Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 718 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by regionAll jurisdictions
What for?
by area of lawAll areas of law
- Bribery and corruption €6.12bn 26 % · 36 cases
- Environment and sustainability €4.31bn 18 % · 37 cases
- Data protection €3.23bn 14 % · 160 cases
- Competition law €2.76bn 12 % · 99 cases
- Consumer protection and online retail €2.56bn 11 % · 50 cases
- AI and digital regulation €2.5bn 11 % · 19 cases
- Money laundering and terrorist financing €670.9m 3 % · 61 cases
- Sanctions and export control €652m 3 % · 27 cases
- Capital markets and financial supervision €501.8m 2 % · 50 cases
- Other €134.7m 1 % · 15 cases
- 4 more€82m
Who?
by sectorAll sectors
- Chemicals and pharmaceuticals €5.49bn 23 % · 24 cases
- Automotive €4.81bn 20 % · 22 cases
- Retail and e-commerce €3.57bn 15 % · 66 cases
- Telecoms, IT and software €3.03bn 13 % · 49 cases
- Media and online platforms €2.02bn 9 % · 42 cases
- Financial services and insurance €1.05bn 4 % · 135 cases
- Transport, logistics and shipping €922.6m 4 % · 35 cases
- Energy and utilities €843.3m 4 % · 40 cases
- Defence and security €444.6m 2 % · 13 cases
- Manufacturing and mechanical engineering €332m 1 % · 19 cases
- 6 more€1.02bn
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 5 | €76.3m |
| Q4 2023 | 22 | €48.4m |
| Q1 2024 | 25 | €1.74bn |
| Q2 2024 | 24 | €102.4m |
| Q3 2024 | 32 | €1.11bn |
| Q4 2024 | 58 | €1.65bn |
| Q1 2025 | 50 | €2.91bn |
| Q2 2025 | 59 | €2.41bn |
| Q3 2025 | 61 | €2.84bn |
| Q4 2025 | 82 | €2.36bn |
| Q1 2026 | 76 | €714.7m |
| Q2 2026 | 80 | €5.72bn |
| Q3 2026 | 89 | €1.86bn |
663 cases
23 Jul 2026 GoogleDMA: 890 million EUR against Google over self-preferencing and Play steering €890m
In two decisions, the European Commission found that Google favours its own services in search (460 million EUR) and prevents app developers on Google Play from steering customers to alternative offers (430 million EUR). Google was ordered to bring the infringements to an end.
Platforms' ranking rules and fee models must be demonstrably non-discriminatory and designed in compliance with the Digital Markets Act (DMA).
- Authority / court
- Europäische Kommission
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Verordnung (EU) 2022/1925 (DMA), Selbstbevorzugungsverbot und Anti-Steering-Pflicht
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Employees
- 10,000 or more
- Published
- 23 Jul 2026
- Commission fines Google €890 million for breaches of the Digital Markets Act Press release of an authority
- IP/26/1670: Commission fines Google €890 million for breaches of the Digital Markets Act Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
24 Sep 2026 Plaček Pet Products s.r.o.Plaček Pet Products: 36.4 million CZK for minimum prices on pet food €1.49m
From January 2013 to March 2022, the distributor of premium pet food and pet supplies imposed minimum resale prices on its retailers and threatened sanctions if they were undercut. In a settlement procedure, the Úřad pro ochranu hospodářské soutěže (Czech Office for the Protection of Competition, ÚOHS) imposed 36.438 million CZK; the company ended the conduct after the inspection and introduced a compliance programme.
Never enforce recommended retail prices with supply stops or sanctions – sales teams need clear rules on this.
Price requirements imposed on retailers in sales
Missing or inadequate training played a role in the decision.
- Authority / court
- Úřad pro ochranu hospodářské soutěže (ÚOHS)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Verbot vertikaler Preisbindung (tschechisches Wettbewerbsgesetz, Art. 101 AEUV)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Retail and e-commerce
- Culpability
- intentional
- Mitigating circumstances
- Termination immediately after the inspection, information of customers about free pricing, full cooperation, settlement and newly introduced compliance programme.
- Published
- 24 Sep 2026
Original amount 36,438,000 CZK, converted at the ECB reference rate of 24 Sep 2026.
- Distributor krmiv pro domácí zvířata dostal pokutu 36 milionů korun za diktování cen maloobchodníkům Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
24 Sep 2026 M&J GroupCMA: fines against construction firm and two employees for concealing evidence during an inspection €58,149
During an inspection as part of an investigation into bid rigging, the Estimating Director Barry Pirrie instructed the Office Manager Tracey Woods to remove a work mobile phone and documents from the premises, and denied having a work mobile phone. The UK Competition and Markets Authority (CMA) imposed fines of 25,000 GBP on M&J, 20,000 GBP on Pirrie and 5,000 GBP on Woods.
Dawn raid training is mandatory: anyone who removes mobile phones or documents during an inspection is personally liable – even when acting on a superior's instructions.
Correct conduct during inspections (dawn raids), no removal of evidence
- Authority / court
- Competition and Markets Authority (CMA)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Section 40A(1) Competition Act 1998
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Construction and real estate
- Culpability
- intentional
- Liability of senior managers
- Personal fines against Barry Pirrie (20,000 GBP) and Tracey Woods (5,000 GBP)
- Published
- 24 Sep 2026
Original amount 50,000 GBP, converted at the ECB reference rate of 24 Sep 2026.
- CMA fines construction firm and staff for concealing evidence during inspection Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
24 Sep 2026 Kalibrate Canada (Tochter der Kalibrate Technologies Ltd.)Canada: Kalibrate must stop sharing retailer-specific petrol station data Order
Kalibrate's "Market Intelligence" product passed on retailer-specific sales data from petrol stations that allowed conclusions to be drawn about competitors and could facilitate coordinated pricing behaviour. In an agreement registered with the Competition Tribunal, Kalibrate undertakes to supply only aggregated and time-delayed data – the first case under the reformed abuse of dominance rules.
Providers of market and price data must ensure that their products do not disseminate individualised competitor data.
- Authority / court
- Competition Bureau Canada (Consent Agreement beim Competition Tribunal)
- Area of law
- Competition law · Abuse of market power
- Legal basis
- Abuse-of-dominance-Bestimmungen des Competition Act (Fassung 2023)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Energy and utilities
- Published
- 24 Sep 2026
- Competition Bureau secures agreement with Kalibrate to protect competition in the retail gas industry Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Sep 2026 Southern WaterSouthern Water: 2.4 million GBP fine for sewage and diesel pollution in Kent €2.9m
Between 2019 and 2021, untreated sewage, sewage residues, diesel from a generator and waste entered a stream and the sea around Faversham and Whitstable; the circumstances of one incident were not reported to the Environment Agency, around 70 fish died, and bathing warnings were in place at beaches in Tankerton and Herne Bay for almost a week. The court imposed a fine of 2,416,666.67 GBP, 69,894.04 GBP in costs and a 190 GBP victim surcharge; it was the company's second conviction that year (announcement of 22 September 2026, exact date of judgment not stated).
Repeated pollution and failure to report incidents lead to a series of prosecutions with rising fines.
Reporting environmental incidents to the regulator
- Authority / court
- Bromley Magistrates' Court (Anklage: Environment Agency)
- Area of law
- Environment and sustainability · Emissions and permits
- Legal basis
- Regulations 12(1)(b) und 38(1)(a) Environmental Permitting (England and Wales) Regulations 2016
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Energy and utilities
- Repeat case
- yes
- Published
- 22 Sep 2026
Original amount 2,486,750.71 GBP, converted at the ECB reference rate of 22 Sep 2026.
- Southern Water fined £2.4m for Kent pollution Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Sep 2026 OTC Link LLCOTC Link: 575,000 USD – security policies never completed despite examination findings €501,614
From 2016 to 2025, the operator of the OTC Link ATS trading system lacked complete policies on systems security, access control and vulnerability management as required under Regulation SCI. Although the examiners of the U.S. Securities and Exchange Commission (SEC) had criticised the gaps in several examinations, drafts remained unfinished; the SEC issued a censure and imposed 575,000 USD.
Track supervisory examination findings with a deadline and a responsible person – points that remain open repeatedly become expensive.
- Authority / court
- U.S. Securities and Exchange Commission (SEC)
- Area of law
- Information security and cyber · Critical infrastructure
- Legal basis
- Regulation SCI, Rule 1001(a)(1)–(3)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Repeat case
- yes
Original amount 575,000 USD, converted at the ECB reference rate of 22 Sep 2026.
- SEC Censures OTC Link LLC for Repeated Compliance Failures Related to Regulation SCI (22.09.2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Sep 2026 Miljödata i Karlskrona AktiebolagIMY: 1.8 million SEK against HR software provider Miljödata after data leak €160,053
The provider of web-based systems for sickness reporting, rehabilitation and occupational safety incidents was hacked in August 2025; the stolen personal data appeared on the dark web shortly afterwards. The Swedish data protection authority (Integritetsskyddsmyndigheten, IMY) found that, despite the high need for protection, there were no adequate security measures and no automatic real-time monitoring for attacks, assessed this as negligent and imposed 1,800,000 SEK.
Service providers hosting the health and personnel data of many employers need real-time attack detection, not just perimeter protection.
- Authority / court
- Integritetsskyddsmyndigheten (IMY)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 32 Abs. 1 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Culpability
- negligent
- Published
- 22 Sep 2026
Original amount 1,800,000 SEK, converted at the ECB reference rate of 22 Sep 2026.
- IMY Tillsyn: Miljödata i Karlskrona AB Press release of an authority
- Beslut efter tillsyn enligt dataskyddsförordningen – Miljödata i Karlskrona Aktiebolag (IMY-2025-21177) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Sep 2026 Audax Renovables, S.A. – Sucursal em PortugalPortugal: 22,000 EUR against Audax Renovables over missing gas reserves and hotline €22,000
On a total of 249 days, the Portuguese branch of the energy supplier failed to hold the mandatory natural gas security reserves, did not correctly show network charges on invoices, did not publish, or published late, mandatory information and its quality report, and failed to meet the standards for hotline waiting times. In a settlement procedure, the Entidade Reguladora dos Serviços Energéticos (Portuguese Energy Services Regulatory Authority, ERSE) set a fine of 44,000 EUR and reduced it to 22,000 EUR.
Security of supply and service obligations in the energy sector are sanctioned individually – a compliance calendar for reserves and reports helps.
- Authority / court
- Entidade Reguladora dos Serviços Energéticos (ERSE)
- Area of law
- Other
- Legal basis
- Regime Sancionatório do Setor Energético (RSSE), Art. 28, 29; Decreto-Lei n.º 62/2020, Art. 96; RRC; RQS
- Action
- Fine
- Status of proceedings
- final
- Sector
- Energy and utilities
- Culpability
- negligent
- Mitigating circumstances
- Settlement (transação) with full admission, remediation of all infringements
- ERSE – Decisões sancionatórias: Processos n.º 47/2024 e 62/2025 – Audax Renovables, S.A. – Sucursal em Portugal Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
17 Sep 2026 FleetCor Technologies Inc. (heute Corpay Inc.)FleetCor/Corpay pays 100 million USD over hidden fees on fuel cards €87.1m
In 2023, a federal court found by way of summary judgment that the fuel card provider had charged its predominantly small business customers hidden or unauthorised fees and misrepresented savings; an appeals court upheld this in 2026. According to the FTC, the fees added up to hundreds of millions of dollars, and late fees were also charged despite punctual payment. Under the settlement resolving the administrative proceedings, FleetCor and CEO Ronald Clarke are paying 100 million USD for refunds; the order is not yet final.
Fees hidden behind links or in account documents are deemed not to have been disclosed – including vis-à-vis business customers.
- Authority / court
- Federal Trade Commission (FTC)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Section 5 FTC Act
- Action
- Disgorgement of profits
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Liability of senior managers
- CEO Ronald Clarke is named in the press release as a party involved.
- Published
- 17 Sep 2026
Original amount 100,000,000 USD, converted at the ECB reference rate of 17 Sep 2026.
- FleetCor Agrees to Pay $100 Million to Resolve Administrative Action After Federal Court Finds It Violated the FTC Act Press release of an authority
- FTC Case: Fleetcor Technologies, In the Matter of (Docket 9403) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
17 Sep 2026 Lesy České republiky, s.p. (Lesy ČR)Lesy ČR: 17.3 million CZK for export ban on wood chips €710,383
From July 2021 to July 2024, the state forestry company contractually prohibited a customer from actively and passively exporting wood chips and logging residues and secured the ban with a right of termination. The Úřad pro ochranu hospodářské soutěže (Czech Office for the Protection of Competition, ÚOHS) considered this a restriction of competition by object under Czech and EU law and imposed 17.268 million CZK (first instance, not final).
State-owned companies are also subject to competition law – have export and resale bans in framework agreements legally reviewed before signing.
Anticompetitive clauses in supply contracts
- Authority / court
- Úřad pro ochranu hospodářské soutěže (ÚOHS)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Tschechisches Wettbewerbsgesetz, Art. 101 AEUV (Exportverbot, S0733/2025)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Food and agriculture
- Mitigating circumstances
- Voluntary termination immediately after proceedings were opened.
- Published
- 17 Sep 2026
Original amount 17,268,000 CZK, converted at the ECB reference rate of 17 Sep 2026.
- Lesy ČR banned wood-chip exports and were imposed a fine of more than CZK 17 million Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Sep 2026 Hillbeck Homes (Sowerby Bridge) LtdDeveloper pays £300,000 after agency worker falls through unprotected stairwell opening €349,895
A 24-year-old labourer working as a temporary worker for a scaffolding company fell, in his second week of work on the developer's housing site, through a stairwell opening that was neither securely covered nor guarded, dropping one storey onto concrete and suffering serious spinal injuries. The court found the company guilty on three counts because it had neither adequately planned nor supervised work at height and had not taken suitable measures to prevent falls. Fine of £300,000 plus costs.
Floor openings on construction sites must be covered with load-bearing covers or guarded at all times – new and temporary workers in particular do not know where the hazards are.
Fall protection at openings; induction of new workers
- Authority / court
- Leeds Magistrates' Court (Anklage: Health and Safety Executive)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Work at Height Regulations 2005
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Construction and real estate
- Published
- 21 Sep 2026
Original amount 300,000 GBP, converted at the ECB reference rate of 16 Sep 2026.
- Construction company fined after 24-year-old father falls through unprotected stairwell opening (HSE) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Sep 2026 AIFM Capital ABAIFM Capital: 2 million SEK for inadequate selection and oversight of fund managers €177,187
As a so-called fund hotel, the company had its funds managed by other firms, but examined these delegation agreements only insufficiently, did not take the related decisions properly and did not monitor the funds’ returns in relation to risk closely enough. The Swedish financial supervisory authority Finansinspektionen (FI) issued a remark and imposed 2 million SEK; no damage to investors was established.
Outsourcing tasks does not outsource responsibility: document the selection of service providers, the decisions taken and ongoing oversight.
- Authority / court
- Finansinspektionen (FI)
- Area of law
- Capital markets and financial supervision · Organisational requirements
- Legal basis
- Schwedisches Fondsrecht – Regeln zur Delegation der Fondsverwaltung und deren Überwachung
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Mitigating circumstances
- No established damage to investors; remedial measures already taken during the investigation.
- Published
- 16 Sep 2026
Original amount 2,000,000 SEK, converted at the ECB reference rate of 16 Sep 2026.
- FI ger AIFM Capital en anmärkning och en sanktionsavgift (16.09.2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Sep 2026 Wallester ASFinancial supervisor orders Wallester to remedy governance and AML deficiencies Order
Following an on-site inspection, the Finantsinspektsioon (Estonian Financial Supervision Authority) issued an order requiring the payment institution Wallester to remedy, by 31 December, deficiencies in governance and control functions (separation of the lines of defence, internal rules), in safeguarding customer funds and in the staffing of its anti-money laundering and counter-terrorist financing function. Date = publication of the press release.
Fast-growing payment service providers must let their compliance, AML and internal audit functions grow with them in terms of staffing and organisation.
- Authority / court
- Finantsinspektsioon (Estnische Finanzaufsicht)
- Area of law
- Money laundering and terrorist financing · Internal controls
- Legal basis
- Aufsichtsrechtliche Anordnung (ettekirjutus) der Finantsinspektsioon
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Published
- 16 Sep 2026
- Finantsinspektsioon tegi Wallester AS-ile ettekirjutuse (16.09.2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
15 Sep 2026 Ministerstvo životního prostředí (Umweltministerium der Tschechischen Republik)Ministry of the Environment: 300,000 CZK over unresolved conflict of interest of an insurance broker €12,350
In an insurance tender in 2024 worth around 200 million CZK, the ministry had parts of the tender documents drawn up by a broker who could later receive commissions from the winning insurer. As the contracting authority took no measures against the conflict of interest, the Úřad pro ochranu hospodářské soutěže (Czech Office for the Protection of Competition, ÚOHS) imposed a final fine of 300,000 CZK.
External advisers who help draft tender documents must not benefit from the outcome – examine and document conflicts of interest before the tender.
Conflicts of interest of external advisers in procurement procedures
- Authority / court
- Úřad pro ochranu hospodářské soutěže (ÚOHS)
- Area of law
- Other
- Legal basis
- Gesetz über die Vergabe öffentlicher Aufträge (Pflicht zur Vermeidung von Interessenkonflikten)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Public sector
- Culpability
- negligent
- Published
- 15 Sep 2026
Original amount 300,000 CZK, converted at the ECB reference rate of 15 Sep 2026.
- ÚOHS uložil pokutu 300 tisíc korun resortu životního prostředí kvůli neošetření možného střetu zájmů Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
10 Sep 2026 Dompé U.S. Inc.Dompé U.S.: 32 million USD – Medicare patients’ co-payments covered via foundations €27.5m
From 2018 to 2021, the pharmaceutical manufacturer allegedly used two patient assistance foundations to fund Medicare beneficiaries’ co-payments for its drug Oxervate in order to promote its sales. Following a self-disclosure, Dompé paid 32 million USD.
Benefits flowing to customers via foundations or other third parties remain benefits provided by the company – donations to patient assistance programmes require strict independence.
Benefits to patients and customers via third parties
- Authority / court
- U.S. Department of Justice / U.S. Attorney's Office, District of Massachusetts
- Area of law
- Bribery and corruption · Gifts, hospitality and benefits
- Legal basis
- Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
- Action
- Other
- Status of proceedings
- final
- Sector
- Chemicals and pharmaceuticals
- Mitigating circumstances
- Self-disclosure.
Original amount 32,000,000 USD, converted at the ECB reference rate of 10 Sep 2026.
- HHS-OIG Enforcement Actions: Dompé U.S. Agrees to Pay $32M to Resolve False Claims Act Liability Relating to Self-Disclosure of Patient Kickbacks (10.09.2026) Enforcement database of an authority
- U.S. Department of Justice: Dompé U.S. Agrees to Pay $32M to Resolve False Claims Act Liability Relating to Self-Disclosure of Patient Kickbacks (10.09.2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
10 Sep 2026 Algoma Steel Inc.Algoma Steel: 1.2 million CAD fine for gear oil in the St. Marys River €747,710
In June 2022, a gear oil tank overflowed at the steelworks in Sault Ste. Marie; an estimated 1,000 to 1,250 litres of oil entered the St. Marys River, harmful to fish and migratory birds. The company pleaded guilty to two counts and is paying 1.2 million CAD into the Environmental Damages Fund; its name is listed in the Environmental Offenders Registry.
Even small tank overflows near watercourses lead to fines in the millions – overfill protection and containment systems are mandatory.
Filling and monitoring oil tanks
- Authority / court
- Ontario Court of Justice, Sault Ste. Marie (Ermittlungen: Environment and Climate Change Canada)
- Area of law
- Environment and sustainability · Waste and hazardous substances
- Legal basis
- Fisheries Act, Subsection 36(3); Migratory Birds Convention Act, 1994, Subsection 5.1(1)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Steel and metals
- Mitigating circumstances
- Guilty plea.
- Published
- 11 Sep 2026
Original amount 1,200,000 CAD, converted at the ECB reference rate of 10 Sep 2026.
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
8 Sep 2026 United Utilities Water LimitedUnited Utilities: record fine of 900,000 GBP after sewage flood on the Fylde coast €1.12m
Following a partial pipe collapse at the Fleetwood wastewater treatment works, untreated sewage flowed from three pumping stations into the Irish Sea for over 35 hours in June 2023; seven bathing waters were affected and shellfish beds were closed. The water company pleaded guilty to five offences and must pay a fine of 900,000 GBP, 62,225 GBP in costs and a 2,000 GBP victim surcharge.
