Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific and Middle East: 1,929 cases from 40 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by countryWhat for?
by area of lawAll areas of law
Who?
by company- Anonymised companies €341.8m 35 % · 8 cases
- Ryanair DAC, Ryanair Holdings plc €255.8m 26 % · 1 case
- Ryanair €107.8m 11 % · 1 case
- MLU B.V. (Rechtsnachfolgerin der Ridetech International B.V., Anbieterin der Yango-App) €100m 10 % · 1 case
- České dráhy (ČD) und Österreichische Bundesbahnen (ÖBB) €48.7m 5 % · 1 case
- Vueling €39.3m 4 % · 1 case
- Amazon France Logistique SAS €15m 2 % · 1 case
- Air Caraïbes (mit Groupe Dubreuil Aéro, Groupe Dubreuil); K Finance (Mutter von Air Antilles/CAIRE); Miles Plus €14.6m 1 % · 1 case
- Braathens International Airways AB €13m 1 % · 1 case
- AENA, S.M.E., S.A. €10m 1 % · 1 case
- 19 more€28.4m
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q4 2023 | 0 | – |
| Q1 2024 | 0 | – |
| Q2 2024 | 0 | – |
| Q3 2024 | 0 | – |
| Q4 2024 | 0 | – |
| Q1 2025 | 0 | – |
| Q2 2025 | 1 | €33,492 |
| Q3 2025 | 0 | – |
| Q4 2025 | 0 | – |
| Q1 2026 | 0 | – |
| Q2 2026 | 0 | – |
| Q3 2026 | 0 | – |
| Q4 2026 | 0 | – |
1 case
28 Apr 2025 Taxa 4x35Taxa 4x35: appeal court raises GDPR fine to DKK 250,000 for excessive retention €33,492
The Østre Landsret (Eastern High Court) raised the fine of 100,000 DKK imposed by the Frederiksberg City Court in January 2023 to 250,000 DKK. The taxi company had kept customers' telephone numbers together with pick-up locations for five years instead of the necessary two; the Datatilsynet (Danish Data Protection Agency) had proposed 1.2 million DKK in its first GDPR fine recommendation and cited around 8.9 million affected trips. The court found the infringement negligent and reduced the amount because the proceedings had lasted about six years.
Retention periods must cover every identifier – deleting only the name while keeping the phone number is not anonymisation.
Retention periods and genuine anonymisation
- Authority / court
- Østre Landsret (auf Anzeige der Datatilsynet)
- Area of law
- Data protection
- Legal basis
- Art. 5 Abs. 1 lit. e, Art. 83 Abs. 5 lit. a DSGVO; databeskyttelseslovens § 41 stk. 1 nr. 4, stk. 3 og 6
- Action
- Fine
- Status of proceedings
- final
- Sector
- Transport, logistics and shipping
- Culpability
- negligent
- Mitigating circumstances
- Negligence, first offence, no particularly sensitive data, secure storage, prompt remediation after the report; long duration of the proceedings.
Original amount 250,000 DKK, converted at the ECB reference rate of 28 Apr 2025.
- Datatilsynet: Datatilsynet indstiller taxaselskab til bøde på 1,2 mio. kr. (25.03.2019, mit Update zu Byret und Landsret) Press release of an authority
- Østre Landsret, dom 28.04.2025, S-185-23 (Domsdatabasen, ECLI:DK:OLR:2025:SS0000000378) Court decision
- Retten på Frederiksberg, dom 06.01.2023, SS-5405/2020-FRB (Domsdatabasen) Court decision
Checked against the official source on 28 Sep 2026 · Direct link