000
- Koninklijke Luchtvaart Maatschappij N.V. (KLM) 1 case 5 % ·
- Lime Technology S.r.l., EmTransit S.r.l. (Dott), Bird Rides Italy S.r.l. 1 case 5 % · €2.68m
- MLU B.V. (Rechtsnachfolgerin der Ridetech International B.V., Anbieterin der Yango-App) 1 case 5 % · €100m
- Poczta Polska S.A. 1 case 5 % · €232,208
- Posti Jakelu Oy 1 case 5 % ·
- 9 more9 cases
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 0 | — |
| Q1 2024 | 3 | €3.2m |
| Q2 2024 | 0 | — |
| Q3 2024 | 1 | €290m |
| Q4 2024 | 4 | €152m |
| Q1 2025 | 0 | — |
| Q2 2025 | 1 | €6,801 |
| Q3 2025 | 2 | €500 |
| Q4 2025 | 3 | €270.8m |
| Q1 2026 | 2 | €245,939 |
| Q2 2026 | 2 | €100m |
| Q3 2026 | 5 | €3.71m |
23 cases
12 Aug 2026 40 lorry drivers hired out under sham service contract: 35,000 EUR in fines for haulage firms €35,000
A German haulage operator deployed 40 foreign drivers from two affiliated Lithuanian transport companies under his sole direction; the hiring-out of workers was disguised as a contract for work and services (Werkvertrag), and there was no licence from the Federal Employment Agency (Bundesagentur für Arbeit). Final fines: 20,000 EUR against the Lithuanian managing director and 15,000 EUR against the German hirer (date = publication).
What counts is actual practice: companies that deploy and direct third-party drivers like their own staff are engaged in temporary agency work – regardless of what the contract says.
- Authority / court
- Hauptzollamt Lörrach (Finanzkontrolle Schwarzarbeit)
- Area of law
- Health and safety and employment law · Minimum wage and undeclared work
- Legal basis
- Arbeitnehmerüberlassungsgesetz (Überlassung ohne Erlaubnis)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Transport, logistics and shipping
- Liability of senior managers
- Fines imposed personally on the managing director of the lending company and on the hirer.
- Published
- 12 Aug 2026
- Transportunternehmer im Raum Freiburg entleiht 40 Fahrer ohne Erlaubnis (Hauptzollamt Lörrach) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
4 Aug 2026 Lime Technology S.r.l., EmTransit S.r.l. (Dott), Bird Rides Italy S.r.l.Rome: 2.675 million EUR against e-scooter and e-bike sharing providers over blocked free rides €2.68m
The three sharing providers made it difficult for holders of a Metrebus annual pass to access the free-ride passes promised when the concessions were awarded, through inadequate organisation, cumbersome activation and long waiting times, which shortened the usable time; Bird also deactivated accounts without prior notice. The AGCM imposed fines totalling 2.675 million EUR in three proceedings (Lime 1.4 million, Dott 525,000, Bird 750,000 EUR).
Promised benefits must also be redeemable in organisational terms – sluggish processing can itself be unfair.
Customer service and redemption of promised services
- Authority / court
- Autorità Garante della Concorrenza e del Mercato (AGCM)
- Area of law
- Consumer protection and online retail · Information duties in online retail
- Legal basis
- Codice del Consumo (pratiche commerciali scorrette), Verfahren PS13028, PS13029, PS13030
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Published
- 6 Aug 2026
- PS13028-PS13029-PS13030 - Roma, sanzioni per 2,675 milioni di euro a operatori monopattini elettrici ed e-bike in sharing Press release of an authority
- AGCM Provvedimento PS13028 (Lime Technology S.r.l.) Decision of an authority
- AGCM Provvedimento PS13029 (EmTransit S.r.l. – Dott) Decision of an authority
- AGCM Provvedimento PS13030 (Bird Rides Italy S.r.l.) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
29 Jul 2026 AvisAvis: maximum fine of 1 million EUR for handling fee on traffic fines €1m
The car rental company charged customers an "administration fee" of 33.88 to 45 EUR when a rental car incurred a traffic offence – even though naming the driver is a statutory obligation of the rental company. Spain's Ministry of Social Rights, Consumer Affairs and 2030 Agenda classified this as a very serious infringement and imposed the maximum fine of 1 million EUR; a court had already declared the clause void in 2020.