The condition and redundancy of critical wastewater infrastructure are a permit obligation; the Environment Agency assessed the failure as reckless and in the highest harm category.
- Authority / court
- Preston Magistrates' Court (Anklage: Environment Agency)
- Area of law
- Environment and sustainability · Emissions and permits
- Legal basis
- Regulation 38(2) Environmental Permitting (England and Wales) Regulations 2016
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Energy and utilities
- Culpability
- negligent
- Mitigating circumstances
- Around 38 million GBP invested in response and repair, and a voluntary payment of 250,000 GBP to Blackpool Council.
- Published
- 8 Sep 2026
Original amount 964,225 GBP, converted at the ECB reference rate of 8 Sep 2026.
- Water company fined record £900k after coastline sewage spill Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
4 Sep 2026 Samworth Brothers LimitedSamworth Brothers: £594,000 after two workers scalded at steam line €691,518
At the Kettleby Foods plant in Melton Mowbray, an employee and a contractor were scalded with hot water while replacing a leaking gasket on an isolation valve of a steam line (burns to 4–5 % and 9 % of their body surface respectively). The Health and Safety Executive (HSE) found that the task had neither been assessed nor documented as a safe system of work, isolation and lock-off procedures had not been applied, fall protection was missing and supervision was inadequate. Following a guilty plea, a fine of £594,000, plus £6,000 compensation for the injured employee, costs and a victim surcharge.
Maintenance on steam and pressure lines requires a written isolation and lock-off procedure that is supervised on site.
Isolating and locking off equipment during maintenance (lockout/tagout)
- Authority / court
- Birmingham Magistrates' Court (Anklage: Health and Safety Executive)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Section 2 Health and Safety at Work etc. Act 1974
- Action
- Fine
- Status of proceedings
- final
- Sector
- Food and agriculture
- Published
- 16 Sep 2026
Original amount 594,000 GBP, converted at the ECB reference rate of 4 Sep 2026.
- Food manufacturing giant fined £594,000 after two workers scalded at Melton Mowbray site (HSE) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
3 Sep 2026 Banco Bilbao Vizcaya Argentaria, S.A. – Niederlassung Italien (BBVA Italia)Garante: 5.5 million EUR against BBVA Italia over advertising despite objection €5.51m
For seven months (October 2025 to May 2026), the bank continued to send a customer advertising via its app, although he had objected several times. The Italian data protection authority (Garante per la protezione dei dati personali) also found deficient systems for implementing objections and inaccurate information about the processing, and imposed 5,508,000 EUR (Provvedimento No. 613).
An objection to advertising must take effect immediately and reliably across all channels – including app messages.
- Authority / court
- Garante per la protezione dei dati personali
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Art. 5 Abs. 1 lit. a, Art. 12, 21, 24 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Published
- 11 Sep 2026
- Newsletter del 11 settembre 2026 – Garante privacy Press release of an authority
- Provvedimento n. 613 del 3 settembre 2026 (BBVA Italia) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
3 Sep 2026 BDW Trading (Barratt Redrow)Barratt Redrow subsidiary BDW pays 201,500 GBP to environmental projects after silt entered brooks €234,153
At the Ladden Garden Village construction site in Yate, a subcontractor washed silt from the site drainage into two brooks over six days in July 2022. The Environment Agency accepted an Enforcement Undertaking: BDW is paying 201,500 GBP to three environmental and charitable projects, bears the investigation costs and had already invested over 180,000 GBP in remediation, training and improved surface water management.
Developers are liable for environmental damage caused by their subcontractors; clear procedures and training on handling surface water prevent costly proceedings.
Protecting watercourses on construction sites and managing subcontractors
Missing or inadequate training played a role in the decision.
- Authority / court
- Environment Agency
- Area of law
- Environment and sustainability · Emissions and permits
- Legal basis
- Environmental Civil Sanctions (England) Order 2010 (Enforcement Undertaking)
- Action
- Other
- Status of proceedings
- final
- Sector
- Construction and real estate
- Mitigating circumstances
- Acceptance of responsibility, remediation, training of employees and application for a discharge permit.
- Published
- 3 Sep 2026
Original amount 201,500 GBP, converted at the ECB reference rate of 3 Sep 2026.
- Builder pays £201,500 to charities after silting watercourses Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
3 Sep 2026 Azienda Sanitaria Universitaria Friuli Centrale (ASUFC)Garante: Udine hospital group pays 24,000 EUR for viewing a colleague's patient record €24,000
Hospital staff opened a colleague's electronic health record to organise duty rosters during Covid rather than for treatment purposes. Technical barriers limiting access to treating staff were lacking; the Italian data protection authority (Garante per la protezione dei dati personali) imposed 24,000 EUR (Provvedimento No. 616).
Patient records may only be opened for treatment – include this in training and secure it technically through role-based rights and logging.
Purpose limitation when accessing patient records
- Authority / court
- Garante per la protezione dei dati personali
- Area of law
- Data protection · Employee data
- Legal basis
- Art. 5 Abs. 1 lit. a, b, c, f, Art. 9, 25, 32 DSGVO; Art. 75 Codice privacy; Linee guida dossier sanitario
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Healthcare
- Published
- 11 Sep 2026
- Newsletter del 11 settembre 2026 – Garante privacy Press release of an authority
- Garante privacy, azienda sanitaria di Udine sanzionata per 24mila euro Press release of an authority
- Garante – Provvedimento n. 616 del 3 settembre 2026 [10293994] (ASUFC) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
3 Sep 2026 ASIS – Azienda Speciale per la gestione degli Impianti Sportivi (Trento)Garante: 8,000 EUR for cameras in swimming pool changing rooms of a Trentino sports operator €8,000
Since 2007, the municipal sports facilities operator had had cameras in the changing rooms of a swimming pool that recorded the locker area. The Italian data protection authority (Garante per la protezione dei dati personali) found no sound legal basis, incomplete notices and a 72-hour retention period not justified by a necessity assessment, and imposed 8,000 EUR (Provvedimento No. 619); the cameras were removed during the proceedings.
Changing rooms and comparably intimate areas are off limits for video surveillance – even when theft prevention is the motive.
- Authority / court
- Garante per la protezione dei dati personali
- Area of law
- Data protection · Video surveillance
- Legal basis
- Art. 5 Abs. 1 lit. a, Art. 6 Abs. 1 lit. c und e DSGVO; Art. 2-ter Codice privacy
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Public sector
- Published
- 11 Sep 2026
- Newsletter del 11 settembre 2026 – Garante privacy Press release of an authority
- Garante – Provvedimento n. 619 del 3 settembre 2026 [10294255] (ASIS Trento) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
1 Sep 2026 PPS Metal Recycling LtdScrapyard: £40,000 fine after metal pile collapses on father and son €46,699
In February 2025, a pile of scrap collapsed on a father and his son at the metal recycler's site while an excavator had been working near them for around 20 minutes; one of them suffered a broken leg. Pedestrians were separated neither from machinery nor from unstable stockpiles, even though there had been a near miss involving the same excavator shortly before. Fine of £40,000 plus £6,181 costs.
Companies that allow customers or visitors onto a site with machinery must physically separate pedestrians and vehicles and treat near misses as a warning sign.
- Authority / court
- Grimsby Magistrates' Court (Anklage: Health and Safety Executive)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Section 3(1) Health and Safety at Work etc. Act 1974
- Action
- Fine
- Status of proceedings
- final
- Sector
- Steel and metals
- Mitigating circumstances
- After the accident, a separate unloading zone, signage, supervised procedures and fenced-off walkways were introduced.
- Published
- 2 Sep 2026
Original amount 40,000 GBP, converted at the ECB reference rate of 1 Sep 2026.
- Scrap yard fined after father and son injured by collapsing metal pile (HSE) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
31 Aug 2026 EM@NEY P.L.C.Malta: EM@NEY pays 97,622 EUR under settlement for late bank account register reports €97,622
The financial institution did not deliver on time the data due every seven days to the Centralised Bank Account Register (CBAR). The Financial Intelligence Analysis Unit (FIAU) set a fine of 162,704 EUR, which was reduced by 40% to 97,622 EUR under a settlement pursuant to its 2026 settlement policy.
Recurring mandatory reports need deadline monitoring with escalation – otherwise individual omissions add up to six-figure sums.
- Authority / court
- Financial Intelligence Analysis Unit (FIAU)
- Area of law
- Money laundering and terrorist financing
- Legal basis
- Reg. 4(2), 8, 9 CBAR Regulations (S.L. 373.03)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Mitigating circumstances
- Settlement with 40% reduction
- Published
- 4 Sep 2026
- Settlement Agreement Publication Notice – EM@NEY P.L.C. Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
28 Aug 2026 MSC Shipmanagement Limited; Hong Kong Spirit Shipping and Trading LimitedMSC Shipmanagement: 1.75 million USD fine for secretly discharging oily bilge water €1.5m
On board the MSC Samira III, senior engineering officers had oily bilge water pumped overboard via the sewage tank, bypassing the oily water separator, in 2024/2025, manipulated the oil content monitoring and falsified the oil record book, which was presented to the Coast Guard in Philadelphia. The operator and the owner each pleaded guilty to two counts under the Act to Prevent Pollution from Ships (APPS) and are paying a combined 1.75 million USD; in addition, there are four years of probation.
Shipping companies must actively monitor practice on board and the oil record book, because instructions given by individual officers are attributed to the company under criminal law.
MARPOL obligations on board, oil record book and reporting channels for crews
- Authority / court
- U.S. District Court for the Eastern District of Pennsylvania (Anklage: DOJ Environment and Natural Resources Division)
- Area of law
- Environment and sustainability · Waste and hazardous substances
- Legal basis
- Act to Prevent Pollution from Ships (APPS), 33 U.S.C. § 1908
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Employees
- 10,000 or more
- Culpability
- intentional
- Liability of senior managers
- Second Engineer Mikhail Tsurikov also pleaded guilty; sentencing scheduled for 10 September 2026.
- Published
- 28 Aug 2026
Original amount 1,750,000 USD, converted at the ECB reference rate of 28 Aug 2026.
- International Shipping Companies Sentenced to Pay $1.75 Million Fine for Concealing Discharges of Oily Waste into Ocean Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
27 Aug 2026 Maple Lodge Farms Ltd.Poultry processor Maple Lodge Farms: CA$500,000 after CO2 leak without gas detection system €309,578
In March 2024, a CO2 hose on a vacuum mixer ruptured in the deli area of the plant in Brampton; around 16,000 pounds of carbon dioxide escaped and one worker suffered life-threatening injuries. There was no CO2 sensor with an alarm. Following a guilty plea, a fine of CA$500,000 plus a 25 % victim fine surcharge.
Wherever refrigerant or inert gases are used in quantity, a gas detection system is part of the basic equipment.
- Authority / court
- Provincial Offences Court Brampton (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Section 25(2)(h) Occupational Health and Safety Act (Ontario)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Food and agriculture
- Mitigating circumstances
- Guilty plea; permanently installed CO2 sensor after the incident.
- Published
- 27 Aug 2026
Original amount 500,000 CAD, converted at the ECB reference rate of 27 Aug 2026.
- Carbon Dioxide-Related Injury Results in $500,000 Fine for Brampton Food Manufacturer (Ontario Newsroom, Court Bulletin) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
27 Aug 2026 MiFinity Malta LimitedMalta: MiFinity pays 160,099 EUR following anti-money laundering examination €160,099
At the payment institution, the customer risk assessment had only been introduced after business had started, some customers remained unassessed, and customer profiles were based on transaction thresholds rather than on risk. The Financial Intelligence Analysis Unit (FIAU) set a fine of 266,833 EUR and a follow-up directive; under a settlement, the fine was reduced by 40% to 160,099 EUR.
A customer risk assessment belongs before business starts, not in a later remediation project.
Risk-based customer profiles and source of funds
- Authority / court
- Financial Intelligence Analysis Unit (FIAU)
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- Reg. 2(1), 5(5)(a)(ii), 7(1)(c), 7(2)(a), 21, 22 PMLFTR
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Mitigating circumstances
- Settlement with 40% reduction; remediation demonstrated
- Published
- 2 Sep 2026
- Settlement Agreement Publication Notice – MiFinity Malta Limited Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
27 Aug 2026 Flower bulb business failed to disclose hours of Polish seasonal workers – fine of around 95,600 EUR €95,588
A lily and tulip grower with an average of around 50 (at peak 75) employees, where Polish migrant workers are employed (anonymised in the judgment), was unable to produce sufficient records of hours worked and wages paid for 18 employees for September 2020 to February 2021. The Dutch Minister of Social Affairs and Employment (Minister van Sociale Zaken en Werkgelegenheid) imposed 118,000 EUR in 2024 (112,100 EUR after objection); the North Netherlands District Court (Rechtbank Noord-Nederland) reduced the fine to 95,587.50 EUR, partly because of measures taken and excessively long proceedings.
Companies employing seasonal workers must be able to document hours and wage payments for each person without gaps – missing records are fined separately for each employee.
- Authority / court
- Rechtbank Noord-Nederland (Bußgeld: Minister van Sociale Zaken en Werkgelegenheid / Nederlandse Arbeidsinspectie)
- Area of law
- Health and safety and employment law · Minimum wage and undeclared work
- Legal basis
- Art. 18b Abs. 2 Wet minimumloon en minimumvakantiebijslag (Wml)
- Action
- Fine
- Status of proceedings
- reduced
- Sector
- Food and agriculture
- Employees
- 50 to 249
- Mitigating circumstances
- Reduction of 12.5 % for appropriate measures, 5 % for delay and 2,500 EUR for exceeding the reasonable length of proceedings.
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
26 Aug 2026 O2 Czech Republic a.s.; SHERLOG Technology, a.s.O2 Czech Republic and SHERLOG: 280 million CZK for customer allocation in vehicle tracking €11.7m
From December 2012 to June 2022, the two companies allocated customers for vehicle tracking and electronic logbook services between themselves and coordinated bids, including in public tenders. At first instance, the Úřad pro ochranu hospodářské soutěže (Czech Office for the Protection of Competition, ÚOHS) fined O2 262.32 million CZK and SHERLOG 18.357 million CZK and imposed a six-month ban on public contracts; for O2, the fine was increased instead of a procurement ban.
Do not let sales cooperation with competitors turn into customer allocation – e-mail arrangements about individual tenders are the typical evidence.
Coordination with cooperation partners on customers and tenders
- Authority / court
- Úřad pro ochranu hospodářské soutěže (ÚOHS)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Tschechisches Wettbewerbsgesetz, Art. 101 AEUV (S0255/2023)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Culpability
- intentional
- Published
- 26 Aug 2026
Original amount 280,677,000 CZK, converted at the ECB reference rate of 26 Aug 2026.
- Fines exceeding CZK 280 million imposed on O2 Czech Republic and SHERLOG Technology for cartel agreement Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
26 Aug 2026 Wolt DenmarkWolt: Competition Council finds abuse of dominant position vis-à-vis restaurants Order
In 2022–2024, the delivery service used a standard clause to prohibit restaurants from being cheaper on their own channels than on Wolt, while at the same time being able to grant discounts without consultation and to compensate customers up to 400 DKK at the restaurants’ expense. The Konkurrencerådet (Danish Competition Council) ordered the practice to cease, required Wolt to inform all restaurants and intends to enforce a fine through the courts.
Platforms with a high market share should have parity clauses and unilateral cost shifting in standard terms reviewed under competition law.
- Authority / court
- Konkurrencerådet (Danish Competition Council)
- Area of law
- Competition law · Abuse of market power
- Legal basis
- Konkurrenceloven; AEUV Art. 102
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Media and online platforms
- Published
- 26 Aug 2026
- KFST – Wolt has abused its dominant position (26.08.2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
25 Aug 2026 Health Service Executive (HSE)Irish health service HSE: 645,000 EUR for neglected paper patient records €645,000
In 2023, intruders gained access to two former psychiatric hospitals and posted videos of the patient records stored there online. An inspection of twelve sites found records with mould, water and animal damage in unsuitable rooms, up to and including shipping containers. Ireland's Data Protection Commission (DPC) imposed a fine of 645,000 EUR, issued a reprimand and ordered audits and the relocation of records.
Data protection also applies to paper archives in disused buildings – retention requires an inventory, erasure periods and physical security.
Physical security and retention of paper records
- Authority / court
- Data Protection Commission (DPC)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- DSGVO Art. 5 Abs. 1 lit. e und f, 32 Abs. 1, 33 Abs. 1, 34 Abs. 1
- Action
- Fine
- Status of proceedings
- final
- Sector
- Public sector
- Employees
- 10,000 or more
- Published
- 2 Sep 2026
- Data Protection Commission announces Final Decision following Inquiry into the Health Service Executive (HSE) Press release of an authority
- EDPB – DPC announces Final Decision following Inquiry into the HSE Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
25 Aug 2026 ExxonMobil Chemical LimitedExxonMobil Chemical: 267,000 GBP for five hydrocarbon leaks at Fife ethylene plant €312,098
Between February 2018 and September 2019, five leaks of highly flammable hydrocarbons occurred at the Mossmorran major hazard site (COMAH upper tier), all caused by corrosion under insulation; around 82 tonnes escaped in one leak. During a routine inspection in May 2019, inspectors of the Health and Safety Executive (HSE) smelled escaping gas – the company had known about this leak for around four months and had continued production without additional precautions. The inspection arrangements for insulated pipework were inadequate; fine of 267,000 GBP.
Recurring damage patterns must change the inspection concept – visual inspections from the ground are not sufficient for insulated pipework.
- Authority / court
- Health and Safety Executive (Kirkcaldy Sheriff Court)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Provision and Use of Work Equipment Regulations 1998, reg. 6(2); Health and Safety at Work etc. Act 1974, s. 33(1)(c)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Chemicals and pharmaceuticals
- Employees
- 10,000 or more
- Published
- 26 Aug 2026
Original amount 267,000 GBP, converted at the ECB reference rate of 25 Aug 2026.
- Six-figure fine for ExxonMobil after five leaks of extremely flammable hydrocarbons at Fife chemical plant Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
25 Aug 2026 Elizabeta Promet d.o.o., SolinCroatia: 10,000 EUR against Elizabeta Promet for deliveries without a written contract €10,000
As a buyer with significant bargaining power, the company from Solin purchased agricultural and food products from two suppliers without written contracts. The Agencija za zaštitu tržišnog natjecanja (Croatian Competition Agency, AZTN) considered this an unfair trading practice and, taking mitigating circumstances into account, imposed 10,000 EUR (date = publication).
In food purchasing, the mere absence of written supply contracts is an infringement – a simple contract standard prevents this.
Written form for supply contracts in food purchasing
- Authority / court
- Agencija za zaštitu tržišnog natjecanja (AZTN)
- Area of law
- Competition law · Abuse of market power
- Legal basis
- Zakon o zabrani nepoštenih trgovačkih praksi u lancu opskrbe hranom (ZNTP)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Food and agriculture
- Mitigating circumstances
- Several mitigating circumstances taken into account
- Published
- 25 Aug 2026
- Provedba ZNTP-a: AZTN kaznio ELIZABETU PROMET d.o.o., Solin s 10.000,00 eura zbog nametanja nepoštenih trgovačkih praksi Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
24 Aug 2026 Container Manufacturing Ltd.Small US machinery supplier exported spare parts for can presses to Russia €857,339
Between March 2023 and March 2025, the Ohio manufacturer of presses for beverage can ends (nine employees) supplied, in ten instances, spare parts for aluminium forming tools worth around 264,700 USD – partly via the UAE and Turkey – without a licence to a Russian customer whose group also supplies defence precursors. In two instances, the company acted with knowledge of the violation; it admitted the allegations, which were brought by the US Commerce Department's Bureau of Industry and Security (BIS).
Even small businesses with few employees must check tariff codes against Russia restrictions and treat deliveries via third countries as a warning sign.
HTS-based export restrictions on Russia, diversion via third countries
Missing or inadequate training played a role in the decision.
- Authority / court
- U.S. Department of Commerce, Bureau of Industry and Security (BIS)
- Area of law
- Sanctions and export control · Export control and dual-use goods
- Legal basis
- Export Administration Regulations, § 746.8(a)(5) (HTS-Codes Supplement No. 4 to Part 746), §§ 764.2(a), 764.2(e)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Manufacturing and mechanical engineering
- Employees
- Under 50
- Mitigating circumstances
- Full cooperation; compliance programme subsequently expanded with screening, an approval process and additional export control training
- Published
- 24 Aug 2026
Original amount 1,000,000 USD, converted at the ECB reference rate of 24 Aug 2026.
