Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe, North America, Latin America and Asia-Pacific: 1,875 cases from 39 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by area of lawAll areas of law
Who?
by company- Anonymised companies €342.6m 31 % · 12 cases
- Ryanair DAC, Ryanair Holdings plc €255.8m 23 % · 1 case
- Ryanair €107.8m 10 % · 1 case
- MLU B.V. (Rechtsnachfolgerin der Ridetech International B.V., Anbieterin der Yango-App) €100m 9 % · 1 case
- AAR Corp. €53.5m 5 % · 1 case
- České dráhy (ČD) und Österreichische Bundesbahnen (ÖBB) €48.7m 4 % · 1 case
- United Parcel Service Inc. (UPS) €43.2m 4 % · 1 case
- Vueling €39.3m 4 % · 1 case
- Brink’s Global Services USA, Inc. €35.6m 3 % · 1 case
- Amazon France Logistique SAS €15m 1 % · 1 case
- 44 more€76m
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q4 2023 | 0 | – |
| Q1 2024 | 0 | – |
| Q2 2024 | 0 | – |
| Q3 2024 | 0 | – |
| Q4 2024 | 0 | – |
| Q1 2025 | 0 | – |
| Q2 2025 | 0 | – |
| Q3 2025 | 0 | – |
| Q4 2025 | 1 | €10m |
| Q1 2026 | 0 | – |
| Q2 2026 | 0 | – |
| Q3 2026 | 0 | – |
| Q4 2026 | 0 | – |
1 case
6 Nov 2025 AENA, S.M.E., S.A.AEPD: €10m fine for AENA over airport facial recognition without a valid DPIA €10m
The airport operator AENA used a biometric facial recognition system for access, transit and boarding at several airports without presenting a data protection impact assessment meeting the legal requirements. The AEPD imposed 10,043,002 EUR for breaching Art. 35 GDPR and confirmed the provisional suspension of all biometric processing until a proper impact assessment is in place.
Anyone introducing biometric identification needs a sound impact assessment beforehand that genuinely tests necessity and proportionality.
Data protection impact assessment before introducing biometric systems
- Authority / court
- Agencia Española de Protección de Datos (AEPD)
- Area of law
- Data protection
- Legal basis
- Art. 35 DSGVO (Art. 83 Abs. 4 lit. a DSGVO)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Employees
- 1,000 to 9,999
- Published
- 20 Mar 2026
- AEPD, Resolución PS/00431/2024 (EXP202304532), AENA Decision of an authority
- BOE: Resolución de 4 de marzo de 2026 der AEPD, Sanktionen über 1 Mio. Euro Official register or notice
- AEPD, Memoria 2025 (Tabelle der 2025 unterzeichneten Bußgelder über 1 Mio. Euro) Official register or notice
Checked against the official source on 28 Sep 2026 · Direct link