No additional fee may be charged for fulfilling statutory obligations – least of all after a court has prohibited the clause.
- Authority / court
- Ministerio de Derechos Sociales, Consumo y Agenda 2030
- Area of law
- Consumer protection and online retail · Information duties in online retail
- Legal basis
- Artt. 82, 87.5 y 87.6 TRLGDCU (Real Decreto Legislativo 1/2007)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Repeat case
- yes
- Published
- 29 Jul 2026
- Consumo sanciona con un millón de euros a la empresa de alquiler de coches Avis por prácticas abusivas Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
28 Jul 2026 TrenitaliaTrenitalia removes hurdles to refunds for delays following AGCM proceedings Order
For refunds in the event of delays of 60 minutes or more or cancellations, Trenitalia required prior written confirmation from the call centre or ticket office. The AGCM accepted binding commitments: abolition of the confirmation requirement, strengthened refund channels, an information page on disruptions and an implementation report within three months; no infringement was found.
Additional formalities before statutory refunds act as a hurdle and lead to proceedings.
- Authority / court
- Autorità Garante della Concorrenza e del Mercato (AGCM)
- Area of law
- Consumer protection and online retail · Information duties in online retail
- Legal basis
- Codice del Consumo (impegni); EU-Fahrgastrechte im Eisenbahnverkehr
- Action
- Order
- Status of proceedings
- final
- Sector
- Transport, logistics and shipping
- Mitigating circumstances
- Binding commitments, no finding of an infringement.
- Published
- 30 Jul 2026
- PS13019 - Trenitalia, accolti impegni su ostacoli ai rimborsi per ritardi prolungati e cancellazioni treni Press release of an authority
- AGCM Provvedimento PS13019 (Trenitalia), Annahme der Zusagen, adunanza del 28 luglio 2026 Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
7 Jul 2026 Unternehmen mit drei Dienstfahrzeugen (in der Mitteilung nicht namentlich genannt)Administrative Court upholds ban on continuous GPS tracking of three company vehicles Order
The data protection authority had prohibited a company from tracking its three company vehicles continuously by GPS and ordered the data to be erased; narrow purposes such as theft protection while parked remained permitted. The Upravno sodišče Republike Slovenije (Administrative Court of the Republic of Slovenia) upheld this and clarified that employee consent bundled with other declarations is invalid.
Employee consent rarely supports monitoring – and never when it is bundled with other declarations in the form.
Consent and proportionality in employee monitoring
- Authority / court
- Upravno sodišče Republike Slovenije (bekanntgemacht durch den Informacijski pooblaščenec)
- Area of law
- Data protection · Employee data
- Legal basis
- Art. 6 Abs. 1 lit. f, Art. 7 Abs. 2 DSGVO
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Published
- 7 Jul 2026
- Upravno sodišče znova potrdilo prakso IP: sistematično GPS sledenje zaposlenim ni dopustno brez tehtnega razloga Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
4 May 2026 Berliner Verkehrsbetriebe (BVG) AöRBlnBDI reprimands BVG: deletion at service provider not checked, data breach reported too late Reprimand or warning
A processor of Berlin's public transport operator BVG, which had sent customer letters in early 2025, was hacked; around 180,000 customer records were affected, although they should long since have been deleted after the end of the contract. BVG had never checked the deletion, had not agreed any procedure for data breaches in the data processing agreement and reported the incident only after the 72-hour deadline had expired; the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI) issued a reprimand.
Have service providers prove deletion after the end of the contract, and have an internal procedure that immediately turns indications of a breach into a 72-hour notification.
Reporting process for data breaches and management of service providers
- Authority / court
- Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)
- Area of law
- Data protection · Data processors
- Legal basis
- Art. 5 Abs. 2 i. V. m. Abs. 1 lit. c, e, f, Art. 28 Abs. 3 S. 2 lit. f, Art. 32 Abs. 1, Art. 33 DSGVO
- Action
- Reprimand or warning
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Mitigating circumstances
- BVG has announced measures against similar incidents.