- BIS Reaches Administrative Enforcement Settlement with Container Manufacturing Ltd. (24.08.2026) Press release of an authority
- BIS Order Relating to Container Manufacturing Ltd. Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
20 Aug 2026 IPMF LLC (NaturPak)NaturPak: $364,100 proposed after three deaths caused by bursting kettle lids €311,703
At the food plant in Janesville (Wisconsin), the lids of pressurised industrial kettles opened in February and March 2026, scalding workers with steam and hot liquid; three people died. The U.S. Occupational Safety and Health Administration (OSHA) proposed a total of $364,100 for both inspections combined, including repeat violations relating to fall protection and lockout/tagout.
After a serious accident, the technical cause must be eliminated immediately – otherwise, as here, a second similar incident may follow.
- Authority / court
- U.S. Department of Labor – Occupational Safety and Health Administration (OSHA)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Occupational Safety and Health Act of 1970; 29 CFR 1910 (u. a. Lockout/Tagout, Absturzsicherung, persönliche Schutzausrüstung)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Food and agriculture
- Repeat case
- yes
- Published
- 20 Aug 2026
Original amount 364,100 USD, converted at the ECB reference rate of 20 Aug 2026.
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
19 Aug 2026 Poliserv JG (PJG) SRLPhishing on admin account – Poliserv JG must pay 3,000 EUR €2,998
Attackers obtained the credentials of a user account with administrator rights through phishing and accessed customer data. The Romanian data protection authority (ANSPDCP) criticised the lack of technical and organisational measures and of regular effectiveness testing, imposed 15,728 lei (3,000 EUR) and ordered regular employee training, including on recognising phishing e-mails. Date = publication of the press release; according to the authority, the investigation was concluded in the previous month.
Admin accounts need MFA, and all employees must be able to recognise phishing – the supervisory authority now expressly orders training.
Phishing recognition, protection of privileged accounts
Missing or inadequate training played a role in the decision.
- Authority / court
- Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 32 Abs. 1 lit. b und Abs. 2 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 19 Aug 2026
Original amount 15,728 RON, converted at the ECB reference rate of 19 Aug 2026.
- ANSPDCP – Comunicat de presă 19.08.2026 (Poliserv JG (PJG) SRL) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
19 Aug 2026 WH Media GmbHKommAustria penalises person responsible for W24 over advertising in news programme €500
On 29 May 2024, the Vienna broadcaster W24 aired advertising in split screen within the programme ‘24 Stunden Wien’, did not adequately separate advertising from programming and, at around 50 minutes, significantly exceeded the permitted 12 minutes of advertising per hour. The Austrian Communications Authority (Kommunikationsbehörde Austria, KommAustria) imposed fines totalling 500 EUR (plus 50 EUR in costs) on the body authorised to represent the company externally; the GmbH is jointly and severally liable under § 9 (7) VStG (Austrian Administrative Penal Act).
Advertising time limits and the separation requirement also apply to small regional broadcasters – management is personally liable via § 9 VStG.
- Authority / court
- Kommunikationsbehörde Austria (KommAustria)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- § 64 Abs. 2 Z 9 i. V. m. §§ 43 Abs. 2, 44 Abs. 1, 45 Abs. 1 AMD-G; § 9 VStG
- Action
- Fine
- Status of proceedings
- final
- Sector
- Media and online platforms
- Culpability
- negligent
- Mitigating circumstances
- No previous record, duration of proceedings, remorseful confession and remedial measures initiated.
- Liability of senior managers
- Fine imposed on the body responsible externally (§ 9 (1) VStG); the company is jointly and severally liable.
- Published
- 19 Aug 2026
- KommAustria, Straferkenntnis KOA 05.910 / 2025-0.418.178-6-A (W24) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
19 Aug 2026 Sioux Erosion Control Inc.DOJ: jury convicts erosion control firm of price fixing in Oklahoma road construction —
A jury found Sioux Erosion Control, co-owner BG Dale Biscoe and employee Randall David Shelton guilty of having fixed prices for erosion control services, allocated contracts regionally and rigged bids on publicly funded road construction projects in Oklahoma (more than 100 million USD) from 2017 to 2023. Sentencing was still pending.
Subcontractors in public road construction are also targeted by prosecutors – up to and including jury convictions of individual employees.
Price-fixing and territorial agreements for subcontracted services in road construction
- Authority / court
- U.S. Department of Justice, Antitrust Division
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Section 1 Sherman Act
- Status of proceedings
- unknown
- Sector
- Construction and real estate
- Liability of senior managers
- Guilty verdict against co-owner BG Dale Biscoe and employee Randall David Shelton
- Published
- 20 Aug 2026
- Jury Convicts Erosion Control Company, Executive, and Employee for Roles in $100M Price-Fixing Conspiracy Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
17 Aug 2026 Pluxee Česká republika a.s.; Edenred CZ s.r.o.; Up Česká republika s.r.o.Meal voucher cartel: 279 million CZK against Pluxee, Edenred and Up upheld with final effect €11.5m
From 2004 to 2018, the three issuers of paper meal vouchers coordinated with retail chains how many vouchers would be accepted per purchase. The President of the Úřad pro ochranu hospodářské soutěže (Czech Office for the Protection of Competition, ÚOHS) dismissed the appeals against the recalculation of the fines: Pluxee 132.271 million, Edenred 101.94 million and Up 44.941 million CZK, a total of 279.152 million CZK.
Coordinating seemingly technical conditions such as acceptance limits is also a cartel – industry discussions need clear boundaries.
Coordination of terms and conditions among competitors
- Authority / court
- Úřad pro ochranu hospodářské soutěže (ÚOHS)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Tschechisches Wettbewerbsgesetz, Art. 101 AEUV (R0112/2025)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Culpability
- intentional
- Published
- 17 Aug 2026
Original amount 279,152,000 CZK, converted at the ECB reference rate of 17 Aug 2026.
- Chairman of the Czech Competition Authority Definitively Confirms Fines for Meal Voucher Issuers’ Cartel Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
14 Aug 2026 Henkel AG & Co. KGaAHenkel/Liquid Nails: court blocks takeover of Loctite’s main competitor Order
Henkel wanted to buy the construction adhesive brand Liquid Nails for 725 million USD from the financial investor American Industrial Partners, thereby taking over the main competitor of its Loctite brand. After a seven-day trial, the federal court, on application by the Federal Trade Commission (FTC), issued a permanent injunction against the acquisition.
Acquiring the closest competitor carries a high risk of prohibition, even at a moderate deal volume.
- Authority / court
- U.S. District Court for the Southern District of New York (auf Antrag der FTC)
- Area of law
- Competition law · Merger control
- Legal basis
- Section 7 Clayton Act; Section 13(b) FTC Act (Permanent Injunction)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Chemicals and pharmaceuticals
- Employees
- 10,000 or more
- Published
- 17 Aug 2026
- Statement on FTC Win Blocking Loctite, Liquid Nails Construction Adhesive Merger (17.08.2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
13 Aug 2026 Dante International S.A.; Extreme Digital-eMAG Kft. (Betreiber des eMAG-Webshops)eMAG: further 225 million HUF for unfulfilled commitments €620,091
In 2021, the operators of the online retailer eMAG had committed to a support programme for Hungarian businesses, but once again implemented it only partially and not with the prescribed content. In the follow-up review, the Gazdasági Versenyhivatal (Hungarian Competition Authority, GVH) imposed 225 million HUF; in total, the operators have already received fines of 710 million HUF.
Commitments made binding by an authority require dedicated implementation and evidence controlling – otherwise the next fine follows.
- Authority / court
- Gazdasági Versenyhivatal (GVH)
- Area of law
- Consumer protection and online retail
- Legal basis
- Nachprüfungsverfahren zu verbindlichen Zusagen (VJ/6/2025)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Retail and e-commerce
- Repeat case
- yes
- Mitigating circumstances
- The companies acknowledged the failures and waived legal remedies.
- Published
- 13 Aug 2026
Original amount 225,000,000 HUF, converted at the ECB reference rate of 13 Aug 2026.
- Újabb 225 milliós GVH-bírságot kapott az eMAG, mert megint hiányosan teljesítette a saját vállalásait Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
13 Aug 2026 „О-Рент“ ЕООД (sowie „Инжконсулт“ ЕООД und „Земекоп“ ЕООД)Construction machinery cartel: fine for O-Rent, compliance programme for all participants €2,403
The Комисия за защита на конкуренцията (Bulgarian Commission for the Protection of Competition, KZK) found a cartel in public tenders for mining and construction machinery (price fixing and market sharing, Art. 15 ZZK – Bulgarian Protection of Competition Act, Art. 101 TFEU). Inzhkonsult and Zemekop, as a single undertaking, were exempted from the fine; O-Rent received a sanction of 2,403.07 EUR. All three companies must introduce a competition law compliance programme within 60 days and report on it.
The authority now expressly requires compliance programmes – anyone bidding in tenders should have one before it is ordered.
Competition law in tenders; compliance programme
- Authority / court
- Комисия за защита на конкуренцията (КЗК, Bulgarische Wettbewerbskommission)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Art. 15 Abs. 1 Nr. 1 und 2 ZZK; Art. 101 Abs. 1 lit. a und c AEUV
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Construction and real estate
- Mitigating circumstances
- Immunity from fines for two participants (leniency programme)
- Published
- 20 Aug 2026
- КЗК Публичен електронен регистър – Производство (Решение № 797 от 13.08.2026; Volltext als PDF im Register) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
12 Aug 2026 Rice Lake Weighing Systems, Inc.Scale manufacturer Rice Lake liable for Italian subsidiary's indirect exports to Iran €52,632
In eight instances in 2019–2021, the Italian subsidiary Dini Argeo supplied weighing equipment worth around 121,500 USD to a trader in the UAE, although it knew that the goods would be passed on to a former direct Iranian customer. The parent company had passed on the Iran ban only by an English-language e-mail without explanation; the US Treasury's Office of Foreign Assets Control (OFAC) considered it a non-egregious, voluntarily self-disclosed case.
Implement sanctions requirements at foreign subsidiaries in an understandable way, in the local language and with training for all relevant employees – indirect supplies via traders are also prohibited.
Sanctions training for foreign subsidiaries, indirect supplies via third countries
Missing or inadequate training played a role in the decision.
- Authority / court
- U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
- Area of law
- Sanctions and export control · Breaches of sanctions and embargoes
- Legal basis
- Iranian Transactions and Sanctions Regulations, § 560.215 (Auslandstöchter von US-Personen)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Manufacturing and mechanical engineering
- Culpability
- negligent
- Repeat case
- no
- Mitigating circumstances
- Voluntary self-disclosure, immediate internal investigation, low significance for turnover, no prior violations, cooperation; subsequent training of the subsidiary's employees and screening of traders
- Published
- 12 Aug 2026
Original amount 60,764 USD, converted at the ECB reference rate of 12 Aug 2026.
- OFAC Enforcement Release: Rice Lake Weighing Systems Settles with OFAC for Iran-Related Apparent Violations (12.08.2026) Decision of an authority
- OFAC – Civil Penalties and Enforcement Information Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
11 Aug 2026 Citibank, N.A., London BranchOFSI imposes 4.7 million GBP on Citibank London over Russia payments €5.54m
Mainly between February and November 2022, the London branch processed 970 payments totalling around 19.7 million GBP that breached Russia and anti-corruption sanctions. The causes were overloaded alert handling after the wave of designations, delayed escalation and human error; the bank voluntarily disclosed most of the breaches and received a 20% reduction from HM Treasury's Office of Financial Sanctions Implementation (OFSI).
During waves of designations, alert handling needs additional trained capacity – backlogs and wrong decisions in screening are themselves sanctions breaches.
Handling sanctions alerts, escalation and freezing
- Authority / court
- HM Treasury, Office of Financial Sanctions Implementation (OFSI)
- Area of law
- Sanctions and export control · Breaches of sanctions and embargoes
- Legal basis
- Russia (Sanctions) (EU Exit) Regulations 2019; Global Anti-Corruption Sanctions Regulations 2021; s. 146 Policing and Crime Act 2017
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Employees
- 10,000 or more
- Mitigating circumstances
- Predominantly voluntary disclosure and cooperation (20% reduction); exceptional burden caused by the 2022 sanctions packages taken into account
- Published
- 2 Sep 2026
Original amount 4,732,830.58 GBP, converted at the ECB reference rate of 11 Aug 2026.
- OFSI: Imposition of Monetary Penalty – Citibank, N.A., London Branch Decision of an authority
- OFSI – Enforcement of financial sanctions (Sammlung) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
11 Aug 2026 Volga-Dnepr Airlines LLCFederal Court: cargo airline Volga-Dnepr remains on Canadian sanctions list Order
The Russian cargo airline had been added to the list of the Special Economic Measures (Russia) Regulations in April 2023; the Minister of Foreign Affairs rejected the application for delisting. The Federal Court (2026 FC 1048) dismissed the application for judicial review: the Minister had not exercised her broad discretion unreasonably, and there was no procedural error.
Listed logistics partners often remain listed for years – anyone buying air freight must continuously screen carriers and parent companies against sanctions lists.
Listings of transport service providers in partner screening
- Authority / court
- Federal Court (2026 FC 1048); Minister of Foreign Affairs
- Area of law
- Sanctions and export control · Breaches of sanctions and embargoes
- Legal basis
- Special Economic Measures Act; Special Economic Measures (Russia) Regulations, SOR/2014-58, ss. 2(a), 8
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
10 Aug 2026 Veloxis Pharmaceuticals Inc.Veloxis: over 46 million USD – luxury trips, dinners and gifts for transplant teams Other
From 2016 to 2023, Veloxis provided transplant professionals with expensive meals and alcohol, trips and stays at luxury resorts, gifts and consultancy fees without consideration, and paid specialty pharmacies concealed remuneration in order to promote prescriptions and purchases of the immunosuppressant Envarsus XR. The company entered into a Deferred Prosecution Agreement with a criminal payment of more than 10 million USD, is paying 34.45 million USD under civil law (21,211,251 USD to the federal government, 13,238,749 USD to states) and a penalty of 1.55 million USD under the Sunshine Act (Open Payments) – the highest to date – totalling over 46 million USD.
Invitations and gifts to decision-makers must not only be limited but also fully reported to transparency registers.
Gifts, travel and hospitality for healthcare professionals; transparency reporting
- Authority / court
- U.S. Department of Justice / U.S. Attorney's Office, District of Massachusetts
- Area of law
- Bribery and corruption · Gifts, hospitality and benefits
- Legal basis
- Anti-Kickback Statute; False Claims Act; Physician Payments Sunshine Act (Open Payments)
- Action
- Other
- Status of proceedings
- final
- Sector
- Chemicals and pharmaceuticals
- DOJ: Veloxis Pharmaceuticals Agrees to Pay Over $46M to Resolve Criminal and Civil Liability for Kickback Schemes (10.08.2026) Press release of an authority
- HHS-OIG Enforcement Actions: Veloxis Pharmaceuticals Agrees to Pay Over $46M … (10.08.2026) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
7 Aug 2026 Hair-Line Kft.Hair-Line: 68.5 million HUF for price and territorial restrictions on hairdressing supplies €187,929
In 2018–2022, the distributor of professional hairdressing products (Alfaparf, Yellow) determined the prices at which its territorial representatives were allowed to sell to salons and retailers and restricted passive sales outside the territories. Under a settlement and with a commitment to a compliance programme, the Gazdasági Versenyhivatal (Hungarian Competition Authority, GVH) imposed 68.5 million HUF.
Commercial agent systems with territorial protection must not restrict resale prices or passive sales either.
Price and territorial restrictions in the distribution system
Missing or inadequate training played a role in the decision.
- Authority / court
- Gazdasági Versenyhivatal (GVH)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Ungarisches Wettbewerbsgesetz, Verbot wettbewerbsbeschränkender Vereinbarungen (VJ/17/2022)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Culpability
- intentional
- Mitigating circumstances
- Cooperation, acknowledgement in the settlement and commitment to a comprehensive compliance programme.
- Published
- 7 Aug 2026
Original amount 68,500,000 HUF, converted at the ECB reference rate of 7 Aug 2026.
- Korlátozta a versenyt az egyik ismert hazai fodrászcikk forgalmazó, komoly GVH-bírság lett a vége Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
6 Aug 2026 AS Asphaltstraßensanierung GmbH, BITUNOVA GmbH, Kutter Spezialstraßenbau GmbH & Co. KG, Possehl Construction GmbH (inkl. VSI), Liesen…alles für den Bau GmbH, OAT GmbH/Otto Alte-Teigeler GmbHBundeskartellamt: 60.3 million EUR against DSK road repair cartel €60.3m
From around 2010 to September 2019, six suppliers of thin cold-laid asphalt surface layers (Dünne Asphaltdeckschichten in Kaltbauweise, DSK) allocated customers – primarily public contracting authorities – and contracts among themselves nationwide and coordinated prices. Germany's Federal Cartel Office (Bundeskartellamt) imposed fines of around 60.3 million EUR; all proceedings ended in settlements.
Anyone who "shares out" public contracts regionally risks fines running into millions – calculations and bids must always be prepared independently.
Customer allocation and bid rigging in public contracts
- Authority / court
- Bundeskartellamt
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- § 1 GWB, Art. 101 AEUV
- Action
- Fine
- Status of proceedings
- final
- Sector
- Construction and real estate
- Mitigating circumstances
- Leniency bonus for Possehl/VSI, Bitunova, Kutter and AS; settlement
- Published
- 6 Aug 2026
- Bußgelder wegen Kartellabsprachen im Bereich Straßenreparatur mit DSK Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
6 Aug 2026 AMATO BESTSELLER S.R.L.AMATO BESTSELLER: 45,000 EUR plus 50,000 lei for data access and robocalls €54,316
Following several complaints, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (Romanian data protection authority, ANSPDCP) found that current and former employees, untrained and without procedural rules, had access to extensive data (including health, family and income data), that data subjects were not informed under Art. 14 GDPR, that excessive data were collected and that automated advertising calls were made without consent. Fines: 78,465 lei (15,000 EUR, Art. 32(4)), 52,310 lei (10,000 EUR, Art. 14), 104,620 lei (20,000 EUR, Art. 5/9 GDPR) and 50,000 lei (Law 506/2004); in addition, an order to provide regular employee training. Date = publication of the press release; according to the authority, the investigation was concluded in June 2026.
Anyone giving employees access to sensitive customer data must train them and limit access on a need-to-know basis.
Training employees in handling customer data; consent for advertising calls
Missing or inadequate training played a role in the decision.
- Authority / court
- Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Art. 5 Abs. 1 lit. c i. V. m. Art. 9, Art. 14, Art. 32 Abs. 4 DSGVO; Art. 12 Abs. 1 Gesetz 506/2004
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 6 Aug 2026
Original amount 285,395 RON, converted at the ECB reference rate of 6 Aug 2026.
- ANSPDCP – Comunicat de presă 06.08.2026 (AMATO BESTSELLER S.R.L.) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
6 Aug 2026 „Чили Хилс Фудс“ ООД (Chili Hills Foods OOD)Chili Hills Foods: 20,022 EUR for false copying allegations against competitor €20,022
From May 2024, in social media videos (campaign ‘Създавай! Не копирай!’), the company falsely accused a competing family business for hot chillies of having stolen its business, ideas and concept, and promoted the clips partly through paid advertising. The Комисия за защита на конкуренцията (Bulgarian Commission for the Protection of Competition, KZK) regarded this as unfair damage to reputation (Art. 30 ZZK – Bulgarian Protection of Competition Act), imposed 4% of 2025 net turnover (500,555 EUR), i.e. 20,022 EUR, and ordered immediate cessation. Appeals have been lodged against the decision.
Allegations against competitors on social media are only permissible if based on verifiable facts – paid reach aggravates the sanction.
