Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific, Middle East and Africa: 2,207 cases from 44 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

97cases from 1 jurisdiction
€282.8mTotal of monetary amounts (86 cases with an amount)
€108.1mLargest single case: Xeltox Enterprises Ltd. (Cryptomus)
€80,645Median per case with an amount

Click a bar to drill down one level.

Where?

by authority
  1. Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) €145m 51 % · 68 cases
  2. Court of Québec (Ermittlungen: Environment and Climate Change Canada) €64.8m 23 % · 4 cases
  3. Competition Bureau Canada / Ontario Superior Court €36m 13 % · 2 cases
  4. Federal Court of Appeal / Competition Tribunal (auf Antrag des Competition Bureau) €24m 8 % · 1 case
  5. Public Prosecution Service of Canada (PPSC); Superior Court of Quebec €7.2m 3 % · 1 case
  6. Competition Bureau Canada (Consent Agreement) €2.28m 1 % · 1 case
  7. Competition Bureau Canada (Consent Agreement beim Competition Tribunal) €2.22m 1 % · 3 cases
  8. Ontario Court of Justice, Sault Ste. Marie (Ermittlungen: Environment and Climate Change Canada) €747,710 0 % · 1 case
  9. Ontario Court of Justice (Ermittlungen: Environment and Climate Change Canada) €463,765 0 % · 1 case
  10. Court of Québec (Anklage: Environment and Climate Change Canada) €43,724 0 % · 2 cases
  11. 9 more€63,786

What for?

by area of law

All areas of law

  1. Money laundering and terrorist financing €145m 51 % · 68 cases
  2. Environment and sustainability €66.1m 23 % · 10 cases
  3. Competition law €36m 13 % · 6 cases
  4. Consumer protection and online retail €28.5m 10 % · 3 cases
  5. Bribery and corruption €7.2m 3 % · 1 case
  6. Other €32,646 0 % · 2 cases
  7. Data protection – 0 % · 5 cases
  8. Sanctions and export control – 0 % · 2 cases

Who?

by sector

All sectors

  1. Financial services and insurance €141.5m 50 % · 38 cases
  2. Steel and metals €64.7m 23 % · 5 cases
  3. Food and agriculture €34.7m 12 % · 4 cases
  4. Media and online platforms €26.2m 9 % · 3 cases
  5. Defence and security €7.21m 3 % · 2 cases
  6. Retail and e-commerce €2.68m 1 % · 8 cases
  7. Other €2.16m 1 % · 9 cases
  8. Transport, logistics and shipping €1.36m 0 % · 3 cases
  9. Chemicals and pharmaceuticals €1.3m 0 % · 2 cases
  10. Construction and real estate €893,352 0 % · 17 cases
  11. 3 more€18,979

When?

per year, by date of decision
Trend
PeriodCasesTotal
202316€52.5m
202418€14.2m
202535€125.8m
202628€90.2m

97 cases

24 Sep 2026 Kalibrate Canada (Tochter der Kalibrate Technologies Ltd.)Canada: Kalibrate must stop sharing retailer-specific petrol station data CanadaAbuse of market power Order

Kalibrate's "Market Intelligence" product passed on retailer-specific sales data from petrol stations that allowed conclusions to be drawn about competitors and could facilitate coordinated pricing behaviour. In an agreement registered with the Competition Tribunal, Kalibrate undertakes to supply only aggregated and time-delayed data – the first case under the reformed abuse of dominance rules.

What organisations can take from it

Providers of market and price data must ensure that their products do not disseminate individualised competitor data.

Authority / court
Competition Bureau Canada (Consent Agreement beim Competition Tribunal)
Area of law
Competition law · Abuse of market power
Legal basis
Abuse-of-dominance-Bestimmungen des Competition Act (Fassung 2023)
Action
Order
Status of proceedings
unknown
Sector
Energy and utilities
Published
24 Sep 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 Sep 2026 Empire Company LimitedSobeys parent Empire: consent agreement on property controls in grocery retail CanadaCompetition law Order

Empire Company Limited, parent company of grocery banners such as Sobeys, Farm Boy, Safeway, IGA, Foodland, FreshCo, Marché Bonichoix and Les Marchés Tradition, reached an agreement with the Competition Bureau on its use of property controls in the Canadian grocery sector. The Commissioner of Competition filed it with the Competition Tribunal as a registered consent agreement on 22 September 2026. In June 2026 the Bureau had obtained court orders to advance its investigation into these property controls.

What organisations can take from it

Use and exclusivity restrictions on property can be challenged under competition law where they make it harder for competitors to access sites.