- Published
- 4 May 2026
- Datenschutzbeauftragte verwarnt BVG Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
1 Apr 2026 MLU B.V. (Rechtsnachfolgerin der Ridetech International B.V., Anbieterin der Yango-App)Yango taxi app: 100 million EUR for transferring data to Russia €100m
Amsterdam-based Ridetech offered the ride-hailing app Yango in Finland and Norway and transferred data of drivers and customers to the group companies Yandex.Taxi LLC and Yandex LLC in Russia without demonstrating appropriate safeguards. The Autoriteit Persoonsgegevens (Dutch Data Protection Authority, AP) imposed 100 million EUR on the legal successor and prohibited further transfers to Russia.
Transfers to states without legal protection against access by authorities can hardly be safeguarded – group structures with such locations need data localisation in the EU.
- Authority / court
- Autoriteit Persoonsgegevens (AP)
- Area of law
- Data protection · International data transfers
- Legal basis
- Art. 44, Art. 46 iVm Art. 5 Abs. 1 lit. a und Abs. 2 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Jan 2026 Logistics business: fines for minimum wage, reporting and foreign employment violations €13,731
Between June and December 2023, a logistics and transport business withheld a total of around 2,000 EUR in minimum wages from several employees, breached reporting and immediate notification obligations, and in July/August 2023 employed a foreign national without a residence permit. The fines: 5,231 EUR (minimum wage), 750 EUR each (reporting obligations) and 7,000 EUR (unauthorised employment of foreign nationals), totalling 13,731 EUR (date = publication).
Even small wage arrears are penalised individually alongside reporting and residence violations – HR processes for new hires need a fixed checklist.
Immediate notification and checking of work permits when hiring
- Authority / court
- Hauptzollamt Karlsruhe (Finanzkontrolle Schwarzarbeit)
- Area of law
- Health and safety and employment law · Minimum wage and undeclared work
- Legal basis
- § 21 Abs. 1 Nr. 11 MiLoG; § 111 Abs. 1 Nr. 2 SGB IV; § 404 Abs. 2 Nr. 3 SGB III
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Published
- 22 Jan 2026
- Zoll ahndet Mindestlohn- und Meldepflichtverstöße bei Logistikunternehmen (Hauptzollamt Karlsruhe) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
2 Jan 2026 Poczta Polska S.A.Poczta Polska: 978,128 PLN because the data protection officer was not independent €232,208
The function of data protection officer was performed by a manager who was at the same time responsible for security and protection of classified information and thus monitored their own activities; there was no conflict analysis. Poland’s data protection authority (UODO) imposed 978,128 PLN and referred to numerous previous reprimands and orders against the company.
Data protection officers must not be responsible for the processes they monitor – check dual roles for conflicts of interest in advance.
- Authority / court
- Prezes Urzędu Ochrony Danych Osobowych (UODO)
- Area of law
- Data protection
- Legal basis
- Art. 38 Abs. 3 und 6 DSGVO (DKN.5131.4.2025)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Employees
- 10,000 or more
- Repeat case
- yes
- Mitigating circumstances
- During the proceedings the function was made independent and placed directly under the management board.
- Published
- 26 Jan 2026
Original amount 978,128 PLN, converted at the ECB reference rate of 2 Jan 2026.
- Kara dla Poczty Polskiej za brak zapewnienia niezależności sprawowania funkcji IOD Press release of an authority
- Decyzja DKN.5131.4.2025 z 2 stycznia 2026 Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Dec 2025 Ryanair DAC, Ryanair Holdings plcItaly: 255.8 million EUR against Ryanair for obstructing travel agencies €255.8m
From April 2023 until at least April 2025, Ryanair obstructed travel agencies from buying Ryanair flights in combination with other services, for example through facial recognition procedures, account deletions, blocking of means of payment and restrictive partner agreements. The AGCM considered this to be an abuse of a dominant position and imposed fines of 255,761,692 EUR on a joint and several basis.
Dominant providers must not use technical barriers to force sales partners and resellers out of the market.