Statements about competitors on social media
- Authority / court
- Комисия за защита на конкуренцията (КЗК, Bulgarische Wettbewerbskommission)
- Area of law
- Competition law
- Legal basis
- Art. 30 ZZK (Schädigung des guten Rufs eines Wettbewerbers)
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Food and agriculture
- Published
- 19 Aug 2026
- КЗК Публичен електронен регистър – Производство (Решение № 743 от 06.08.2026; Volltext als PDF im Register) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
6 Aug 2026 Capwatt Retail Gás PT, S.A.Portugal: 12,000 EUR against Capwatt over gas reserves and dispute resolution notice €12,000
In several months of 2023 and 2024, the gas supplier did not hold the natural gas security reserves and did not name the competent alternative dispute resolution bodies in customer contracts. The Entidade Reguladora dos Serviços Energéticos (Portuguese Energy Services Regulatory Authority, ERSE) accepted the settlement proposal, set a fine of 24,000 EUR and reduced it to 12,000 EUR.
Mandatory information in consumer contracts – for example on dispute resolution – belongs in a regularly reviewed contract template.
- Authority / court
- Entidade Reguladora dos Serviços Energéticos (ERSE)
- Area of law
- Other
- Legal basis
- RSSE, Art. 29; Decreto-Lei n.º 62/2020, Art. 57, 96; Portaria n.º 59/2022; RRC Art. 22
- Action
- Fine
- Status of proceedings
- final
- Sector
- Energy and utilities
- Culpability
- negligent
- Mitigating circumstances
- Settlement with admission and remediation
- ERSE – Decisões sancionatórias: Processo n.º 50/2024 – Capwatt Retail Gás PT, S.A. Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
5 Aug 2026 Order Express, Inc.NYDFS: $250,000 against money transmitter Order Express over cyber deficiencies €216,375
The licensed money transmitter had no adequate policies for system updates and insufficient risk assessments under New York's cybersecurity regulation, as found by the New York State Department of Financial Services (NYDFS). The company has already remedied the deficiencies.
Even small financial service providers must keep documented patch policies and regular risk assessments.
- Authority / court
- New York State Department of Financial Services (NYDFS)
- Area of law
- Information security and cyber · Security measures and risk management
- Legal basis
- 23 NYCRR Part 500 (Cybersecurity Regulation)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Mitigating circumstances
- Because of its low turnover, the company was exempt from many Part 500 obligations; deficiencies already remedied.
- Published
- 5 Aug 2026
Original amount 250,000 USD, converted at the ECB reference rate of 5 Aug 2026.
- New York State Department of Financial Services Secures Cybersecurity Settlement with Order Express, Inc. Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
4 Aug 2026 AS "Latvijas valsts meži"7.86 million EUR against Latvijas valsts meži for breach of competitive neutrality €7.86m
From 2020 to April 2026, on the basis of old long-term logging contracts, the state forestry group supplied six wood processors with guaranteed quantities of roundwood outside public auctions, while all others could only buy through auctions. In its first decision on the competitive neutrality of public undertakings, the Konkurences padome (Latvian Competition Council) imposed 7,859,606.89 EUR and required equal sales conditions for all qualified bidders.
State-owned companies must allocate resources without discrimination – review historical special contracts regularly for competitive neutrality.
- Authority / court
- Konkurences padome (Lettischer Wettbewerbsrat)
- Area of law
- Competition law
- Legal basis
- Art. 14.1 Konkurences likums (Wettbewerbsneutralität)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Public sector
- Published
- 13 Aug 2026
- Konkurences padome konstatē konkurences neitralitātes pārkāpumu AS „Latvijas valsts meži“ darbībā (13.08.2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
4 Aug 2026 Lime Technology S.r.l., EmTransit S.r.l. (Dott), Bird Rides Italy S.r.l.Rome: 2.675 million EUR against e-scooter and e-bike sharing providers over blocked free rides €2.68m
The three sharing providers made it difficult for holders of a Metrebus annual pass to access the free-ride passes promised when the concessions were awarded, through inadequate organisation, cumbersome activation and long waiting times, which shortened the usable time; Bird also deactivated accounts without prior notice. The AGCM imposed fines totalling 2.675 million EUR in three proceedings (Lime 1.4 million, Dott 525,000, Bird 750,000 EUR).
Promised benefits must also be redeemable in organisational terms – sluggish processing can itself be unfair.
Customer service and redemption of promised services
- Authority / court
- Autorità Garante della Concorrenza e del Mercato (AGCM)
- Area of law
- Consumer protection and online retail · Information duties in online retail
- Legal basis
- Codice del Consumo (pratiche commerciali scorrette), Verfahren PS13028, PS13029, PS13030
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Published
- 6 Aug 2026
- PS13028-PS13029-PS13030 - Roma, sanzioni per 2,675 milioni di euro a operatori monopattini elettrici ed e-bike in sharing Press release of an authority
- AGCM Provvedimento PS13028 (Lime Technology S.r.l.) Decision of an authority
- AGCM Provvedimento PS13029 (EmTransit S.r.l. – Dott) Decision of an authority
- AGCM Provvedimento PS13030 (Bird Rides Italy S.r.l.) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
3 Aug 2026 UBS Financial Services Inc.FinCEN: 125 million USD against UBS Financial Services as a repeat offender €108.4m
The US Financial Crimes Enforcement Network (FinCEN) imposed 125 million USD on the broker-dealer – the highest BSA penalty against a broker-dealer to date. UBSFS admitted wilful infringements: the AML programme was inadequate, more than 50,000 foreign currency transfers totalling more than 10 billion USD were not adequately monitored and suspicious activity reports were not filed; it is already the second enforcement action after 2018.
Monitoring gaps left unremedied after an earlier enforcement action lead, the second time round, to a multiple of the original penalty.
- Authority / court
- Financial Crimes Enforcement Network (FinCEN)
- Area of law
- Money laundering and terrorist financing · Internal controls
- Legal basis
- Bank Secrecy Act (BSA)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Employees
- 10,000 or more
- Culpability
- intentional
- Repeat case
- yes
- Mitigating circumstances
- Up to 15 million USD (remaining amount due by 31 May 2028) may be waived to the extent that UBSFS bears the costs of the independent review of its AML programme and implements its recommendations
- Published
- 3 Aug 2026
Original amount 125,000,000 USD, converted at the ECB reference rate of 3 Aug 2026.
- FinCEN Assesses Historic $125 Million Penalty Against UBS Financial Services Inc. for Recidivist BSA Violations Press release of an authority
- FinCEN Consent Order Imposing Civil Money Penalty – UBS Financial Services Inc. (Number 2026-02) Decision of an authority
- FinCEN Enforcement Actions Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
3 Aug 2026 Zhengzhou Synear Food Co., Ltd.UFLPA list: frozen food manufacturer Zhengzhou Synear Food added Order
The U.S. Forced Labor Enforcement Task Force (FLETF) added the frozen food manufacturer to the Uyghur Forced Labor Prevention Act (UFLPA) Entity List because it works with the Xinjiang government to take in Uyghurs, Kazakhs, Kyrgyz or members of other persecuted groups under state labour transfer programmes. The company's goods are therefore presumed to have been produced with forced labour on import into the US unless the importer rebuts this.
Food importers should also check suppliers outside Xinjiang for involvement in state labour transfer programmes.
- Authority / court
- U.S. Department of Homeland Security (Forced Labor Enforcement Task Force)
- Area of law
- Supply chain and human rights · Forced and child labour
- Legal basis
- Uyghur Forced Labor Prevention Act, Section 2(d)(2)(B)(ii)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Food and agriculture
- Published
- 3 Aug 2026
- Federal Register: Notice Regarding the Uyghur Forced Labor Prevention Act Entity List (03.08.2026) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
3 Aug 2026 Guangxi Kelun Pharmaceutical Co., Ltd.UFLPA list: antibiotics manufacturer Guangxi Kelun Pharmaceutical added Order
The U.S. Forced Labor Enforcement Task Force (FLETF) listed the manufacturer of cephalosporin antibiotics because it sources antibiotic intermediates from Yili Chuanning Biotechnology in Xinjiang. The company's goods are therefore presumed to have been produced with forced labour on import into the US unless the importer rebuts this.
Pharmaceutical companies must be able to trace their supply chains back to active ingredient intermediates.
- Authority / court
- U.S. Department of Homeland Security (Forced Labor Enforcement Task Force)
- Area of law
- Supply chain and human rights · Forced and child labour
- Legal basis
- Uyghur Forced Labor Prevention Act, Section 2(d)(2)(B)(v)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Chemicals and pharmaceuticals
- Published
- 3 Aug 2026
- Federal Register: Notice Regarding the Uyghur Forced Labor Prevention Act Entity List (03.08.2026) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
3 Aug 2026 Shandong Weiqiao Pioneering Group Co., Ltd.UFLPA list: textile group Shandong Weiqiao Pioneering Group over Xinjiang cotton Order
The U.S. Forced Labor Enforcement Task Force (FLETF) added the cotton and textile producer to the Uyghur Forced Labor Prevention Act (UFLPA) Entity List because it sources cotton from Xinjiang. The company's goods are therefore presumed to have been produced with forced labour on import into the US unless the importer rebuts this.
Textile retailers need proof of origin for cotton down to the fibre, for example through isotope or traceability testing.
- Authority / court
- U.S. Department of Homeland Security (Forced Labor Enforcement Task Force)
- Area of law
- Supply chain and human rights · Forced and child labour
- Legal basis
- Uyghur Forced Labor Prevention Act, Section 2(d)(2)(B)(v)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 3 Aug 2026
- Federal Register: Notice Regarding the Uyghur Forced Labor Prevention Act Entity List (03.08.2026) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
30 Jul 2026 Access DX Laboratory, LLCAccess DX Laboratory: 36.4 million USD – kickbacks for unnecessary genetic tests €31.7m
The Houston laboratory, its former CEO Michael Stewart and the businessman Harold Shatz allegedly paid kickbacks and billed Medicare and Medicaid for medically unnecessary genetic tests. The three settlements add up to 36.4 million USD; the laboratory is subject to a Corporate Integrity Agreement.
Commission models for intermediaries who bring in orders or patients are a classic gateway for bribery.
Remuneration of intermediaries and referrers
- Authority / court
- U.S. Department of Justice
- Area of law
- Bribery and corruption · Commercial bribery
- Legal basis
- Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
- Action
- Other
- Status of proceedings
- final
- Sector
- Healthcare
- Liability of senior managers
- Former CEO pays under a separate settlement.
Original amount 36,400,000 USD, converted at the ECB reference rate of 30 Jul 2026.
- HHS-OIG Enforcement Actions: Texas Laboratory, Former CEO, and Florida Businessman Pay a Total of $36.4M … (30.07.2026) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
30 Jul 2026 Airbus Operations LimitedAirbus Operations pays 6.4 million GBP for export control breaches in technology transfer €7.48m
Over an extended period before November 2022, Airbus Operations Ltd breached the Export Control Order 2008: transfers of controlled technology under three open general export licences (OGEL) were not correctly documented, required registers were missing, and one individual licence was not complied with. The case came to light through voluntary disclosure and was concluded by HM Revenue & Customs (HMRC) by way of a compound settlement (date of publication).
Technology transfers by e-mail or data room are also exports – conditions, registers and records of general licences must be put into practice day to day.
Licence conditions and record-keeping obligations in technology transfer
- Authority / court
- HM Revenue & Customs (HMRC) / Export Control Joint Unit
- Area of law
- Sanctions and export control · Export control and dual-use goods
- Legal basis
- Export Control Order 2008, Art. 29(2) und 29(3) (Auflagen und Register bei OGELs) sowie Auflage einer SIEL; Straftaten nach Art. 38(1)(a) und (b); Compound Settlement durch HMRC
- Action
- Fine
- Status of proceedings
- final
- Sector
- Manufacturing and mechanical engineering
- Employees
- 10,000 or more
- Mitigating circumstances
- Voluntary disclosure, full cooperation, remedial measures
- Published
- 30 Jul 2026
Original amount 6,409,388 GBP, converted at the ECB reference rate of 30 Jul 2026.
- Notice to exporters 2026/17: company named in compound settlement for breaches of export control Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
29 Jul 2026 AvisAvis: maximum fine of 1 million EUR for handling fee on traffic fines €1m
The car rental company charged customers an "administration fee" of 33.88 to 45 EUR when a rental car incurred a traffic offence – even though naming the driver is a statutory obligation of the rental company. Spain's Ministry of Social Rights, Consumer Affairs and 2030 Agenda classified this as a very serious infringement and imposed the maximum fine of 1 million EUR; a court had already declared the clause void in 2020.
No additional fee may be charged for fulfilling statutory obligations – least of all after a court has prohibited the clause.
- Authority / court
- Ministerio de Derechos Sociales, Consumo y Agenda 2030
- Area of law
- Consumer protection and online retail · Information duties in online retail
- Legal basis
- Artt. 82, 87.5 y 87.6 TRLGDCU (Real Decreto Legislativo 1/2007)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Repeat case
- yes
- Published
- 29 Jul 2026
- Consumo sanciona con un millón de euros a la empresa de alquiler de coches Avis por prácticas abusivas Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
29 Jul 2026 Österreichischer Rundfunk (ORF)KommAustria finds unlabelled product placement in ORF's ‘Sport aktuell’ Order
In the programme ‘Sport aktuell’ on ORF 1 on 29 July 2025, a logo wall was visible as product placement without being labelled. The Austrian Communications Authority (Kommunikationsbehörde Austria, KommAustria) found, with final effect, a violation of the ORF Act (ORF-Gesetz).
Product placements must be identified and labelled by the editorial team – including logo walls in the background.
Labelling of advertising and product placement
- Authority / court
- Kommunikationsbehörde Austria (KommAustria)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- § 16 Abs. 5 Z 4 ORF-G
- Action
- Order
- Status of proceedings
- final
- Sector
- Media and online platforms
- Published
- 29 Jul 2026
- KommAustria, Entscheidung 2025-0.606.040-3-A (ORF, Sport aktuell) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
28 Jul 2026 TrenitaliaTrenitalia removes hurdles to refunds for delays following AGCM proceedings Order
For refunds in the event of delays of 60 minutes or more or cancellations, Trenitalia required prior written confirmation from the call centre or ticket office. The AGCM accepted binding commitments: abolition of the confirmation requirement, strengthened refund channels, an information page on disruptions and an implementation report within three months; no infringement was found.
Additional formalities before statutory refunds act as a hurdle and lead to proceedings.
- Authority / court
- Autorità Garante della Concorrenza e del Mercato (AGCM)
- Area of law
- Consumer protection and online retail · Information duties in online retail
- Legal basis
- Codice del Consumo (impegni); EU-Fahrgastrechte im Eisenbahnverkehr
- Action
- Order
- Status of proceedings
- final
- Sector
- Transport, logistics and shipping
- Mitigating circumstances
- Binding commitments, no finding of an infringement.
- Published
- 30 Jul 2026
- PS13019 - Trenitalia, accolti impegni su ostacoli ai rimborsi per ritardi prolungati e cancellazioni treni Press release of an authority
- AGCM Provvedimento PS13019 (Trenitalia), Annahme der Zusagen, adunanza del 28 luglio 2026 Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
27 Jul 2026 Metropolitan Police ServiceICO: order and reprimand against London's Met Police after disclosure of sensitive data Order
The Metropolitan Police handed a defendant unredacted documents containing the new address and telephone number of a stalking victim, and in a circular e-mail disclosed 18 people with a parliamentary connection in an open recipient list. The UK Information Commissioner's Office (ICO) ordered improvements within 3 and 12 months, including in data protection training completion rates.
Policies are not enough if mandatory training goes uncompleted for years – monitor and enforce training completion rates.
Redacting documents, e-mail distribution lists (BCC), data protection training
Missing or inadequate training played a role in the decision.
- Authority / court
- Information Commissioner's Office (ICO)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Data Protection Act 2018, Section 40
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Public sector
- Employees
- 10,000 or more
- Culpability
- negligent
- Published
- 5 Aug 2026
- Metropolitan Police Service issued with enforcement notice and reprimand following data protection failures Press release of an authority
- ICO Enforcement notice: Metropolitan Police Service Enforcement database of an authority
- ICO Reprimand: Metropolitan Police Service Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Jul 2026 Orchids Builders LLCFlorida roofer: $349,754 for repeatedly missing fall protection €307,017
On 21.01. and 10 March 2026, the U.S. Occupational Safety and Health Administration (OSHA) found at two residential construction sites in Rockledge that employees of the roofing contractor were working on roofs without fall protection; training records, eye protection when using nail guns and ladders extending sufficiently above the roof edge were also missing. The company had been inspected seven times since 2023, each time with fall protection violations. Proposed: $349,754 (2 wilful, 4 repeat violations).
Companies that allow the same fall hazards to recur after earlier inspections risk classification as a repeat or wilful violation with substantially higher penalties.
Fall protection during roofing work
Missing or inadequate training played a role in the decision.
- Authority / court
- U.S. Department of Labor – Occupational Safety and Health Administration (OSHA)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- 29 CFR 1926 Subpart M (Fall Protection), Subpart X (Ladders)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Construction and real estate
- Culpability
- intentional
- Repeat case
- yes
- Published
- 23 Jul 2026
Original amount 349,754 USD, converted at the ECB reference rate of 23 Jul 2026.
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Jul 2026 Nova Scotia Gaming CorporationFINTRAC: 231,826 CAD against Nova Scotia Gaming over missing suspicious transaction reports €144,584
The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) imposed 231,826 CAD on the Halifax gaming corporation (casino sector) because it failed to file suspicious transaction reports on attempted transactions despite reasonable grounds for suspicion, did not keep its compliance policies up to date and approved by a senior officer, and did not assess the money laundering risk as required. The penalty was paid in full.
Even aborted or merely attempted transactions can be reportable – cashier staff must know this.
Suspicious transaction reports even for merely attempted transactions
- Authority / court
- Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
- Area of law
- Money laundering and terrorist financing · Suspicious activity reports
- Legal basis
- Proceeds of Crime (Money Laundering) and Terrorist Financing Act, Part 1, und zugehörige Verordnungen
- Action
- Fine
- Status of proceedings
- final
- Sector
- Other
- Published
- 3 Sep 2026
Original amount 231,826 CAD, converted at the ECB reference rate of 23 Jul 2026.
- FINTRAC imposes an administrative monetary penalty on Nova Scotia Gaming Corporation Press release of an authority
- Public notice of administrative monetary penalties Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
21 Jul 2026 Maxxis International GmbH, Best4Tires Berlin GmbH, Reifen Müller GmbH & Co. KGBundeskartellamt: 11.9 million EUR over resale price maintenance in tyre distribution (Maxxis/CST) €11.9m
Maxxis guaranteed wholesalers fixed margins per tyre sold of the Maxxis and CST brands, monitored prices in particular on the Tyre24 platform and intervened when prices were too low. Germany's Federal Cartel Office (Bundeskartellamt) imposed fines totalling 11.9 million EUR on three companies and one responsible individual.
Margin guarantees and price controls vis-à-vis dealers constitute prohibited resale price maintenance – sales teams need clear rules for price discussions.
Influencing resale prices and price monitoring on platforms
- Authority / court
- Bundeskartellamt
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- § 1 GWB (vertikale Preisbindung)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Automotive
- Mitigating circumstances
- Settlement with Maxxis and Reifen Müller
- Liability of senior managers
- Fine imposed on one responsible natural person (not named)
- Published
- 21 Jul 2026
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
21 Jul 2026 Hôpital Privé de la LoireHôpital Privé de la Loire: 500,000 EUR after data exfiltration affecting over 520,000 patients €500,000
In summer 2025, an attacker gained access to the private hospital's electronic patient record system and obtained data on 524,867 patients and 202,246 trusted persons. There was no VPN or multi-factor authentication for external users, no appropriate access control and no detection of suspicious activity; the trusted persons were not notified. France's data protection authority (Commission nationale de l'informatique et des libertés, CNIL) imposed a fine of 500,000 EUR (SAN-2026-009).
External access to patient records belongs behind multi-factor authentication and continuous monitoring for unusual access.
Access security and attack detection in hospitals
- Authority / court
- Commission nationale de l'informatique et des libertés (CNIL)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- DSGVO Art. 32, Art. 34
- Action
- Fine
- Status of proceedings
- final
- Sector
- Healthcare
- Published
- 3 Sep 2026
- Sanction : amende de 500 000 euros à l'encontre de l'Hôpital Privé de la Loire Press release of an authority
- Délibération SAN-2026-009 du 21 juillet 2026 Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
20 Jul 2026 AliExpressDSA: 550 million EUR against AliExpress over illegal and unsafe products €550m
AliExpress did not diligently assess the risks posed by illegal, unsafe and counterfeit products (including insufficient moderation capacity, recommender and advertising systems) and did not take effective countermeasures (including deficient enforcement of sanctions against traders, product checks that could be circumvented). The European Commission imposed 550 million EUR under the Digital Services Act (DSA) and required an action plan by 20 October 2026.