Authority / court
Competition Bureau Canada (Consent Agreement, registriert beim Competition Tribunal)
Area of law
Competition law
Legal basis
Competition Act; beim Competition Tribunal registriertes Consent Agreement (Paragraf in den zugänglichen Quellen nicht genannt)
Action
Order
Status of proceedings
final
Sector
Retail and e-commerce
Employees
10,000 or more
Published
22 Sep 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Sep 2026 Algoma Steel Inc.Algoma Steel: 1.2 million CAD fine for gear oil in the St. Marys River Canada, ONWaste and hazardous substances €747,710

In June 2022, a gear oil tank overflowed at the steelworks in Sault Ste. Marie; an estimated 1,000 to 1,250 litres of oil entered the St. Marys River, harmful to fish and migratory birds. The company pleaded guilty to two counts and is paying 1.2 million CAD into the Environmental Damages Fund; its name is listed in the Environmental Offenders Registry.

What organisations can take from it

Even small tank overflows near watercourses lead to fines in the millions – overfill protection and containment systems are mandatory.

Relevance to training and awareness

Filling and monitoring oil tanks

Authority / court
Ontario Court of Justice, Sault Ste. Marie (Ermittlungen: Environment and Climate Change Canada)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Fisheries Act, Subsection 36(3); Migratory Birds Convention Act, 1994, Subsection 5.1(1)
Action
Fine
Status of proceedings
unknown
Sector
Steel and metals
Mitigating circumstances
Guilty plea.
Published
11 Sep 2026

Original amount 1,200,000 CAD, converted at the ECB reference rate of 10 Sep 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Aug 2026 Volga-Dnepr Airlines LLCFederal Court: cargo airline Volga-Dnepr remains on Canadian sanctions list CanadaBreaches of sanctions and embargoes Order

The Russian cargo airline had been added to the list of the Special Economic Measures (Russia) Regulations in April 2023; the Minister of Foreign Affairs rejected the application for delisting. The Federal Court (2026 FC 1048) dismissed the application for judicial review: the Minister had not exercised her broad discretion unreasonably, and there was no procedural error.

What organisations can take from it

Listed logistics partners often remain listed for years – anyone buying air freight must continuously screen carriers and parent companies against sanctions lists.

Relevance to training and awareness

Listings of transport service providers in partner screening

Authority / court
Federal Court (2026 FC 1048); Minister of Foreign Affairs
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Special Economic Measures Act; Special Economic Measures (Russia) Regulations, SOR/2014-58, ss. 2(a), 8
Action
Order
Status of proceedings
unknown
Sector
Transport, logistics and shipping

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Aug 2026 Your Neighbourhood Credit Union LimitedFINTRAC: CAD 16,500 penalty on Your Neighbourhood Credit Union Limited for one violation of anti-money laundering obligations CanadaInternal controls €10,243

According to FINTRAC, Your Neighbourhood Credit Union Limited is a provincially regulated credit union based in Kitchener, Ontario. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 16,500 on the company on 10 August 2026. According to FINTRAC's findings, made during a compliance examination, the company committed one violation of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violation concerned written compliance policies and procedures. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Your Neighbourhood Credit Union Limited", published 24 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-24-2-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
PCMLTFA s. 9.6(1); PCMLTF Regulations 156(1)(b); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
24 Sep 2026

Original amount 16,500 CAD, converted at the ECB reference rate of 10 Aug 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jul 2026 The New Brunswick Lotteries and Gaming CorporationFINTRAC: CAD 399,712.50 penalty on The New Brunswick Lotteries and Gaming Corporation for one violation of anti-money laundering obligations CanadaSuspicious activity reports €249,415

According to FINTRAC, The New Brunswick Lotteries and Gaming Corporation is a reporting entity in the casino sector based in Fredericton, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 399,712.50 on the company on 24 July 2026. According to FINTRAC's findings, made during a compliance examination, the company committed one violation of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violation concerned suspicious transaction reporting. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on the New Brunswick Lotteries and Gaming Corporation", published 3 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-03-2-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
PCMLTFA s. 7; Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Other
Published
3 Sep 2026

Original amount 399,712.5 CAD, converted at the ECB reference rate of 24 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 Caisse populaire acadienne ltéeFINTRAC: CAD 676,500 penalty on Caisse populaire acadienne ltée for 3 violations of anti-money laundering obligations CanadaSuspicious activity reports €421,916