- Authority / court
- Autorità Garante della Concorrenza e del Mercato (AGCM)
- Area of law
- Competition law · Abuse of market power
- Legal basis
- Art. 102 AEUV
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Employees
- 10,000 or more
- Published
- 23 Dec 2025
- A568 - Ryanair DAC and its parent company Ryanair Holdings plc fined over € 255 million for abuse of a dominant position Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Dec 2025 Amazon France Logistique SASConseil d'État reduces CNIL fine against Amazon France Logistique to 15 million EUR €15m
In 2023, the French data protection authority (CNIL) had imposed 32 million EUR for the real-time monitoring of warehouse staff through scanner metrics. France's supreme administrative court (Conseil d'État) held that three metrics (‘Stow Machine Gun’, ‘Idle Time’, ‘Latency’) were covered by legitimate interest, but upheld the findings on the 31-day retention of all metrics, information deficiencies and security flaws in the video surveillance, and reduced the fine to 15 million EUR.
Store employee performance metrics only for as long and in as much detail as their specific purpose requires.
- Authority / court
- Conseil d'État
- Area of law
- Data protection · Employee data
- Legal basis
- Art. 5 Abs. 1 lit. c, Art. 12, 13, 32 DSGVO
- Action
- Fine
- Status of proceedings
- reduced
- Sector
- Transport, logistics and shipping
- Employees
- 10,000 or more
- Conseil d'État, décision n° 492830 du 23 décembre 2025 Court decision
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
24 Nov 2025 SIA "EUROPARK LATVIA"Europark Latvia pays 25,000 EUR for payment reminders sent to outdated addresses €25,000
Following several complaints, the Datu valsts inspekcija (Latvian Data State Inspectorate, DVI) examined how the parking operator collects contractual penalties: invoices were sent to previous rather than current registered addresses, claims were handed over to debt collection services and entered in the database of Kredītinformācijas Birojs. The authority found breaches of the principles of lawfulness, data minimisation and confidentiality and of the accountability obligation and imposed 25,000 EUR (previous year’s turnover according to the decision: 8,323,178 EUR).
Anyone collecting debts or reporting them to credit agencies must first ensure that address data are up to date.
Data quality in receivables management
- Authority / court
- Datu valsts inspekcija (DVI)
- Area of law
- Data protection
- Legal basis
- Art. 5 Abs. 1 lit. a, c, f und Abs. 2, Art. 83 Abs. 5 lit. a DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Culpability
- intentional
- Mitigating circumstances
- Practice changed after the proceedings began; contracts concluded with the population and vehicle registers (PMLP, CSDD)
- DVI Lēmums Nr. 01630000100425-3 Par soda piemērošanu (SIA „EUROPARK LATVIA“), 24.11.2025 Decision of an authority
- Datu valsts inspekcija – Lēmumi (Liste der veröffentlichten Entscheidungen) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
28 Aug 2025 Taxi operator manipulated shift sheets: suspended sentence, 440,000 EUR loss Custodial sentence
A taxi operator from the district of Karlsruhe, who also ran a café, had taxi drivers fill in shift sheets incompletely, destroyed documents subject to retention requirements and failed to pay over social insurance contributions of more than 440,000 EUR; in addition, he wrongly claimed short-time working allowance (Kurzarbeitergeld). Final: 1 year and 4 months' imprisonment suspended on probation, 120 hours of community service and restitution of the loss (date = publication).
In the taxi and transport sector, incomplete working time records are the first point of attack for the FKS (Finanzkontrolle Schwarzarbeit, the customs unit combating illicit employment) – time recording must be complete and tamper-proof.
- Authority / court
- Amtsgericht Karlsruhe (Ermittlung: Hauptzollamt Karlsruhe, FKS)
- Area of law
- Health and safety and employment law · Minimum wage and undeclared work
- Legal basis
- § 266a StGB (126 Fälle)
- Action
- Custodial sentence
- Status of proceedings
- final
- Sector
- Transport, logistics and shipping
- Culpability
- intentional
- Mitigating circumstances
- Sentence suspended on probation.
- Liability of senior managers
- Operator convicted personally.