The size of a marketplace does not justify gaps: moderation capacity and sanctions against traders must match the actual risk.
- Authority / court
- Europäische Kommission
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Verordnung (EU) 2022/2065 (DSA), Risikobewertung und Risikominderung
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Mitigating circumstances
- Novelty of the Digital Services Act (taken into account by the Commission when setting the fine)
- Published
- 20 Jul 2026
- Commission fines AliExpress €550 million for breaching the Digital Services Act Press release of an authority
- IP/26/1654: Commission fines AliExpress €550 million for breaching the Digital Services Act Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
20 Jul 2026 NeoGenomics Laboratories Inc.NeoGenomics: 9.8 million USD after self-disclosure – discounted consulting for referring physicians €8.59m
The Florida laboratory provided referring physicians with consulting services below market value and paid independent consultants referral-based remuneration for recruiting physicians. Following a self-disclosure, NeoGenomics paid 9,813,260 USD.
Free or discounted services are also benefits – like cash payments, they belong in the anti-corruption review.
Services with monetary value provided to customers below market value
- Authority / court
- U.S. Department of Justice
- Area of law
- Bribery and corruption · Commercial bribery
- Legal basis
- Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
- Action
- Other
- Status of proceedings
- final
- Sector
- Healthcare
- Mitigating circumstances
- Self-disclosure of the remuneration arrangements.
Original amount 9,813,260 USD, converted at the ECB reference rate of 20 Jul 2026.
- HHS-OIG Enforcement Actions: Florida Laboratory Agrees to Pay $9.8M … Self-Disclosure of Compensation Arrangements (20.07.2026) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
20 Jul 2026 EyePoint Pharmaceuticals, Inc.EyePoint: 4.66 million USD – kickbacks to surgery centres for purchasing an eye medicine €4.08m
Between January 2019 and March 2023, the pharmaceutical manufacturer allegedly paid kickbacks to ambulatory surgery centres to induce them to purchase and use the injectable drug DEXYCU for cataract surgery. To resolve the False Claims Act allegations, EyePoint paid 4,657,463.18 USD and entered into a Corporate Integrity Agreement with HHS-OIG.
Discounts, payments or services to institutions that make purchasing decisions require a documented consideration at market value.
Granting benefits to customers and purchasing decision-makers
- Authority / court
- U.S. Department of Justice
- Area of law
- Bribery and corruption · Commercial bribery
- Legal basis
- Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
- Action
- Other
- Status of proceedings
- final
- Sector
- Chemicals and pharmaceuticals
Original amount 4,657,463.18 USD, converted at the ECB reference rate of 20 Jul 2026.
- HHS-OIG Enforcement Actions: EyePoint Pharmaceuticals to Pay $4.6 Million to Resolve False Claims Act Allegations (20.07.2026) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
17 Jul 2026 The Scoular CompanyAgricultural trader Scoular pays 10 million USD over bribes to Mexican border officials €8.91m
From 2013 to 2019, Scoular had customs brokers pay around 400,000 USD to Mexican border and inspection officials so that trains carrying contaminated maize and grain would pass inspections; some of the money went to individuals close to cartels. Three-year DPA with a criminal penalty of 9,769,521 USD and forfeiture of 414,351 USD.
Customs agents and freight forwarders are high-risk third parties: question conspicuous flat fees per shipment, even if they appear to be customary charges.
Facilitation payments via customs agents and logistics service providers
Missing or inadequate training played a role in the decision.
- Authority / court
- U.S. Department of Justice (Criminal Division, Fraud Section; USAO Western District of Texas)
- Area of law
- Bribery and corruption · Bribery of public officials
- Legal basis
- FCPA (Verschwörung zur Verletzung der Anti-Bestechungsvorschriften); Deferred Prosecution Agreement
- Action
- Fine
- Status of proceedings
- final
- Sector
- Food and agriculture
- Culpability
- intentional
- Mitigating circumstances
- Cooperation and remediation (including an overhaul of compliance, third-party management, financial controls and anti-corruption training); 25 % reduction off the low end of the sentencing guidelines range.
- Liability of senior managers
- The customs broker Carlos Leopoldo Alvelais has pleaded guilty.
- Published
- 17 Jul 2026
Original amount 10,183,872 USD, converted at the ECB reference rate of 17 Jul 2026.
- Agricultural Company to Pay Over $10M to Resolve Foreign Bribery Case Press release of an authority
- Deferred Prosecution Agreement, United States v. The Scoular Company, 3:26-cr-01685-KC (W.D. Tex.), filed 07/17/26 Decision of an authority
- DOJ Criminal Division: United States v. The Scoular Company (Fallseite) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
17 Jul 2026 Puratos LimitedPuratos: 120,000 GBP for flour dust above exposure limits and heavy sack handling €141,014
During an inspection in December 2024, the Health and Safety Executive (HSE) found dust escaping from machinery, blowing down with compressed air and dry sweeping at the bakery ingredients factory; measurements confirmed that workplace exposure limits had been exceeded, with a risk of asthma. In addition, employees lifted 25 kg sacks by hand every day. The site had already been cited in 2021 for the same deficiencies; fine of 120,000 GBP plus 6,270 GBP in costs.
Companies that do not permanently remedy deficiencies after a citation pay significantly more the next time – flour dust is a recognised cause of asthma.
Dust exposure and lifting heavy loads
- Authority / court
- Health and Safety Executive (Milton Keynes Magistrates' Court)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Health and Safety at Work etc. Act 1974, s. 2(1)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Food and agriculture
- Repeat case
- yes
- Published
- 20 Jul 2026
Original amount 120,000 GBP, converted at the ECB reference rate of 17 Jul 2026.
- Food manufacturer fined £120,000 after workers exposed to hazardous dust and manual handling risks Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
17 Jul 2026 Orange România SAOrange România pays 100,000 EUR after app errors and hacked ticketing system €99,969
A synchronisation error between two applications allowed a customer to retrieve other customers’ invoices in the mobile app; in addition, the ticketing platform, which was publicly accessible without VPN, MFA or IP restriction, was attacked and a very large data set (including copies of identity documents, card data, IBANs) was exfiltrated. The Romanian data protection authority (ANSPDCP) imposed fines of 104,780 lei (20,000 EUR, Art. 25) and 419,120 lei (80,000 EUR, Art. 32), a total of 523,900 lei, and ordered test and change management. Date = publication of the press release; according to the authority, the investigation was concluded in the previous month.
Never expose internal platforms to the internet without VPN/MFA; software changes to linked systems need testing before go-live.
- Authority / court
- Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 25 Abs. 1, Art. 32 Abs. 1 lit. b und d, Abs. 2 und 4 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Published
- 17 Jul 2026
Original amount 523,900 RON, converted at the ECB reference rate of 17 Jul 2026.
- ANSPDCP – Comunicat de presă 17.07.2026 (Orange România SA) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Jul 2026 TeamViewer SETeamViewer: cyberattack not disclosed as inside information without delay €240,000
Germany's Federal Financial Supervisory Authority (Bundesanstalt für Finanzdienstleistungsaufsicht, BaFin) imposed a fine of 240,000 EUR on the software company because it had not disclosed the information about a cyberattack it had suffered as inside information without delay. The fine notice is final.
Put serious IT security incidents immediately before the ad hoc disclosure committee as well – the incident response process must take capital market disclosure into account.
Recognising security incidents as potential inside information and reporting them to the ad hoc disclosure committee
- Authority / court
- Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
- Area of law
- Capital markets and financial supervision · Disclosure and reporting obligations
- Legal basis
- Art. 17 Abs. 1 UAbs. 1 MAR (EU) Nr. 596/2014
- Action
- Fine
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Published
- 20 Jul 2026
- TeamViewer SE: BaFin setzt Geldbuße fest Decision of an authority
- Bekanntmachung der BaFin zur TeamViewer SE (Maßnahmenansicht mit Rechtskraftvermerk) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Jul 2026 Royal Mail Group LtdTribunal: Royal Mail subjected whistleblower to detriment – £6,978 compensation €8,222
The Employment Tribunal in Manchester found that the claimant had been subjected to detriment because of a protected disclosure and awarded her the agreed amount of £6,978.20. The claims for disability discrimination and constructive dismissal were dismissed.
Large organisations, too, must ensure that whistleblowers do not suffer disadvantages in their day-to-day work.
How managers handle internal reports
- Authority / court
- Employment Tribunal
- Area of law
- Whistleblower protection · Retaliation against whistleblowers
- Legal basis
- Employment Rights Act 1996, s. 47B (Benachteiligung wegen geschützter Offenlegung)
- Action
- Other
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Employees
- 10,000 or more
- Published
- 7 Sep 2026
Original amount 6,978.2 GBP, converted at the ECB reference rate of 16 Jul 2026.
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Jul 2026 BGH: online cancellation page must not offer a "pause contract" alternative Order
On the confirmation page of its online cancellation process, a gym operator displayed a highlighted notice with the button "Pause contract via self-service"; in addition, the confirmation button was labelled "Find contract", which the defendant had already acknowledged. In an action brought by the Federation of German Consumer Organisations (Verbraucherzentrale Bundesverband), the BGH ruled that the confirmation page may only contain the information required for the cancellation and the confirmation button, set aside the judgment of the Higher Regional Court of Düsseldorf (OLG Düsseldorf) dismissing the action to that extent and ordered the operator to cease and desist.
Keep retention or pause offers off the confirmation page of the online cancellation process.
Design of the cancellation process (cancellation button, retention offers)
- Authority / court
- Bundesgerichtshof (I. Zivilsenat), Az. I ZR 200/25
- Area of law
- Consumer protection and online retail · Information duties in online retail
- Legal basis
- § 312k Abs. 1 Satz 1, Abs. 2 BGB (Kündigungsbutton)
- Action
- Order
- Status of proceedings
- final
- Sector
- Other
- Published
- 16 Jul 2026
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
15 Jul 2026 Vanilla Chip LLC (TruHeight)TruHeight: FTC settlement over allegedly fake reviews for growth supplement €657,549
According to the FTC, employees of the dietary supplement provider wrote thousands of five-star reviews, customers received free products or discounts in return for five-star reviews, and bot profiles posed as real users; in addition, there were unsubstantiated growth claims for children and adolescents. The final settlement order provides for a judgment of 4 million USD, which is partially suspended on account of limited ability to pay after payment of 750,000 USD.
Reviews by employees or reviews rewarded for positive star ratings are prohibited and, since 2024, subject to civil penalties.
Fake and purchased customer reviews
- Authority / court
- Federal Trade Commission (FTC)
- Area of law
- Consumer protection and online retail · Fake reviews
- Legal basis
- Section 5 FTC Act; FTC Rule on the Use of Consumer Reviews and Testimonials
- Action
- Disgorgement of profits
- Status of proceedings
- final
- Sector
- Food and agriculture
- Mitigating circumstances
- Partial suspension of the judgment on account of limited ability to pay.
- Liability of senior managers
- The co-founders and co-CEOs Eden Stelmach and Justin Rapoport are personally parties to the order.
- Published
- 15 Jul 2026
Original amount 750,000 USD, converted at the ECB reference rate of 15 Jul 2026.
- FTC Takes Action Against TruHeight for Deceptive, Unsubstantiated Advertising Press release of an authority
- FTC Approves Final Order Against TruHeight (15.07.2026) Press release of an authority
- FTC Case: TruHeight (Vanilla Chip LLC), Docket C-4837, Final Decision and Order Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
15 Jul 2026 CalPlus GmbH, Elektronik-Kontor Messtechnik GmbH, TVW Meßtechnik GmbHBundeskartellamt: 453,000 EUR against distributors of test and measuring equipment €453,000
From 2016 to 2022, three distributors of test and measuring equipment coordinated discounts as essential price components and informed each other of customer contacts, usually with a request for "restraint". This was evidenced by more than 400 emails; the proceedings ended in settlements.
Small distributors are liable too: merely asking a competitor to "hold back" with a customer is a prohibited customer allocation agreement.
Email contacts with competitors about customers and discounts
- Authority / court
- Bundeskartellamt
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- § 1 GWB
- Action
- Fine
- Status of proceedings
- final
- Sector
- Manufacturing and mechanical engineering
- Mitigating circumstances
- Settlement; cooperation by Elektronik-Kontor Messtechnik taken into account
- Published
- 15 Jul 2026
- Bundeskartellamt verhängt Bußgelder wegen Preisabsprachen beim Vertrieb von Prüf- und Messgeräten Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
15 Jul 2026 FleetPride Inc.FleetPride: $264,380 after asphyxiation death during tank trailer inspection €231,790
At the truck parts distributor's Corpus Christi (Texas) site, an employee was asphyxiated while inspecting a tank trailer. The U.S. Occupational Safety and Health Administration (OSHA) found no confined space programme, deficiencies in the respiratory protection programme and electrical hazards, and proposed $264,380 (16 serious, 3 other violations).
Tanks and vessels are confined spaces with a risk of asphyxiation – no one may enter without a permit, atmospheric testing and an attendant.
Working in confined spaces and vessels
- Authority / court
- U.S. Department of Labor – Occupational Safety and Health Administration (OSHA)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- 29 CFR 1910.146 (Permit-required confined spaces); 29 CFR 1910.134 (Respiratory protection)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Published
- 15 Jul 2026
Original amount 264,380 USD, converted at the ECB reference rate of 15 Jul 2026.
- US Department of Labor cites big rig parts distributer for confined space, safety hazards after worker fatality (OSHA) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
15 Jul 2026 Colonial Farms Ltd.Colonial Farms: CFIA administrative monetary penalty of 11,000 CAD under SFCR s. 88 €6,852
On 15 July 2026, the Canadian Food Inspection Agency (CFIA) imposed an administrative monetary penalty of 11,000 CAD on the company in Western Canada for a violation of s. 88 of the Safe Food for Canadians Regulations. An earlier penalty under the same provision from May 2025 was set aside in review proceedings.
Companies that do not eliminate the cause after a first penalty risk repeat penalties and stricter supervision.
- Authority / court
- Canadian Food Inspection Agency (CFIA)
- Area of law
- Other
- Legal basis
- Safe Food for Canadians Regulations, s. 88
- Action
- Fine
- Status of proceedings
- final
- Sector
- Food and agriculture
Original amount 11,000 CAD, converted at the ECB reference rate of 15 Jul 2026.
- CFIA – Administrative monetary penalties (Notices of violation) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
14 Jul 2026 Goldwin LtdMalta: 80,907 EUR against online casino Goldwin for missing customer risk assessment €80,907
The 2022 examination revealed that for more than two years the remote gaming operator had had no proper customer risk assessment for almost its entire player base; the assessments submitted had been prepared specifically for the examination. In addition, once players reached the deposit threshold of 2,000 EUR, it did not check in good time whether they were politically exposed persons. The Financial Intelligence Analysis Unit (FIAU) imposed 80,907 EUR; the fine was still open to appeal at the time of publication.
Supervisory authorities see through risk assessments prepared only for the examination – they must be applied in day-to-day business.
Risk-based customer assessment in gambling
- Authority / court
- Financial Intelligence Analysis Unit (FIAU)
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- Reg. 5(5)(a)(ii), 11(5), 21 PMLFTR; FIAU Implementing Procedures Part I und II (Remote Gaming)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 16 Jul 2026
- Administrative Measure Publication Notice – Goldwin Ltd Decision of an authority
- Publication of AML/CFT Administrative Penalties and Measures – FIAU Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
10 Jul 2026 Volksbank Düsseldorf Neuss eGBaFin: 210,000 EUR against Volksbank Düsseldorf Neuss over monitoring and reporting gaps €210,000
Germany's Federal Financial Supervisory Authority (BaFin) imposed fines totalling 210,000 EUR on the cooperative bank: business relationships were not monitored on an ongoing basis or with enhanced scrutiny, additional information was not obtained and suspicious activity reports were not filed or were filed late. The function of the money laundering reporting officer had been outsourced to an external service provider with several clients.
Institutions that outsource the anti-money laundering function remain responsible themselves for ongoing monitoring and timely suspicious activity reports.
Ongoing monitoring of business relationships and suspicious activity reporting
- Authority / court
- Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- § 56 Abs. 1 S. 1 Nr. 20, 36, 38 und 69 GwG; Bekanntmachung nach § 57 GwG
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Published
- 17 Sep 2026
- Volksbank Düsseldorf Neuss eG: Bafin setzt Bußgelder fest Press release of an authority
- Bekanntmachung zur Volksbank Düsseldorf Neuss eG (§ 57 GwG) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
10 Jul 2026 Brown Capital Management LLCBrown Capital Management: voting rights notifications not submitted on time €187,500
The Baltimore-based US asset manager had not submitted voting rights notifications to the issuer and BaFin in time; the deadline is four trading days after reaching a notifiable threshold. BaFin imposed a fine of 187,500 EUR; the notice is final.
Anyone investing in German issuers needs automated threshold monitoring with clear responsibility for the four-day deadline.
Threshold monitoring and notification deadlines for shareholdings
- Authority / court
- Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
- Area of law
- Capital markets and financial supervision · Disclosure and reporting obligations
- Legal basis
- § 33 Abs. 1 Satz 1 WpHG
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Published
- 22 Jul 2026
- Brown Capital Management LLC: BaFin setzt Geldbußen fest Decision of an authority
- Bekanntmachung der BaFin zur Brown Capital Management LLC (Maßnahmenansicht mit Rechtskraftvermerk) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
8 Jul 2026 Hutchison Technologies LtdTribunal: Hutchison Technologies dismissed employee after she raised holiday pay concerns Other
An employee of the Dundee-based electrical services provider for gyms (around 140 employees) had pointed out that the technicians' holiday pay was being calculated incorrectly; a few days later her home working arrangement was withdrawn, and on 11 June 2025 she was dismissed. The Employment Tribunal upheld her claims for automatically unfair dismissal (s. 103A) and detriment (s. 47B); compensation will be decided separately.
Employers who worsen working conditions shortly after a disclosure must be able to prove a documented reason unrelated to the disclosure.
How managers handle internal reports
- Authority / court
- Employment Tribunal
- Area of law
- Whistleblower protection · Retaliation against whistleblowers
- Legal basis
- Employment Rights Act 1996, ss. 43B, 47B, 103A
- Action
- Other
- Status of proceedings
- unknown
- Sector
- Other
- Employees
- 50 to 249
- Published
- 23 Jul 2026
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
7 Jul 2026 Γενικό Νοσοκομείο Θεσσαλονίκης Γ. Γεννηματάς «Ο Άγιος Δημήτριος» (Allgemeines Krankenhaus Thessaloniki G. Gennimatas – Agios Dimitrios)Thessaloniki hospital: 25,000 EUR because surgery lists with diagnoses were online €25,000
From May to the end of August 2024, the public hospital accidentally published on its website a surgery list containing patients' telephone numbers, illnesses and planned procedures; a member of the public found the document via Google. The Hellenic Data Protection Authority imposed a total of 25,000 EUR: 10,000 EUR for inadequate security, 2,000 EUR for the late notification, 10,000 EUR for failing to notify the data subjects and 3,000 EUR for missing contact details of the data protection officer (DPO).
Every publication on the website needs an approval step that reliably intercepts documents containing health data – and after a data breach, data subjects must be informed.
Publication of documents containing health data
- Authority / court
- Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- DSGVO Art. 5 Abs. 1 lit. f, 32 Abs. 1, 33 Abs. 1, 34 Abs. 1, 12, 13 i. V. m. 37 (Entscheidung 13/2026)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Healthcare
- Επιβολή προστίμου σε νοσοκομείο (Απόφαση 13/2026) Decision of an authority
- Απόφαση 13/2026 Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
7 Jul 2026 Unternehmen mit drei Dienstfahrzeugen (in der Mitteilung nicht namentlich genannt)Administrative Court upholds ban on continuous GPS tracking of three company vehicles Order
The data protection authority had prohibited a company from tracking its three company vehicles continuously by GPS and ordered the data to be erased; narrow purposes such as theft protection while parked remained permitted. The Upravno sodišče Republike Slovenije (Administrative Court of the Republic of Slovenia) upheld this and clarified that employee consent bundled with other declarations is invalid.
Employee consent rarely supports monitoring – and never when it is bundled with other declarations in the form.