According to FINTRAC, Caisse populaire acadienne ltée is a federally regulated credit union based in Caraquet, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 676,500 on the company on 23 July 2026. According to FINTRAC's findings, made during a compliance examination, the company committed 3 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned suspicious transaction reporting, written compliance policies and procedures and assessing and documenting money laundering and terrorist financing risks. Specifically, according to FINTRAC, the credit union failed in four instances to report multiple transactions that showed indicators of suspicion. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Caisse populaire acadienne ltée", published 24 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-24-4-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
PCMLTFA s. 7, 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c), 156(2); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
24 Sep 2026

Original amount 676,500 CAD, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 Nova Scotia Gaming CorporationFINTRAC: 231,826 CAD against Nova Scotia Gaming over missing suspicious transaction reports CanadaSuspicious activity reports €144,584

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) imposed 231,826 CAD on the Halifax gaming corporation (casino sector) because it failed to file suspicious transaction reports on attempted transactions despite reasonable grounds for suspicion, did not keep its compliance policies up to date and approved by a senior officer, and did not assess the money laundering risk as required. The penalty was paid in full.

What organisations can take from it

Even aborted or merely attempted transactions can be reportable – cashier staff must know this.

Relevance to training and awareness

Suspicious transaction reports even for merely attempted transactions

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
Proceeds of Crime (Money Laundering) and Terrorist Financing Act, Part 1, und zugehörige Verordnungen
Action
Fine
Status of proceedings
final
Sector
Other
Published
3 Sep 2026

Original amount 231,826 CAD, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Jul 2026 Colonial Farms Ltd.Colonial Farms: CFIA administrative monetary penalty of 11,000 CAD under SFCR s. 88 CanadaOther €6,852

On 15 July 2026, the Canadian Food Inspection Agency (CFIA) imposed an administrative monetary penalty of 11,000 CAD on the company in Western Canada for a violation of s. 88 of the Safe Food for Canadians Regulations. An earlier penalty under the same provision from May 2025 was set aside in review proceedings.

What organisations can take from it

Companies that do not eliminate the cause after a first penalty risk repeat penalties and stricter supervision.

Authority / court
Canadian Food Inspection Agency (CFIA)
Area of law
Other
Legal basis
Safe Food for Canadians Regulations, s. 88
Action
Fine
Status of proceedings
final
Sector
Food and agriculture

Original amount 11,000 CAD, converted at the ECB reference rate of 15 Jul 2026.

Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Jun 2026 Caisse populaire Alliance limitéeFINTRAC: CAD 82,500 penalty on Caisse populaire Alliance limitée for 4 violations of anti-money laundering obligations CanadaCustomer due diligence €51,055

According to FINTRAC, Caisse populaire Alliance limitée is a provincially regulated credit union based in North Bay, Ontario. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 82,500 on the company on 5 June 2026. According to FINTRAC's findings, made during a compliance examination, the company committed 4 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned written compliance policies and procedures, enhanced measures for high-risk situations, assessing and documenting money laundering and terrorist financing risks and the prescribed review of the compliance programme. Specifically, according to FINTRAC, 46 of 118 high-risk clients were not reviewed annually, contrary to the credit union's own policies. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Caisse populaire Alliance limitée", published 24 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-24-1-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
PCMLTFA s. 9.6(1), 9.6(3); PCMLTF Regulations 156(1)(b), 156(1)(c), 156(1)(f), 156(2), 156(3), 157; Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
24 Sep 2026

Original amount 82,500 CAD, converted at the ECB reference rate of 5 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Jun 2026 Pathwise Credit UnionFINTRAC: CAD 41,250 penalty on Pathwise Credit Union for 2 violations of anti-money laundering obligations CanadaInternal controls €25,501

According to FINTRAC, Pathwise Credit Union is a provincially regulated credit union based in Oshawa, Ontario. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 41,250 on the company on 4 June 2026. According to FINTRAC's findings, made during a compliance examination, the company committed 2 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned written compliance policies and procedures and assessing and documenting money laundering and terrorist financing risks. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Pathwise Credit Union", published 24 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-24-3-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
PCMLTFA s. 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
24 Sep 2026

Original amount 41,250 CAD, converted at the ECB reference rate of 4 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

29 May 2026 Atlantic Lottery Corporation Inc.FINTRAC: CAD 212,025 penalty on Atlantic Lottery Corporation Inc. for 3 violations of anti-money laundering obligations CanadaSuspicious activity reports €131,906