- Published
- 28 Aug 2025
- Verschleierte Arbeitszeiten und vernichtete Belege (Hauptzollamt Karlsruhe) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Jul 2025 Hungarian haulier: lorry driver underpaid during posting – 500 EUR final €500
A Hungarian lorry driver of a freight transport company based in Hungary (not named in the decision) received only 137.94 EUR instead of the 319.55 EUR required under the collective agreement for a posting to Austria in March 2020. The Weiz district authority (Bezirkshauptmannschaft Weiz) imposed 500 EUR on the managing director, and the Styria Regional Administrative Court (Landesverwaltungsgericht Steiermark) upheld this; Austria's Supreme Administrative Court (Verwaltungsgerichtshof, VwGH) rejected the appeal on points of law (Ra 2025/11/0049).
Even short cross-border transport operations trigger Austrian minimum pay obligations – haulage companies must account for posting days separately.
- Authority / court
- Verwaltungsgerichtshof (Vorinstanzen: Bezirkshauptmannschaft Weiz, Landesverwaltungsgericht Steiermark)
- Area of law
- Health and safety and employment law · Minimum wage and undeclared work
- Legal basis
- § 29 Abs. 1 Lohn- und Sozialdumping-Bekämpfungsgesetz (LSD-BG)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Transport, logistics and shipping
- Liability of senior managers
- The fine is directed against the managing director under commercial law.
- VwGH Ra 2025/11/0049 vom 22.07.2025 (RIS) Court decision
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
18 Jun 2025 Waxholms Ångfartygs AktiebolagWaxholmsbolaget: fine for processing a captain’s breathalyser test results €6,801
The shipping company processed results of on-board breath alcohol tests that could be attributed to a complainant employed as a captain. The Swedish Authority for Privacy Protection (IMY) regarded this as processing without a legal basis and as unlawful processing of health data and imposed 75,000 SEK.
Monitoring data such as alcohol test results are employees’ health data – access, storage and legal basis must be settled before such tests are introduced.
Employee health data (alcohol tests)
- Authority / court
- Integritetsskyddsmyndigheten (IMY)
- Area of law
- Data protection · Employee data
- Legal basis
- DSGVO Art. 6, Art. 9
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Published
- 18 Jun 2025
Original amount 75,000 SEK, converted at the ECB reference rate of 18 Jun 2025.
- IMY – Tillsyn Waxholms Ångfartygs AB (WÅAB) Decision of an authority
- IMY – Beslut efter tillsyn, IMY-2024-1520 (18.06.2025) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Nov 2024 RyanairRyanair: 107.8 million EUR fine for cabin baggage and seat fees in Spain €107.8m
The Spanish Ministry of Consumer Affairs sanctioned Ryanair for charging for hand luggage in the cabin, surcharges for adjacent seats for children and persons requiring assistance, refusal of cash payments at airports, an excessive fee for printing boarding passes and non-transparent price information. At 107,775,777 EUR, Ryanair accounted for the largest share of the total fine of 179 million EUR imposed on five low-cost airlines.
Unavoidable additional charges and surcharges must be included transparently in the final price and must be legally permissible.
- Authority / court
- Ministerio de Derechos Sociales, Consumo y Agenda 2030
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Art. 47 TRLGDCU (Real Decreto Legislativo 1/2007), infracciones muy graves
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Employees
- 10,000 or more
- Published
- 22 Nov 2024
- Consumo sanciona con 179 millones de euros a cinco aerolíneas low cost por prácticas abusivas Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Nov 2024 VuelingVueling: 39.3 million EUR fine over additional fees and non-transparent prices €39.3m
In the same package of sanctions against low-cost airlines, Vueling received a fine of 39,264,412 EUR, including for fees for cabin baggage, surcharges for seats next to accompanied children and misleading omissions in the presentation of prices on its website. The order concludes the administrative proceedings; an action before the Audiencia Nacional (Spain's National High Court) could be brought within two months.
Price components that almost every customer has to pay must not be added later as optional extras.