Consent and proportionality in employee monitoring
- Authority / court
- Upravno sodišče Republike Slovenije (bekanntgemacht durch den Informacijski pooblaščenec)
- Area of law
- Data protection · Employee data
- Legal basis
- Art. 6 Abs. 1 lit. f, Art. 7 Abs. 2 DSGVO
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Published
- 7 Jul 2026
- Upravno sodišče znova potrdilo prakso IP: sistematično GPS sledenje zaposlenim ni dopustno brez tehtnega razloga Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
2 Jul 2026 Banca Transilvania S.A.Employee retrieves account statements for a third party – Banca Transilvania pays 5,000 EUR €5,002
At the request of a third party and outside the scope of his duties, a bank employee retrieved account statements of a data subject (name, IBAN, transactions, balances). The Romanian data protection authority (ANSPDCP) found insufficient technical and organisational measures and imposed 26,172 lei (5,000 EUR); the bank has paid the fine. Date = publication of the press release; according to the authority, the investigation was concluded in the previous month.
Access logs and clear rules against ‘favour queries’ are a duty for every bank.
Access to customer data for business purposes only; handling requests from third parties
- Authority / court
- Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 32 Abs. 1, 2 und 4 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Published
- 2 Jul 2026
Original amount 26,172 RON, converted at the ECB reference rate of 2 Jul 2026.
- ANSPDCP – Comunicat de presă 02.07.2026 (Banca Transilvania S.A.) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
2 Jul 2026 SIA 4YOU MEBELESFurniture retailer 4YOU MEBELES ignores cookie inspection – first a reprimand, then 1,000 EUR €1,000
In a targeted inspection of cookies on company websites, the Datu valsts inspekcija (Latvian Data State Inspectorate, DVI) found fault with the site 4mebeles.lv. After a reprimand in February 2026, the company claimed that the deficiencies had been remedied, which a further inspection disproved; further requests for information went unanswered. The DVI imposed 1,000 EUR for failure to cooperate and requested the missing information by 3 August 2026.
Assurances given to the supervisory authority are checked – false statements and silence aggravate the sanction.
Cookie banners and cooperation with the supervisory authority
- Authority / court
- Datu valsts inspekcija (DVI)
- Area of law
- Data protection · Cookies and tracking
- Legal basis
- Art. 58 Abs. 1, Art. 83 Abs. 5 lit. e DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Culpability
- intentional
- Repeat case
- yes
- DVI Lēmums Par soda piemērošanu (SIA 4YOU MEBELES), 02.07.2026 Decision of an authority
- Datu valsts inspekcija – Lēmumi (Liste der veröffentlichten Entscheidungen) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
30 Jun 2026 Moody's Deutschland GmbHESMA fines Moody's Deutschland 2.1 million EUR €2.15m
The credit rating agency did not submit up-to-date rating information to the European Securities and Markets Authority (ESMA), did not provide complete historical performance data to the central repository and lacked adequate procedures and internal control mechanisms. ESMA found negligent infringements and imposed fines totalling 2,145,000 EUR.
Reporting obligations to the supervisory authority are data quality issues – without functioning internal controls, they become a risk of fines.
- Authority / court
- Europäische Wertpapier- und Marktaufsichtsbehörde (ESMA)
- Area of law
- Capital markets and financial supervision · Organisational requirements
- Legal basis
- Verordnung (EG) Nr. 1060/2009 (CRA-Verordnung), Art. 24, 36a, Anhang III
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Culpability
- negligent
- Repeat case
- yes
- Decision of the Board of Supervisors – Moody's Deutschland GmbH (ESMA43-857238790-2075) Decision of an authority
- ESMA Sanctions and Enforcement Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
30 Jun 2026 „Paysera LT“, UABPaysera: daily fine for missing annual accounts adds up to 362,000 EUR €362,000
Because Paysera did not comply with the order to submit its 2024 annual financial statements by 30 September 2025, the Lietuvos bankas (Bank of Lithuania, financial supervisor) first imposed 20,000 EUR in November 2025 and then a daily fine of 1,000 EUR (rising to 2,000 and 3,000 EUR respectively). As the infringement was only remedied after 6 May 2026, the daily fine added up to 362,000 EUR. Source: archived copy of the press release.
Running daily fines make every delay expensive – supervisory orders need top-management priority.
- Authority / court
- Lietuvos bankas (Litauische Zentralbank, Finanzaufsicht)
- Area of law
- Capital markets and financial supervision · Disclosure and reporting obligations
- Legal basis
- Aufsichtsrechtliche Anordnung und Berichtspflichten nach litauischem E-Geld-Recht
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Repeat case
- yes
- Published
- 30 Jun 2026
- Lietuvos bankas, Pranešimas 2026-06-30 (Archivkopie web.archive.org von lb.lt) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
26 Jun 2026 Banque Degroof Petercam SABanque Degroof Petercam: 1 million EUR settlement over hidden costs in employee stock options €1m
In stock option plans for employees of client companies (2018–2023), the bank did not fully inform the beneficiaries about costs, had initially not recorded the conflicts of interest in this business and assessed clients’ knowledge only with a yes/no question. The Autorité des services et marchés financiers (Belgian Financial Services and Markets Authority, FSMA) accepted a settlement of 1 million EUR with publication by name and commitments on cost information.
Full cost transparency and a dedicated conflicts register also apply to ancillary business such as employee stock option plans.
- Authority / court
- Autorité des services et marchés financiers (FSMA)
- Area of law
- Capital markets and financial supervision · Organisational requirements
- Legal basis
- Loi du 2 août 2002; Wohlverhaltensregeln (Loyalität, Kostentransparenz, bestmögliche Ausführung, Interessenkonflikte, Kundenkenntnis)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Repeat case
- yes
- Mitigating circumstances
- Remediation of all deficiencies (appropriateness test, conflicts policy, cost disclosure, waiver of CVA/KVA discounts).
- Published
- 26 Jun 2026
- FSMA – Règlement transactionnel Banque Degroof Petercam (26.06.2026) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
26 Jun 2026 Neonet S.A.Neonet: 3 million PLN over false delivery and availability information on Allegro €709,854
On its Allegro account, the electronics retailer promised dispatch within 24 hours even for goods not in stock and did not inform customers in good time of delays or unavailability. UOKiK imposed a fine of 3,043,000 PLN; the decision is not final.
Link delivery and availability information to stock levels; in the event of delays, inform customers immediately.
Availability and delivery information on marketplaces
- Authority / court
- Urząd Ochrony Konkurencji i Konsumentów (UOKiK)
- Area of law
- Consumer protection and online retail · Information duties in online retail
- Legal basis
- Verletzung kollektiver Verbraucherinteressen
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Published
- 26 Jun 2026
Original amount 3,043,000 PLN, converted at the ECB reference rate of 26 Jun 2026.
- Empty promises from Neonet – decision by the President of UOKiK Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
25 Jun 2026 Самостоятелна медико-диагностична лаборатория „Лина“ ЕООДLaboratory Lina lures customers with free blood tests – 52,097 EUR for unfair competition €52,097
On application by its competitor Ramus, the Комисия за защита на конкуренцията (Bulgarian Commission for the Protection of Competition, KZK) established that the laboratory had offered packages of medical laboratory tests free of charge nationwide over extended periods (only against a fee of 2 leva for taking blood) – conduct shown by no other market participant outside joint campaigns. It found an infringement of the general clause of unfair competition law (Art. 29 ZZK – Bulgarian Protection of Competition Act) and imposed 0.3% of 2024 turnover, i.e. 52,096.55 EUR. Appeals have been lodged against the decision.
Permanent free offers to win customers can be unfair if they deviate significantly from market practice and drive out competitors.
- Authority / court
- Комисия за защита на конкуренцията (КЗК, Bulgarische Wettbewerbskommission)
- Area of law
- Competition law
- Legal basis
- Art. 29 ZZK (Generalklausel unlauterer Wettbewerb)
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Healthcare
- Published
- 2 Jul 2026
- КЗК Публичен електронен регистър – Производство (Решение № 591 от 25.06.2026; Volltext als PDF im Register) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
25 Jun 2026 TotalEnergiesParis Judicial Court: TotalEnergies must include Scope 3 emissions in vigilance plan Order
In an action brought by Notre Affaire à Tous, Sherpa, ZEA, France Nature Environnement and the City of Paris, the Paris Judicial Court (Tribunal judiciaire de Paris, 34th chamber) ruled that climate risks fall under the French duty of vigilance law and that Scope 3 emissions are part of the oil and gas group's activities. The vigilance plan without Scope 3 is incomplete, the court held; TotalEnergies must supplement it within six months, with provisional enforceability, and implementation will be reviewed by the court in January 2027.
Risk analyses under due diligence laws must also cover the climate impact of the products sold (Scope 3).
- Authority / court
- Tribunal judiciaire de Paris (34. Kammer)
- Area of law
- Supply chain and human rights · Supply chain due diligence
- Legal basis
- Art. L.225-102-1 und L.225-102-2 Code de commerce (Loi n° 2017-399, devoir de vigilance); Art. 1252 Code civil
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Energy and utilities
- Employees
- 10,000 or more
- Published
- 25 Jun 2026
- Communiqué de presse – Jugement du 25 juin 2026, 34ème chambre Court press release
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
24 Jun 2026 Ö Aktiengesellschaft (in der Entscheidung abgekürzt; Adressverlag und Direktwerbeunternehmen)VwGH sets data protection fine for party affinities definitively at 13 million EUR €13m
The company had stored statistically calculated ‘party affinities’ for around 2.2 million people and in some cases sold them to advertising clients – special categories of personal data without consent; in addition, parcel frequency data was further processed for incompatible purposes. The Austrian Data Protection Authority (Datenschutzbehörde, DSB) had imposed 18 million EUR in 2019 and the Federal Administrative Court (Bundesverwaltungsgericht, BVwG) 16 million EUR in 2024; Austria's Supreme Administrative Court (Verwaltungsgerichtshof, VwGH) has now set the fine with final effect at 13 million EUR (plus 100,000 EUR in procedural costs).
Calculated characteristics such as political leanings are themselves special categories – companies that derive them for advertising need explicit consent.
- Authority / court
- Verwaltungsgerichtshof (Ausgangsbescheid: Datenschutzbehörde)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- DSGVO Art. 5 Abs. 1 lit. a und b, Art. 6 Abs. 4, Art. 9 Abs. 1 (VwGH Ro 2025/04/0007)
- Action
- Fine
- Status of proceedings
- reduced
- Sector
- Other
- Culpability
- negligent
- Mitigating circumstances
- Comprehensive cooperation, deletion of the party affinities, settlements with data subjects, long duration of proceedings (5 years, 10 months).
- Published
- 16 Jul 2026
- VwGH 24.06.2026, Ro 2025/04/0007 Court decision
- VwGH bestätigt unrechtmäßige Verarbeitung von Partei-Affinitäten und setzt Geldbuße mit EUR 13 Mio. fest Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
24 Jun 2026 Kaufland Hrvatska k.d.Croatia: 300,000 EUR against Kaufland for unfair practices towards suppliers €300,000
The Agencija za zaštitu tržišnog natjecanja (Croatian Competition Agency, AZTN) found that Kaufland Hrvatska charged food suppliers fees for services not provided and for advertising not commissioned, and paid for perishable goods only after more than 30 days. For these unfair trading practices, and with repeat offending as an aggravating factor (final penalty already in 2020), it imposed 300,000 EUR (date = publication).
Purchasing departments must know the payment deadlines and fee prohibitions of UTP law – repeat offences become significantly more expensive.
Fair terms towards suppliers in purchasing
- Authority / court
- Agencija za zaštitu tržišnog natjecanja (AZTN)
- Area of law
- Competition law · Abuse of market power
- Legal basis
- Art. 4, 11, 12 Zakon o zabrani nepoštenih trgovačkih praksi u lancu opskrbe hranom (ZNTP)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Repeat case
- yes
- Published
- 24 Jun 2026
- AZTN kaznio KAUFLAND HRVATSKA k.d., Zagreb s 300.000,00 eura zbog nametanja nepoštenih trgovačkih praksi Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
24 Jun 2026 Meta Platforms Ireland LimitedMeta: infringement of the P2B Regulation after fashion retailer’s Facebook page was hacked Order
After the Facebook page of the Danish fashion retailer Clothing By Ros ApS was hacked in 2023, Meta failed to respond appropriately for almost two years, gave no reasons for the de facto suspension and offered no effective complaint-handling procedure. The Konkurrencerådet (Danish Competition Council) found infringements of the P2B Regulation and ordered Meta to comply with the rules on statements of reasons and complaint handling in future.
Platform operators must give reasons for suspending business users and handle complaints promptly – silence counts as a decision in its own right.
- Authority / court
- Konkurrencerådet (Danish Competition Council)
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Verordnung (EU) 2019/1150 (P2B) Art. 4, Art. 11
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Media and online platforms
- Employees
- 10,000 or more
- Published
- 24 Jun 2026
- KFST – The Competition Council rules against Meta (24.06.2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Jun 2026 Deghi S.p.A.Deghi: 2 million EUR for endlessly renewing countdown discounts €2m
From January 2024 to December 2025, the online retailer advertised time-limited discounts with countdown timers which, once they had expired, restarted with a new timer on identical terms. The AGCM classified this artificial scarcity as a particularly insidious dark pattern and imposed a fine of 2 million EUR.
A countdown must genuinely expire – an automatically restarting timer creates misleading scarcity.
False urgency and countdown timers in online marketing
- Authority / court
- Autorità Garante della Concorrenza e del Mercato (AGCM)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Codice del Consumo (pratiche commerciali scorrette)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Published
- 25 Jun 2026
- PS13027 - E-commerce, sanzione di 2 milioni di euro a Deghi S.p.A. per pratica commerciale scorretta Press release of an authority
- AGCM Provvedimento PS13027 (Deghi S.p.A.), adunanza del 23 giugno 2026 Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Jun 2026 TICKETBIS S.L. (StubHub UK)StubHub UK: 889,200 GBP penalty over mandatory fees added later €1.03m
The ticket exchange did not include mandatory fees in the total price at the start of the purchasing process. By way of a final infringement notice, the CMA imposed a penalty of 889,200 GBP (including a 40 % settlement discount) and required the company to refund the mandatory fees.
Ticket marketplaces must also show the total price including mandatory fees from the outset.
- Authority / court
- Competition and Markets Authority (CMA)
- Area of law
- Consumer protection and online retail · Misleading advertising and pricing
- Legal basis
- Digital Markets, Competition and Consumers Act 2024
- Action
- Fine
- Status of proceedings
- final
- Sector
- Media and online platforms
- Mitigating circumstances
- Settlement with a 40 % discount and waiver of appeal.
- Published
- 23 Jun 2026
Original amount 889,200 GBP, converted at the ECB reference rate of 23 Jun 2026.
- StubHub UK: consumer protection enforcement case Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Jun 2026 VARTA AGVARTA: late ad hoc announcement and missing half-yearly financial report €620,000
BaFin imposed fines on the battery manufacturer because it had not disclosed inside information without delay and had not published the half-yearly financial report for the 2024 financial year.
Ad hoc assessments and periodic disclosure require fixed responsibilities and deadline controls so that neither inside information nor mandatory reports are left pending.
- Authority / court
- Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
- Area of law
- Capital markets and financial supervision · Disclosure and reporting obligations
- Legal basis
- Art. 17 Abs. 1 UAbs. 1 MAR; § 115 Abs. 1 Satz 1 WpHG
- Action
- Fine
- Status of proceedings
- final
- Sector
- Manufacturing and mechanical engineering
- Published
- 1 Jul 2026
- VARTA AG: BaFin setzt Geldbußen fest Decision of an authority
- Bekanntmachung der BaFin zur VARTA AG (Maßnahmenansicht mit Rechtskraftvermerk) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Jun 2026 Banca Popolare Commerciale SpaBanca d'Italia: 40,000 EUR against Banca Popolare Commerciale over AML deficiencies €40,000
Following an on-site inspection from February to April 2025, the Bank of Italy (Banca d'Italia) found deficiencies in customer due diligence, active cooperation (suspicious transaction reporting) and anti-money laundering controls, and imposed an administrative fine of 40,000 EUR. The duration of the deficiencies and the corrective measures initiated were taken into account.
Gaps in customer due diligence and suspicious transaction reporting are consistently sanctioned after on-site inspections, even with smaller amounts – corrective measures reduce the sanction but do not replace it.
Customer due diligence and suspicious transaction reports
- Authority / court
- Banca d'Italia
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- Art. 62 d.lgs. 231/2007; Verstöße gegen Art. 7, 16–19, 24, 25, 35, 36 d.lgs. 231/2007
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Mitigating circumstances
- Corrective measures initiated
- Banca Popolare Commerciale Spa – Provvedimento n. 190 del 23 giugno 2026 (AML) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Jun 2026 Needle Craft Ltd.; Casual Wear Apparel LLCCBP import stop for textiles from Jordan's Needle Craft and Casual Wear Apparel Order
U.S. Customs and Border Protection (CBP) issued a Withhold Release Order: clothing from Needle Craft Ltd.; Casual Wear Apparel LLC (Jordan) is being detained at all US ports of entry because there are indications of forced labour (ILO indicators including physical and sexual violence, retention of identity documents, restriction of movement and withholding of wages). These are two parallel orders against both manufacturers.
Fashion brands should supplement social audits at garment makers with confidential worker interviews, because violence and confiscation of identity documents remain invisible in paper-based checks.
- Authority / court
- U.S. Customs and Border Protection
- Area of law
- Supply chain and human rights · Forced and child labour
- Legal basis
- 19 U.S.C. § 1307 (Tariff Act of 1930, Section 307)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 23 Jun 2026
- CBP issues 2 Withhold Release Orders on Needle Craft and Casual Wear Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 Jun 2026 Inkasso-Team AGFederal Administrative Court upholds FDPIC: Inkasso-Team was not allowed to publish debtor data Order
The debt collection company posted personal data of alleged debtors on the internet, some of it particularly sensitive, in order to obtain information on their whereabouts and to warn third parties. The Swiss Federal Administrative Court (Bundesverwaltungsgericht, A-3891/2025) upheld the ruling of the Federal Data Protection and Information Commissioner (EDÖB) of 28 April 2025, according to which this constitutes an unjustified violation of privacy.
Publicly naming and shaming debtors cannot be justified under data protection law – debt collection must use less intrusive means.
- Authority / court
- Bundesverwaltungsgericht (A-3891/2025) auf Verfügung des EDÖB vom 28.04.2025
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- DSG Art. 6, Art. 19, Art. 31
- Action
- Order
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Published
- 20 Aug 2026
- Bundesverwaltungsgericht bestätigt Entscheid des EDÖB Press release of an authority
- Urteil des Bundesverwaltungsgerichts A-3891/2025 vom 22. Juni 2026 Court decision
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
19 Jun 2026 CACEIS Bank (UK Branch)FCA: public censure for CACEIS UK over deficient checks on a custody client Reprimand or warning
The UK Financial Conduct Authority (FCA) issued a public censure because the London branch opened and operated accounts for the wealth manager WealthTek, although its own register searches showed that it lacked permissions to hold client assets, and overlooked a restriction noted in the register; 16 monitoring alerts were not worked through over two years, and more than £314 million flowed through the accounts. In view of cooperation and a voluntary payment of £31.7 million to WealthTek clients, the FCA refrained from imposing a fine (otherwise £23.1 million after discount).
Anyone who notices a discrepancy in the register must clarify and document it before accounts are activated.
Register checks and follow-up on identified KYC gaps
- Authority / court
- Financial Conduct Authority (FCA)
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- Section 205 FSMA (Public Censure) wegen Verstoßes gegen FCA Principle 2; Maßstab u. a. SYSC 6.1.1R, 6.3.1R, 6.3.3R und Regulations 18, 27, 28 MLR 2017
- Action
- Reprimand or warning
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Mitigating circumstances
- Cooperation, acknowledgement of the deficiencies and a voluntary payment of £31,714,068 to those harmed
- Published
- 25 Jun 2026
- Final Notice 2026: CACEIS Bank (UK Branch) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
18 Jun 2026 LOGZONE Inc.LOGZONE pays 507,144 USD over lack of cybersecurity in Navy contracts €442,495
The Huntsville-based defence services provider allegedly invoiced two Navy contracts from May 2021 to March 2025 even though it had not implemented the security controls under NIST SP 800-171 required by the contracts. The settlement under the False Claims Act with the U.S. Department of Justice amounts to 507,144 USD.
Companies that commit to cybersecurity requirements in government contracts must document their implementation verifiably – otherwise every invoice becomes a liability risk.