According to FINTRAC, Atlantic Lottery Corporation Inc. is a reporting entity in the casino sector based in Moncton, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 212,025 on the company on 29 May 2026. According to FINTRAC's findings, made during a compliance examination, the company committed 3 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned suspicious transaction reporting, written compliance policies and procedures and assessing and documenting money laundering and terrorist financing risks. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Atlantic Lottery Corporation Inc.", published 9 July 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-07-09-1-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
PCMLTFA s. 7, 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Other
Published
9 Jul 2026

Original amount 212,025 CAD, converted at the ECB reference rate of 29 May 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 May 2026 Parrish & Heimbecker, Limited; GrainsConnect Canada Operations Inc.Canada: grain elevator must be sold in the takeover of GrainsConnect CanadaMerger control Order

The planned acquisition of GrainsConnect by Parrish & Heimbecker would have reduced competition for the purchase of wheat from farmers around Reford (Saskatchewan). The Competition Bureau reached an agreement under which P&H must divest the grain elevator in Reford to an approved buyer and continue to operate it normally until then.

What organisations can take from it

Merger control also has local effects: even a single site can trigger a divestiture requirement.

Authority / court
Competition Bureau Canada (Consent Agreement beim Competition Tribunal)
Area of law
Competition law · Merger control
Legal basis
Competition Act (Kanada), Fusionskontrolle
Action
Order
Status of proceedings
unknown
Sector
Food and agriculture
Published
22 May 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 May 2026 ArcelorMittal Exploitation Minière Canada s.e.n.c.ArcelorMittal mining subsidiary in Québec: 100 million CAD fine for acidic mine effluent Canada, QCWaste and hazardous substances €62.5m

From May 2014 to May 2022, acidic effluent, effluent with elevated zinc, nickel or suspended solids content, and effluent that was acutely lethal to fish entered fish-bearing waters from the Mont-Wright mining complex and the Fire Lake mine in the Fermont region. The company pleaded guilty to 100 counts; the fine of 100 million CAD goes almost entirely to the Environmental Damages Fund, and an action plan on wastewater management must also be submitted by mid-February 2027.

What organisations can take from it

Long-standing exceedances of limit values add up to hundreds of individual offences; effluent monitoring must lead to immediate corrective action.

Authority / court
Court of Québec (Ermittlungen: Environment and Climate Change Canada)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Fisheries Act, Subsection 36(3)
Action
Fine
Status of proceedings
unknown
Sector
Steel and metals
Published
15 May 2026

Original amount 100,000,000 CAD, converted at the ECB reference rate of 15 May 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 May 2026 Transport Desgagnés Inc.Transport Desgagnés: 40,000 CAD because a tanker entered an Arctic protected area without a permit Canada, NUEnvironment and sustainability €24,902

The tanker M/T Sarah Desgagnés, operated by the company, entered the Akpait National Wildlife Area in Nunavut on 29 September and 6 October 2024 without the required access permit. The Nunavut Court of Justice imposed 40,000 CAD for the Environmental Damages Fund; the company must publish a notice in a local newspaper and is listed in the Environmental Offenders Registry.

What organisations can take from it

Protected area boundaries belong in every vessel's voyage planning; missing access permits are prosecuted even in remote areas.

Relevance to training and awareness

Protected areas in voyage planning and bridge practice

Authority / court
Nunavut Court of Justice (Ermittlungen: Environment and Climate Change Canada)
Area of law
Environment and sustainability
Legal basis
Wildlife Area Regulations (Canada Wildlife Act), Paragraph 3.3(1)(h)
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Published
8 May 2026

Original amount 40,000 CAD, converted at the ECB reference rate of 8 May 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

7 May 2026 Canada Revenue Agency (CRA)Privacy Commissioner: Canada's tax authority CRA must strengthen protection against account takeovers CanadaData breaches and data security Other

Since 2020, the Canada Revenue Agency (CRA) has experienced more than 42,000 individual breaches in which unauthorised persons accessed tax accounts or changed data in order to redirect benefits. In a special report to Parliament, the Privacy Commissioner of Canada criticised, among other things, the delayed introduction of mandatory MFA and incomplete incident recording, and made nine recommendations, eight of which were accepted in full and one in part.

What organisations can take from it

Online accounts with payment functions need mandatory strong authentication and complete recording of incidents.

Authority / court
Office of the Privacy Commissioner of Canada (OPC)
Area of law
Data protection · Data breaches and data security
Legal basis
Privacy Act (Kanada)
Action
Other
Status of proceedings
unknown
Sector
Public sector
Employees
10,000 or more
Published
7 May 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Mar 2026 13010431 Canada Inc. (Necosmart)FINTRAC: 693,742 CAD against crypto service provider Necosmart over missing suspicious transaction reports CanadaSuspicious activity reports €434,295

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) imposed 693,742.50 CAD on the Edmonton money services business, which also exchanges virtual currencies, for five violations: repeated failure to file suspicious transaction reports, lack of written compliance policies, insufficient enhanced measures for high-risk transactions, lack of a risk assessment and incomplete records of occupation and transactions for crypto exchanges.