- Authority / court
- Ministerio de Derechos Sociales, Consumo y Agenda 2030
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Art. 47 TRLGDCU (Real Decreto Legislativo 1/2007), infracciones muy graves
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Published
- 22 Nov 2024
- Consumo sanciona con 179 millones de euros a cinco aerolíneas low cost por prácticas abusivas Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
13 Nov 2024 Foodinho S.r.l. (Glovo-Gruppe)Garante: 5 million EUR against Glovo subsidiary Foodinho over monitoring of riders €5m
The delivery platform unlawfully processed data on more than 35,000 riders: facial recognition for identity verification, location tracking even outside working hours and automated assessments without human review. Foodinho had already been sanctioned with 2.6 million EUR in 2021; in addition to 5 million EUR, the Italian data protection authority (Garante per la protezione dei dati personali) prohibited the biometric processing.
Algorithmic management of workers requires transparency and human review, and must not include tracking outside working hours.
- Authority / court
- Garante per la protezione dei dati personali
- Area of law
- Data protection · Employee data
- Legal basis
- DSGVO (u. a. Transparenz, biometrische Daten, automatisierte Entscheidungen)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Repeat case
- yes
- Published
- 22 Nov 2024
- Rider, Garante privacy: no all'algoritmo incontestabile dai lavoratori Press release of an authority
- Garante – Rider: Sanzione di 2,6 milioni di euro a una piattaforma del gruppo Glovo (2021) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
13 Nov 2024 Posti Jakelu OyPosti: 2.4 million EUR for automatically created e-mailboxes – court annuls fine overturned
Customers who ordered, for example, mail forwarding automatically received an electronic OmaPosti mailbox that could not be deselected separately; they were also informed insufficiently and in part incorrectly about the activation. The sanctions board of the Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman) found no contractual legal basis for this bundling and imposed 2.4 million EUR together with a reprimand and an order to rectify the situation. On 3 November 2025 the Helsinki Administrative Court upheld the reprimand and the order on account of the insufficient information but annulled the fine, as it considered the processing necessary for the contract on Posti’s electronic services.
Do not sell add-on services on the back of the contractual legal basis – anything not necessary for the main contract requires a separate choice.
- Authority / court
- Tietosuojavaltuutetun toimisto – seuraamuskollegio (Datenschutzbeauftragter, Sanktionsgremium)
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- DSGVO Art. 6 Abs. 1 lit. b, Art. 13, Art. 25
- Action
- Fine
- Status of proceedings
- overturned
- Sector
- Transport, logistics and shipping
- Published
- 15 Nov 2024
Amount in EUR; no ECB reference rate is available for this currency.
- Tietosuojavaltuutettu – Postille seuraamusmaksu OmaPosti-palvelun tietosuojapuutteista (15.11.2024) Press release of an authority
- Finlex – Tietosuojavaltuutettu 13.11.2024 (sähköinen postilaatikko) Decision of an authority
- Helsingin hallinto-oikeus – kumosi Posti Jakelu Oy:lle määrätyn 2,4 miljoonan euron seuraamusmaksun (03.11.2025) Court press release
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Jul 2024 Uber Technologies Inc. und Uber B.V.Uber: 290 million EUR – driver data sent to the USA for two years without a transfer tool €290m
Uber stored sensitive data of European drivers – including location, payment and identity document data, and in some cases criminal and health data – on servers in the USA and from August 2021 no longer used any transfer tool. Following complaints from more than 170 French drivers, the Autoriteit Persoonsgegevens (Dutch Data Protection Authority, AP) imposed 290 million EUR; it was the AP’s third fine against Uber.
Intra-group transfers to headquarters are third-country transfers – anyone who lets a transfer tool lapse transfers data without a legal basis.
- Authority / court
- Autoriteit Persoonsgegevens (AP)
- Area of law
- Data protection · International data transfers
- Legal basis
- Art. 44 DSGVO
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Transport, logistics and shipping
- Employees
- 10,000 or more
- Repeat case
- yes
- Published
- 26 Aug 2024
- AP legt Uber boete op van 290 miljoen euro om doorgifte data chauffeurs naar VS (26.08.2024) Press release of an authority
- AP, Besluit boete Uber doorgifte naar VS vom 22.07.2024 Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link