- Authority / court
- U.S. Department of Justice (Civil Division) / USAO Northern District of Alabama
- Area of law
- Other
- Legal basis
- False Claims Act (31 U.S.C. §§ 3729 ff.); DFARS-Cybersicherheitsklauseln
- Action
- Other
- Status of proceedings
- final
- Sector
- Defence and security
- Published
- 18 Jun 2026
Original amount 507,144 USD, converted at the ECB reference rate of 18 Jun 2026.
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
18 Jun 2026 Ideal Supply Inc.Ladder fall in warehouse: industrial supplies distributor pays CA$70,000 €43,239
At the warehouse and distribution centre in Listowel (around 130 employees at the site), a worker fell around 1.2 m while climbing down a ladder at high-bay racking. He had not been adequately informed, instructed and supervised on the safe use of ladders. Fine of CA$70,000 plus victim fine surcharge.
Even everyday tasks such as working from ladders at racking require documented instruction – otherwise there is no evidence whatsoever if an incident occurs.
Safe use of ladders in the warehouse
Missing or inadequate training played a role in the decision.
- Authority / court
- Provincial Offences Court Stratford (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Sections 25(2)(a), 66(1) Occupational Health and Safety Act (Ontario)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Retail and e-commerce
- Mitigating circumstances
- Guilty plea.
- Published
- 8 Jul 2026
Original amount 70,000 CAD, converted at the ECB reference rate of 18 Jun 2026.
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
18 Jun 2026 St. Joseph's Healthcare HamiltonHamilton hospital: CA$65,000 after injury caused by known centrifuge defect €40,151
In the teaching hospital's virology laboratory, the lid of a centrifuge fell on an employee who had to hold it open by hand because of a defective gas spring; she was seriously injured. Maintenance reports from 2023 and 2024 had already called for the spring to be replaced. Fine of CA$65,000 plus victim fine surcharge.
A defect documented in maintenance reports that is not remedied makes every subsequent accident foreseeable – defective equipment must be taken out of use.
Reporting defective equipment and taking it out of service
- Authority / court
- Provincial Offences Court Hamilton (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Section 25(1)(b) Occupational Health and Safety Act (Ontario)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Healthcare
- Mitigating circumstances
- Guilty plea; repair two days after the accident.
- Published
- 21 Jul 2026
Original amount 65,000 CAD, converted at the ECB reference rate of 18 Jun 2026.
- St. Joseph's Healthcare Hamilton Fined $65,000 for Workplace Injury (Ontario Newsroom, Court Bulletin) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
17 Jun 2026 Advanced Pathology Solutions PLLC und APS MSO LLCAdvanced Pathology Solutions: 30 million USD for kickbacks and unnecessary laboratory tests €25.9m
The Arkansas pathology laboratory, its management company and the owners Kevin Hannah, Donell Burkett and Daniel Hunter Pledger allegedly granted unlawful kickbacks and ordered medically unnecessary tests. Together they paid 30 million USD; the laboratory entered into a Corporate Integrity Agreement.
Where services are sold through referrals, all benefits to referrers belong in a central approval and review procedure.
Benefits to clients in healthcare
- Authority / court
- U.S. Department of Justice
- Area of law
- Bribery and corruption · Commercial bribery
- Legal basis
- Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
- Action
- Other
- Status of proceedings
- final
- Sector
- Healthcare
- Liability of senior managers
- The owners contribute personally as parties to the settlement.
Original amount 30,000,000 USD, converted at the ECB reference rate of 17 Jun 2026.
- HHS-OIG Enforcement Actions: Arkansas Pathology Laboratory and Its Owners Pay $30M … (17.06.2026) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
17 Jun 2026 Ikano Bank ABIkano Bank: 140 million SEK over deficiencies in money laundering risk assessment and customer due diligence €12.9m
For the period April 2022 to May 2023, the Swedish financial supervisory authority Finansinspektionen (FI) found that the bank’s general risk assessment did not realistically assess the terrorist financing risks of its corporate products and that no enhanced due diligence measures were taken for high-risk corporate customers. FI issued a remark and imposed 140 million SEK; the bank has brought an action before the administrative court.
The money laundering risk assessment must reflect the actual customers and products – a generic assessment leaves the entire customer due diligence open to challenge.
Enhanced due diligence for high-risk customers
- Authority / court
- Finansinspektionen (FI)
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- Penningtvättslagen (2017:630)
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Financial services and insurance
- Published
- 17 Jun 2026
Original amount 140,000,000 SEK, converted at the ECB reference rate of 17 Jun 2026.
- FI ger Ikano Bank en anmärkning och en sanktionsavgift (17.06.2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Jun 2026 Robert Bosch GmbHBosch pays 36 million USD for sensor supplies to Huawei €31.2m
Between September 2020 and September 2024, Bosch exported MEMS sensors and vehicle software worth around 72.4 million USD from outside the US without a licence to Huawei and affiliated companies on the Entity List (Foreign Direct Product Rule). Bosch voluntarily disclosed the violations; around 3.6 million USD of the penalty imposed by the US Commerce Department's Bureau of Industry and Security (BIS) is credited against a disgorgement agreed with the DOJ.
Even products manufactured outside the US can be subject to US export controls via US technology – supplies to Entity List customers need their own review.
US export law for foreign-made products (Foreign Direct Product Rule)
- Authority / court
- U.S. Department of Commerce, Bureau of Industry and Security (BIS)
- Area of law
- Sanctions and export control · Export control and dual-use goods
- Legal basis
- Export Administration Regulations (Foreign Direct Product Rule, Entity List)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Automotive
- Employees
- 10,000 or more
- Mitigating circumstances
- Voluntary self-disclosure and cooperation
- Published
- 17 Jun 2026
Original amount 36,184,680 USD, converted at the ECB reference rate of 16 Jun 2026.
- BIS: Robert Bosch GmbH (Bosch) to Pay $36 Million Penalty for BIS Violations Pertaining to Shipments to Huawei (17.06.2026) Press release of an authority
- BIS Order Relating to Robert Bosch GmbH (16.06.2026) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Jun 2026 Samson Containers LtdContainer manufacturer ignores notices on welding fume and hearing protection – £30,000 €34,694
Despite improvement notices from September 2024 and February 2025, the manufacturer of skips and metal containers failed to implement any measures against carcinogenic welding fume (mild steel) – with neither extraction nor respiratory protection; in addition, there was no health surveillance for hearing for employees exposed to noise. Fine of £30,000 plus costs.
Regulatory orders on hazardous substances have deadlines – companies that let them lapse will be prosecuted regardless of whether an accident occurs.
- Authority / court
- Warrington Magistrates' Court (Anklage: Health and Safety Executive)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Section 33(1)(g) Health and Safety at Work etc. Act 1974 (Nichtbefolgung von Improvement Notices)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Steel and metals
- Repeat case
- yes
- Published
- 18 Jun 2026
Original amount 30,000 GBP, converted at the ECB reference rate of 16 Jun 2026.
- Skip manufacturer fined £30,000 after failing to protect workers from carcinogenic fumes (HSE) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Jun 2026 Serbia Zijin Copper D.O.O.CBP import stop for copper from Serbia Zijin Copper over forced labour indicators Order
U.S. Customs and Border Protection (CBP) issued a Withhold Release Order: copper and copper products from Serbia Zijin Copper D.O.O. (Serbia) are being detained at all US ports of entry because there are indications of forced labour (ILO indicators including withholding of wages, intimidation, restriction of movement and retention of identity documents).
Production in Europe is no free pass either: raw material and metal supply chains need their own forced labour checks.
- Authority / court
- U.S. Customs and Border Protection
- Area of law
- Supply chain and human rights · Forced and child labour
- Legal basis
- 19 U.S.C. § 1307 (Tariff Act of 1930, Section 307)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Steel and metals
- Published
- 16 Jun 2026
- CBP issues Withhold Release Order on Serbia Zijin Copper D.O.O. Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Jun 2026 Securitas Sverige AktiebolagSecuritas Sverige: reprimand over cameras in company vehicles without legal basis Reprimand or warning
The security services provider used cameras in vehicles through which personal data was processed without any legal basis for doing so. The Swedish data protection authority (Integritetsskyddsmyndigheten, IMY) issued a reprimand under Art. 58 GDPR; no fine was imposed.
Dashcams in company cars also need a verified legal basis and a balancing against the interests of employees and passers-by.
Use of cameras in vehicles
- Authority / court
- Integritetsskyddsmyndigheten (IMY)
- Area of law
- Data protection · Video surveillance
- Legal basis
- DSGVO Art. 6 Abs. 1
- Action
- Reprimand or warning
- Status of proceedings
- final
- Sector
- Defence and security
- IMY – Tillsyn Securitas Sverige Aktiebolag Decision of an authority
- IMY – Beslut Securitas Sverige AB Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
15 Jun 2026 SSG SELECT SOLUTIONS S.R.L.Stranger in Kaufland CCTV room – service provider SSG Select Solutions pays 2,000 EUR €1,948
An employee of the service provider acting as processor for Kaufland România let a third party into a store’s video surveillance room; that person filmed the images and distributed them on social media. Kaufland reported the incident. The Romanian data protection authority (ANSPDCP) imposed 10,200 lei (2,000 EUR) on the processor and ordered additional checks of the work instructions; the fine has been paid. Date = publication of the press release; according to the authority, the investigation was concluded in April 2026.
Anyone with access to surveillance rooms must know: video footage is confidential, and third parties have no access there.
Access to surveillance rooms; staff bound by instructions
- Authority / court
- Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- Area of law
- Data protection · Video surveillance
- Legal basis
- Art. 29, Art. 32 Abs. 1 lit. b, Abs. 2 und 4 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 15 Jun 2026
Original amount 10,200 RON, converted at the ECB reference rate of 15 Jun 2026.
- ANSPDCP – Comunicat de presă 15.06.2026 (SSG SELECT SOLUTIONS S.R.L.) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
12 Jun 2026 Verkkokauppa.com OyjKHO confirms fine against Verkkokauppa.com over customer accounts without time limit €792,639
The online retailer had not set a retention period for customer accounts and kept data until customers requested deletion; purchases were only possible with an account. The sanctions board of the Finnish Data Protection Ombudsman imposed 856,000 EUR in 2024, the administrative court reduced the fine to 792,639 EUR on the basis of current turnover, and the Supreme Administrative Court (Korkein hallinto-oikeus, KHO) confirmed this on 12 June 2026.
Do not leave deletion to the customer – every online shop needs defined retention periods for accounts and order data.
- Authority / court
- Korkein hallinto-oikeus (KHO); Sanktionsgremium des Datenschutzbeauftragten
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- Art. 5 Abs. 1 lit. e DSGVO
- Action
- Fine
- Status of proceedings
- reduced
- Sector
- Retail and e-commerce
- Published
- 18 Jun 2026
- Supreme Administrative Court upholds the administrative fine imposed on Verkkokauppa.com Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
12 Jun 2026 Μάρκετ Ιν ΑΕΒΕ (Market In)Greece: 95,000 EUR against supermarket chain Market In over video footage €95,000
A data subject complained about the disclosure of footage from the supermarket chain’s video surveillance and about the inadequate response to his access request. The Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority) found that Market In had passed the video footage to the judicial authorities without informing the data subject beforehand, processed more data than necessary, failed to comply with the right of access and failed to cooperate with the authority, and by Decision 10/2026 imposed a total of 95,000 EUR (50,000 EUR for lawfulness/transparency, 20,000 EUR each for data minimisation and the right of access, 5,000 EUR for failure to cooperate); in the same proceedings, ΜΕΔΕ ΑΕ received 65,000 EUR.
Release video footage only for a specific purpose – and anyone ignoring requests from the supervisory authority pays extra.
Handling video footage and access requests
- Authority / court
- Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority)
- Area of law
- Data protection · Video surveillance
- Legal basis
- Art. 5 Abs. 1 lit. a, c, Art. 5 Abs. 2, Art. 12, 13, 15, 31 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Απόφαση 10/2026 της Αρχής Προστασίας Δεδομένων Προσωπικού Χαρακτήρα Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
9 Jun 2026 Deutsche Wohnen SELG Berlin I confirms GDPR infringement by Deutsche Wohnen through tenant archive without deletion function Fine
In 2019, the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI) had imposed 14.5 million EUR on the housing group because tenant data such as salary statements, bank statements and social security data were held in an archive system with no means of deletion. Following the 2023 CJEU judgment on direct corporate liability, the Berlin Regional Court (Landgericht Berlin I) confirmed on 9 June 2026 infringements of data minimisation and storage limitation; the press release does not state the amount of the fine set by the court.
Ensure that archive and filing systems can technically implement deletion periods from the outset – ‘privacy by design’ is subject to fines.
- Authority / court
- Landgericht Berlin I (Bußgeldbehörde: Berliner Beauftragte für Datenschutz und Informationsfreiheit)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 5, Art. 25 Abs. 1 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Construction and real estate
- Liability of senior managers
- According to the CJEU (C-807/21), a breach of duty by a person in a management position need not be proven for the corporate fine.
- Published
- 10 Jun 2026
- Landgericht Berlin bestätigt Verstoß der Deutsche Wohnen SE gegen die DSGVO Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
8 Jun 2026 A. Tsokkos Hotels Public LimitedCyprus: 16,500 EUR against A. Tsokkos Hotels for late annual financial report €16,500
The listed hotel group did not publish its 2024 annual financial report on time; the Cyprus Securities and Exchange Commission (CySEC) imposed a total of 16,500 EUR. At the same meeting, eleven other issuers were fined between 1,500 and 17,000 EUR for the same reason; a fine of 13,500 EUR had already been imposed on the company under the same law in 2025.
Publication deadlines for financial reports are not negotiable – repeated delays lead to fines and, in extreme cases, to suspension of trading.
- Authority / court
- Cyprus Securities and Exchange Commission (CySEC)
- Area of law
- Capital markets and financial supervision · Disclosure and reporting obligations
- Legal basis
- Sec. 9(1), 37(2)(a) Transparency Requirements (Securities Admitted to Trading on a Regulated Market) Law 2007
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Repeat case
- yes
- Published
- 7 Aug 2026
- CySEC Board Decision – Fines under the Transparency Requirements Law (08.06.2026) Decision of an authority
- CySEC Board Decision – Fines under the Transparency Requirements Law (14.07.2025, Jahresbericht 2023) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
5 Jun 2026 Portugal: 8.18 million EUR against three companies over advertising in TV recordings €8.18m
With the support of a consultancy, the three largest pay-TV providers agreed from 2019 to May 2025 to introduce advertising as a condition for accessing recordings and to standardise the marketing of this advertising space. The Autoridade da Concorrência (Portuguese Competition Authority, AdC) imposed 8,181,000 EUR on three companies; together with the fourth participant, already sanctioned earlier under a settlement, the fines add up to 13,351,000 EUR. Owing to ongoing court proceedings, the AdC did not publish the names in its announcement.
Jointly coordinated ‘industry solutions’ at customers’ expense are cartels – even when a service provider takes on the coordination.
Coordinated product changes among competitors
- Authority / court
- Autoridade da Concorrência (AdC)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Lei da Concorrência (Lei n.º 19/2012), Art. 9.º (Processo PRC/2020/4)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Published
- 5 Jun 2026
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
5 Jun 2026 Εταιρεία Προμήθειας Αερίου Θεσσαλονίκης Θεσσαλίας Α.Ε. („ZeniΘ“) und Τράπεζα Πειραιώς Α.Ε. (Piraeus Bank)Greece: 110,000 EUR against energy supplier ZENITH and Piraeus Bank (right of access) €110,000
Due to errors by a processor of the energy supplier, incorrect details of a direct debit mandate were recorded, so that three bills instead of one were debited from the customer's account; call recordings and the mandate form had not been retained. ZENITH responded inadequately to the access request and did not correct the data (100,000 EUR), while Piraeus Bank infringed the right of access (10,000 EUR and a reprimand); Decision No. 8/2026 of the Hellenic Data Protection Authority.
Answer access requests in full and retain records of mandates – this also applies to data recorded by a service provider.
- Authority / court
- Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic DPA)
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- Art. 5 Abs. 1 lit. d, Art. 12 Abs. 3, Art. 15, Art. 28 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Energy and utilities
- Επιβολή προστίμου σε πάροχο ηλεκτρικής ενέργειας και σε τράπεζα για παραβάσεις του ΓΚΠΔ (Απόφαση 8/2026) Decision of an authority
- Αρχή Προστασίας Δεδομένων – Απόφαση 8/2026 Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
5 Jun 2026 Illuminate Education Inc.FTC: final order against education software provider Illuminate after data leak affecting 10.1 million students Order
According to the complaint by the US Federal Trade Commission (FTC), Illuminate promised schools data security but did not adequately protect its cloud databases, even though a service provider had pointed out vulnerabilities almost two years earlier; a hacker accessed data on 10.1 million students, including health information. The order requires an information security programme, data minimisation and a public deletion schedule, and prohibits misrepresentations about security and notification deadlines.
Do not leave known vulnerabilities unaddressed for years – security promises to customers are measured as binding commitments.
- Authority / court
- Federal Trade Commission (FTC)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- FTC Act (Verbot unlauterer und irreführender Praktiken)
- Action
- Order
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Culpability
- negligent
- Published
- 5 Jun 2026
- FTC Gives Final Approval to Order Against Illuminate Settling Allegations It Failed to Secure Students' Personal Data Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
3 Jun 2026 VF Hellas Ενδυμάτων Ε.Π.Ε. (VF Hellas, Tochter der VF Corporation)Greece: 954,485 EUR against VF Hellas for banning price comparison and Google Ads €954,485
The importer and wholesaler of the Vans, Eastpak and The North Face brands contractually prohibited its retailers from using price comparison portals and search engine advertising (in particular Google Ads). The Επιτροπή Ανταγωνισμού (Hellenic Competition Commission) regarded this as a hardcore restriction in online sales and, in a settlement procedure (Decision 913/2026), set a reduced fine of 954,485 EUR; date = press release.
Prohibiting retailers from using price comparison sites or search engine advertising is a hardcore restriction – distribution agreements should regularly undergo competition law review.
Competition-law-compliant design of dealer agreements in online sales
- Authority / court
- Επιτροπή Ανταγωνισμού (Hellenic Competition Commission)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Art. 1 Gesetz 3959/2011; Art. 101 AEUV; Art. 4 lit. e VO (EU) 2022/720
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Mitigating circumstances
- Settlement procedure (Diettheti Diaforon) with fine reduction
- Published
- 3 Jun 2026
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
3 Jun 2026 Sonus Public Relations LtdTribunal: PR agency Sonus must pay £71,052 after subjecting whistleblower to detriment €82,264
The PR agency, which did not appear, lost on all claims: detriment on grounds of whistleblowing (£20,000 for injury to feelings), wrongful termination without notice pay (£3,547.60) and constructive unfair dismissal (basic and compensatory award including a 25 % ACAS uplift). A total of £71,051.82 was awarded.
Employers who do not take part in the proceedings risk, in addition to whistleblower compensation, an uplift for failing to follow the ACAS Code of Practice.
How managers handle internal reports
- Authority / court
- Employment Tribunal
- Area of law
- Whistleblower protection · Retaliation against whistleblowers
- Legal basis
- Employment Rights Act 1996, s. 47B (Benachteiligung wegen geschützter Offenlegung); konstruktive unfaire Kündigung; wrongful dismissal
- Action
- Other
- Status of proceedings
- unknown
- Sector
- Other
- Published
- 22 Jul 2026
Original amount 71,051.82 GBP, converted at the ECB reference rate of 3 Jun 2026.
- R Ashwell v Sonus Public Relations Ltd: 2404668/2024 Court decision
- R Ashwell v Sonus Public Relations Ltd: 2404668/2024 – Urteil (PDF) Court decision
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
2 Jun 2026 Ascension Health Alliance; AmSurg LLC / Ambulatory Topco LLCAscension/AmSurg: seven ambulatory surgery centres must be sold Order
The non-profit hospital group Ascension wanted to acquire AmSurg for 3.9 billion USD. Owing to overlaps in outpatient surgery in five regions, the Federal Trade Commission (FTC) requires the sale of seven AmSurg centres to SC Affiliates and a gastroenterology practice, as well as transitional support.
Non-profit healthcare providers are also subject to merger control – regional market shares determine divestitures.