What organisations can take from it

Small crypto exchange offices need the same basic framework as banks: risk analysis, policies, enhanced scrutiny and reporting.

Relevance to training and awareness

Recognising and reporting grounds for suspicion in crypto exchange

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
Proceeds of Crime (Money Laundering) and Terrorist Financing Act, Part 1, und zugehörige Verordnungen
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Published
14 May 2026

Original amount 693,742.5 CAD, converted at the ECB reference rate of 27 Mar 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Mar 2026 Nova Scotia PowerNova Scotia Power: commitments to the Privacy Commissioner after ransomware attack CanadaData breaches and data security Other

Following a cyber attack in spring 2025 in which data of about 375,000 current and 540,000 former customers was exfiltrated, including bank account, driver's licence and social insurance numbers, Nova Scotia Power signed a compliance letter to the Privacy Commissioner of Canada. The company commits to delete customers' social insurance numbers and, by 31 October 2026, to submit an independent security assessment – including employee training and notification processes – and to report on implementing its recommendations; only then will the investigation be discontinued. According to the letter, the starting point was an employee clicking a link in a pop-up on a compromised website, which installed malware.

What organisations can take from it

A single click on a fake pop-up can expose hundreds of thousands of customer records – training, limited admin rights and prompt notification belong together.

Relevance to training and awareness

Fake update pop-ups and malware

Missing or inadequate training played a role in the decision.

Authority / court
Office of the Privacy Commissioner of Canada (OPC)
Area of law
Data protection · Data breaches and data security
Legal basis
Personal Information Protection and Electronic Documents Act (PIPEDA); Einstellung nach Paragraph 12.2(1)(c) bei Erfüllung der Zusagen
Action
Other
Status of proceedings
unknown
Sector
Energy and utilities
Published
25 Mar 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Mar 2026 Birks Group Inc.FINTRAC: jeweller Birks sanctioned over missing risk assessment and compliance review CanadaInternal controls €32,755

The nationwide jewellery chain (a dealer in precious metals and stones) received a penalty of 51,562.50 CAD from the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) because written compliance policies were lacking or not applied, the money laundering risk was not assessed and documented, and the prescribed two-yearly effectiveness review was not carried out. Birks has appealed to the Federal Court.

What organisations can take from it

Jewellers, too, must maintain a documented compliance programme with a risk assessment and regular effectiveness reviews.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
Proceeds of Crime (Money Laundering) and Terrorist Financing Act, Part 1, und zugehörige Verordnungen
Action
Fine
Status of proceedings
under appeal
Sector
Retail and e-commerce
Published
5 May 2026

Original amount 51,562.5 CAD, converted at the ECB reference rate of 11 Mar 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Mar 2026 World Anti-Doping Agency (WADA)WADA: compliance agreement with Canada's Privacy Commissioner on athletes' data CanadaData protection Other

The Montreal-based World Anti-Doping Agency (WADA), a foundation under Swiss private law, entered into a compliance agreement under PIPEDA with the Privacy Commissioner of Canada, under which an investigation opened in November 2024 following a complaint is held in abeyance and will be discontinued once the agreement is fulfilled. WADA must ensure that anti-doping organisations use athletes' personal information in the ADAMS system only for anti-doping purposes from 1 January 2027, amend the World Anti-Doping Code and the ADAMS agreements accordingly, document a control mechanism and report quarterly. WADA disputes any contravention and the Commissioner's jurisdiction; if it fails to comply, the Commissioner may apply to the Federal Court for an order.

What organisations can take from it

Operators of data platforms used by partners must enforce, contractually and technically, that partners use the data only for the intended purpose.

Relevance to training and awareness

Purpose limitation on shared data platforms

Authority / court
Office of the Privacy Commissioner of Canada (OPC)
Area of law
Data protection
Legal basis
Personal Information Protection and Electronic Documents Act (PIPEDA), Sections 17.1 und 17.2 (Compliance Agreement)
Action
Other
Status of proceedings
unknown
Sector
Other
Published
17 Mar 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

Load 20 more of 77

Ready for training that actually lands?

Try the combination for free: automated administration for you, learning formats that fit your team, with no minimum or credit card.

Start 14-day free trial