- Authority / court
- Federal Trade Commission (FTC)
- Area of law
- Competition law · Merger control
- Legal basis
- Section 7 Clayton Act; Section 5 FTC Act (Consent Order)
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Healthcare
- Employees
- 10,000 or more
- FTC Requires Divestiture of Ambulatory Surgery Centers … Ascension Health-AmSurg Deal (02.06.2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
28 May 2026 TemuDSA: 200 million EUR against Temu over deficient risk assessment of illegal products €200m
Temu's 2024 risk assessment was based on general industry data rather than on findings about its own service and underestimated how often EU consumers encounter illegal products; test purchases revealed unsafe chargers and baby toys. The European Commission imposed 200 million EUR under the Digital Services Act (DSA) and required an action plan by 28 August 2026.
Risk assessments must be based on the company's own, service-specific evidence – generic industry analyses are not sufficient.
- Authority / court
- Europäische Kommission
- Area of law
- AI and digital regulation · Platform obligations
- Legal basis
- Verordnung (EU) 2022/2065 (DSA), Risikobewertungspflichten sehr großer Online-Plattformen; Art. 75
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Retail and e-commerce
- Published
- 28 May 2026
- Commission fines Temu €200 million for breaching the Digital Services Act Press release of an authority
- IP/26/1178 Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
27 May 2026 Soltec Power Holdings, SASoltec: incorrect 2023 annual figures reported to the market €190,000
The manufacturer of solar tracking systems disseminated its results for 2023 by way of an "Otra Información Relevante" announcement containing inaccurate information. Spain's National Securities Market Commission (CNMV) imposed a fine of 190,000 EUR for a serious infringement; the company waived administrative appeals.
Voluntary market announcements on results are also subject to MAR – figures must be reconciled before publication.
- Authority / court
- Comisión Nacional del Mercado de Valores (CNMV)
- Area of law
- Capital markets and financial supervision · Disclosure and reporting obligations
- Legal basis
- Art. 297.1.e i. V. m. 297.2.d Ley 6/2023; Art. 17 i. V. m. Art. 7 MAR
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Energy and utilities
- Published
- 3 Aug 2026
- Resolución de 17 de julio de 2026 (BOE-A-2026-16923) – sanción a Soltec Power Holdings, SA Official register or notice
- CNMV – Registro público de sanciones Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
26 May 2026 Sabre Global Technologies LimitedSabre subsidiary accepted payments from designated Ural Airlines €1.16m
The provider of a travel booking system continued to provide services to Ural Airlines, designated in May 2022, requested payments of around 906,600 USD and, after the funds were frozen by the bank, looked for alternative payment routes, which HM Treasury's Office of Financial Sanctions Implementation (OFSI) regarded as circumvention. A lack of escalation during a change of roles, vacant leadership positions in legal and compliance, policies focused on US law and screening that did not flag the designation all contributed.
If an existing customer is designated, escalate this immediately; looking for alternative payment routes after the bank has frozen funds is itself a breach.
Responding to new designations of existing customers, prohibition of circumvention
- Authority / court
- HM Treasury, Office of Financial Sanctions Implementation (OFSI)
- Area of law
- Sanctions and export control · Breaches of sanctions and embargoes
- Legal basis
- Russia (Sanctions) (EU Exit) Regulations 2019, regs. 13, 14, 19
- Action
- Fine
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Mitigating circumstances
- Voluntary disclosure (31 October 2022) and full cooperation; settlement under the new settlement procedure
- Published
- 17 Jun 2026
Original amount 1,000,920.59 GBP, converted at the ECB reference rate of 26 May 2026.
- OFSI: Imposition of Monetary Penalty – Sabre Global Technologies Limited Decision of an authority
- OFSI – Enforcement of financial sanctions (Sammlung) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
26 May 2026 Mediaworks Hungary Zrt.Mediaworks Hungary: 50 million HUF for links to leaked map of party supporters €140,706
On 7 November 2025, the publisher's news portals Origo and Magyar Nemzet linked to a map, created by unknown persons, containing the names, addresses, telephone numbers, email addresses, geo-coordinates and political preferences of Tisza sympathisers; Ripost showed an image with the name of the map. The Hungarian data protection authority (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH) found intentional infringements of Art. 6 and 9 GDPR, prohibited further dissemination and imposed 50 million HUF.
Linking to leaked data is itself a separate processing operation – editorial teams need a data protection review before publication.
Handling leaked personal data in newsrooms
- Authority / court
- Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
- Area of law
- Data protection
- Legal basis
- DSGVO Art. 6 Abs. 1, Art. 9 Abs. 1, Art. 58 Abs. 2 lit. b und f (NAIH/962-10/2026)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Media and online platforms
- Culpability
- intentional
- Published
- 26 May 2026
Original amount 50,000,000 HUF, converted at the ECB reference rate of 26 May 2026.
- NAIH/962-10/2026 – Határozat (Mediaworks Hungary Zrt.) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
25 May 2026 Robomarkets LtdCyprus: Robomarkets pays 100,000 EUR under settlement over CFD sales to retail clients €100,000
For the period June 2023 to June 2024, the Cyprus Securities and Exchange Commission (CySEC) examined the investment firm’s organisational requirements, client information, appropriateness assessment and compliance with the restrictions on marketing CFDs to retail investors. The proceedings were concluded with a settlement of 100,000 EUR, which the company has already paid.
When selling CFDs to retail clients, the appropriateness assessment and product intervention rules are central points of supervisory scrutiny.
Appropriateness assessment when selling complex products
- Authority / court
- Cyprus Securities and Exchange Commission (CySEC)
- Area of law
- Capital markets and financial supervision · Organisational requirements
- Legal basis
- Art. 22(1), 25(1), 26(3) Gesetz über Wertpapierdienstleistungen 2017; Art. 42 VO (EU) 600/2014; CySEC-Richtlinie DI87-09; Art. 37(4) CySEC-Gesetz
- Action
- Other
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Published
- 24 Aug 2026
- CySEC Board Decision – Robomarkets Ltd – Settlement €100.000 Decision of an authority
- CySEC Board Decisions Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 May 2026 Streamline Shipping Agencies LimitedAberdeen port agency: £146,700 after forklift accident without traffic separation €169,756
At the Port of Aberdeen, an employee loosening a lorry curtain was struck by a reversing forklift truck and suffered multiple fractures and a degloving injury. Pedestrians and vehicles were not separated during simultaneous loading and unloading. Fine of £146,700.
Loading and manoeuvring areas need firm rules on who may be where and when if forklifts and pedestrians are working at the same time.
- Authority / court
- Aberdeen Sheriff Court (Ermittlung: Health and Safety Executive)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Regulation 17(1) Workplace (Health, Safety and Welfare) Regulations 1992; Section 33(1)(c) Health and Safety at Work etc. Act 1974
- Action
- Fine
- Status of proceedings
- final
- Sector
- Transport, logistics and shipping
- Published
- 28 May 2026
Original amount 146,700 GBP, converted at the ECB reference rate of 22 May 2026.
- Shipping company fined £146,700 after worker seriously injured by forklift truck (HSE) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 May 2026 Foot Locker, Inc.SEC: Foot Locker pays 148,000 US dollars over award waivers in separation agreements €127,641
From July 2020 to June 2024, around 148 departing employees – including managers and staff from finance, legal and supply chain – signed separation agreements containing a waiver of SEC whistleblower awards. Foot Locker had itself phased out the clause from March 2024 but had not amended all templates; the U.S. Securities and Exchange Commission (SEC) imposed 148,000 US dollars.
When cleaning up clauses, all contract templates must be covered – a single forgotten template is enough for a violation.
Whistleblower protection in contract templates (HR/Legal)
- Authority / court
- U.S. Securities and Exchange Commission
- Area of law
- Whistleblower protection · Retaliation against whistleblowers
- Legal basis
- Securities Exchange Act of 1934, Rule 21F-17(a)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Retail and e-commerce
- Employees
- 10,000 or more
- Mitigating circumstances
- Clause phased out before contact by the SEC; cooperation and prompt remediation
- Published
- 22 May 2026
Original amount 148,000 USD, converted at the ECB reference rate of 22 May 2026.
- In the Matter of Foot Locker, Inc., Release No. 34-105542 Decision of an authority
- SEC Whistleblower Protections – Enforcement Actions Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
22 May 2026 Parrish & Heimbecker, Limited; GrainsConnect Canada Operations Inc.Canada: grain elevator must be sold in the takeover of GrainsConnect Order
The planned acquisition of GrainsConnect by Parrish & Heimbecker would have reduced competition for the purchase of wheat from farmers around Reford (Saskatchewan). The Competition Bureau reached an agreement under which P&H must divest the grain elevator in Reford to an approved buyer and continue to operate it normally until then.
Merger control also has local effects: even a single site can trigger a divestiture requirement.
- Authority / court
- Competition Bureau Canada (Consent Agreement beim Competition Tribunal)
- Area of law
- Competition law · Merger control
- Legal basis
- Competition Act (Kanada), Fusionskontrolle
- Action
- Order
- Status of proceedings
- unknown
- Sector
- Food and agriculture
- Published
- 22 May 2026
- Competition Bureau reaches agreement to protect competition for grain farmers in Saskatchewan Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
19 May 2026 Jusan Technologies LtdTribunal: Jusan Technologies and CEO liable for withheld 600,000 US dollars Other
In August 2023, an employee had raised concerns about a possible diversion of funds earmarked for charitable purposes for self-enrichment and about breaches of duty by the CEO. The London South Employment Tribunal found that the company and its CEO personally had withheld from him, for that reason, a payment of 600,000 US dollars owed at the end of his contract (s. 47B (1) and (1A)); compensation will be determined separately.
In the United Kingdom, managers are personally liable if they subject whistleblowers to detriment – for example by withholding contractual payments.
How managers handle internal reports
- Authority / court
- Employment Tribunal
- Area of law
- Whistleblower protection · Retaliation against whistleblowers
- Legal basis
- Employment Rights Act 1996, ss. 43B, 43C, 43G, 47B(1) und (1A)
- Action
- Other
- Status of proceedings
- unknown
- Liability of senior managers
- The CEO (referred to in the judgment as the ‘controlling mind’) is personally liable under s. 47B(1A) ERA 1996 (Employment Rights Act 1996).
- Published
- 10 Jul 2026
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
18 May 2026 Adani Enterprises LimitedAdani Enterprises pays 275 million USD over Iranian liquefied petroleum gas €236.1m
From November 2023 to June 2025, the Indian conglomerate bought allegedly Omani and Iraqi liquefied petroleum gas (LPG) via a trader in Dubai which in fact originated from Iran; 32 payments totalling around 192 million USD were routed through US banks. The US Treasury's Office of Foreign Assets Control (OFAC) assessed the violations as egregious and not voluntarily self-disclosed; Adani had recklessly ignored numerous warning signs (AIS manipulation by the tankers, implausible loading ports, conspicuous price discounts, irregularities in the certificates of origin).
Companies that source commodities below market price via intermediaries must actively check origin, vessel movements and documents – mere name screening against sanctions lists is not enough.
Warning signs in commodity and shipping transactions (origin, AIS gaps, price discounts)
- Authority / court
- U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
- Area of law
- Sanctions and export control · Breaches of sanctions and embargoes
- Legal basis
- Iranian Transactions and Sanctions Regulations (31 C.F.R. part 560); IEEPA
- Action
- Fine
- Status of proceedings
- final
- Sector
- Energy and utilities
- Mitigating circumstances
- Remedial measures after discovery and cooperation with OFAC
- Published
- 18 May 2026
Original amount 275,000,000 USD, converted at the ECB reference rate of 18 May 2026.
- OFAC Enforcement Release: Adani Enterprises Limited Settles with OFAC for $275,000,000 (18.05.2026) Decision of an authority
- OFAC – Civil Penalties and Enforcement Information Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
18 May 2026 Volvo Group North America, LLCVolvo Group North America: settlement of around 197 million USD over undisclosed emission control devices €168.7m
Around 10,000 heavy-duty Volvo diesel engines from model years 2010 to 2016 used auxiliary emission control devices (AECDs) that were not disclosed during certification and emitted more NOx than permitted. The settlement with the California Air Resources Board (CARB) comprises 17.5 million USD in penalties and costs, 71 million USD for mitigation measures and 108 million USD for emission reduction projects in California.
Every emissions-relevant control function must be fully disclosed in the certification application; otherwise high settlement payments may follow years later.
- Authority / court
- California Air Resources Board (CARB)
- Area of law
- Environment and sustainability · Emissions and permits
- Legal basis
- Kalifornische Emissions- und Zertifizierungsvorschriften für schwere Nutzfahrzeugmotoren
- Action
- Fine
- Status of proceedings
- final
- Sector
- Automotive
- Employees
- 10,000 or more
- Mitigating circumstances
- Cooperation during the investigation; recall and extended warranty for engines from model years 2014 to 2016.
- Published
- 18 May 2026
Original amount 196,500,000 USD, converted at the ECB reference rate of 18 May 2026.
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
15 May 2026 ArcelorMittal Exploitation Minière Canada s.e.n.c.ArcelorMittal mining subsidiary in Québec: 100 million CAD fine for acidic mine effluent €62.5m
From May 2014 to May 2022, acidic effluent, effluent with elevated zinc, nickel or suspended solids content, and effluent that was acutely lethal to fish entered fish-bearing waters from the Mont-Wright mining complex and the Fire Lake mine in the Fermont region. The company pleaded guilty to 100 counts; the fine of 100 million CAD goes almost entirely to the Environmental Damages Fund, and an action plan on wastewater management must also be submitted by mid-February 2027.
Long-standing exceedances of limit values add up to hundreds of individual offences; effluent monitoring must lead to immediate corrective action.
- Authority / court
- Court of Québec (Ermittlungen: Environment and Climate Change Canada)
- Area of law
- Environment and sustainability · Waste and hazardous substances
- Legal basis
- Fisheries Act, Subsection 36(3)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Steel and metals
- Published
- 15 May 2026
Original amount 100,000,000 CAD, converted at the ECB reference rate of 15 May 2026.
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
14 May 2026 Takeda Pharmaceuticals U.S.A., Inc.Takeda: 13.7 million USD – speaker fees and luxury meals for prescribing physicians €11.7m
From 2014 to 2020, Takeda allegedly selected physicians specifically for its speaker programme for the antidepressant Trintellix and provided them with fees and meals at expensive restaurants to promote prescriptions; some participants attended the same event several times without any educational benefit. Takeda paid 13,670,921 USD.
Speaker programmes need a demonstrable educational purpose – repeated attendance and expensive hospitality turn them into inducements.
Invitations, hospitality and fees for healthcare professionals
- Authority / court
- U.S. Department of Justice / U.S. Attorney's Office, Eastern District of California
- Area of law
- Bribery and corruption · Gifts, hospitality and benefits
- Legal basis
- Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
- Action
- Other
- Status of proceedings
- final
- Sector
- Chemicals and pharmaceuticals
- Employees
- 10,000 or more
Original amount 13,670,921 USD, converted at the ECB reference rate of 14 May 2026.
- DOJ: Takeda Agrees to Pay $13.6M to Resolve False Claims Allegations Relating to Improper Payments (14.05.2026) Press release of an authority
- HHS-OIG Enforcement Actions: Takeda Agrees to Pay $13.6M … Improper Payments to Physicians (14.05.2026) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
14 May 2026 Wind Tre S.p.A.Garante: 1.7 million EUR against Wind Tre after data exfiltration via deceived shop staff €1.72m
Attackers posed as technical support, induced staff at points of sale to grant system access and obtained data on more than 365,000 customers, including payment data for 41,359 of them. The Italian data protection authority (Garante per la protezione dei dati personali) criticised deficient management of access credentials and digital certificates as well as inadequate security assessments, and imposed 1,715,600 EUR.
Staff in branches and partner shops must verify alleged support calls before granting access.
Social engineering / fake IT support
- Authority / court
- Garante per la protezione dei dati personali
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- DSGVO (Integrität und Vertraulichkeit, Art. 32)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Telecoms, IT and software
- Published
- 16 Jul 2026
- Newsletter del 16 luglio 2026 – Data breach, il Garante privacy sanziona Wind Tre per 1,7 milioni di euro Press release of an authority
- Garante – Provvedimento del 14 maggio 2026 [10263796] (Wind Tre) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
13 May 2026 Oma Säästöpankki OyjOma Säästöpankki: 400,000 EUR over late and incomplete insider lists €400,000
The bank failed to draw up insider lists in good time for two pieces of inside information (termination of the core banking project with Cognizant in 2021, merger talks with Liedon Säästöpankki in 2022), did not update them and omitted mandatory information. The Finanssivalvonta (Finnish Financial Supervisory Authority, FIN-FSA) imposed a total fine of 400,000 EUR; the decision was not appealed and is final.
Insider lists must be created from the moment inside information exists – a fixed process with designated responsible persons prevents gaps.
Insider lists and handling of inside information
- Authority / court
- Finanssivalvonta (FIN-FSA)
- Area of law
- Capital markets and financial supervision · Market abuse and insider dealing
- Legal basis
- Verordnung (EU) Nr. 596/2014 (MAR) Art. 18 Abs. 1, 3 und 4; Durchführungsverordnung (EU) 2016/347
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Mitigating circumstances
- Measures to prevent recurrence and partial admission/cooperation had a mitigating effect.
- Published
- 15 May 2026
- Finanssivalvonta – Oma Säästöpankki Oyj:lle 400 000 euron yhteinen seuraamusmaksu (15.5.2026) Press release of an authority
- Finanssivalvonta – Toimituskirja FIVA/2026/227 vom 13.05.2026 (Oma Säästöpankki Oyj) Decision of an authority
- Finanssivalvonta – Hallinnolliset seuraamukset (Übersicht mit Rechtskraftvermerk) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
12 May 2026 Société Wallonne des Eaux (SWDE)SWDE: 86,000 EUR for call recordings without sufficient transparency €86,000
The Walloon water utility recorded and listened in on customer calls for quality control and training purposes; the Litigation Chamber of the Autorité de protection des données (Belgian Data Protection Authority, APD/GBA) found infringements of transparency and fairness as well as in the engagement of a sub-processor. It imposed two fines totalling 86,000 EUR (85,000 + 1,000) after reducing the amounts in view of the situation of the public utility; an appeal against the decision has been lodged with the Market Court.
Anyone recording customer calls must clearly communicate purpose, legal basis and the parties involved in advance and engage service providers under proper contracts.
Recording of customer calls
- Authority / court
- Autorité de protection des données (APD/GBA) – Chambre Contentieuse
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- DSGVO Art. 5 Abs. 1 lit. a, Art. 6 Abs. 1, Art. 12 Abs. 1, Art. 13, Art. 28 Abs. 3
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Energy and utilities
- APD – Décision quant au fond n° 102/2026 du 12 mai 2026 Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
8 May 2026 Permanent TSB plcDPC: 277,500 EUR against Permanent TSB after account takeovers via call centre calls €277,500
Fraudsters in possession of customer data posed as customers at the bank's ‘Open24’ call centre, had account details changed and obtained further information because security protocols were not followed; those affected had to close accounts, and some suffered losses. Ireland's Data Protection Commission (DPC) imposed 250,000 EUR for inadequate security and 27,500 EUR for late breach notification (decision served in the week before the press release).
Call centre staff must adhere to identity checks without exception – callers with ‘matching’ data are not automatically authorised.
Identity verification by telephone (vishing)
- Authority / court
- Data Protection Commission (DPC)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Art. 5 Abs. 1 lit. f, Art. 32 Abs. 1, Art. 33 Abs. 1 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Published
- 8 May 2026
- Data Protection Commission Publishes Final Decision Following Inquiry into Permanent TSB Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
8 May 2026 Transport Desgagnés Inc.Transport Desgagnés: 40,000 CAD because a tanker entered an Arctic protected area without a permit €24,902
The tanker M/T Sarah Desgagnés, operated by the company, entered the Akpait National Wildlife Area in Nunavut on 29 September and 6 October 2024 without the required access permit. The Nunavut Court of Justice imposed 40,000 CAD for the Environmental Damages Fund; the company must publish a notice in a local newspaper and is listed in the Environmental Offenders Registry.
Protected area boundaries belong in every vessel's voyage planning; missing access permits are prosecuted even in remote areas.
Protected areas in voyage planning and bridge practice
- Authority / court
- Nunavut Court of Justice (Ermittlungen: Environment and Climate Change Canada)
- Area of law
- Environment and sustainability
- Legal basis
- Wildlife Area Regulations (Canada Wildlife Act), Paragraph 3.3(1)(h)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Published
- 8 May 2026
Original amount 40,000 CAD, converted at the ECB reference rate of 8 May 2026.
- Transport Desgagnés Inc. fined $40,000 for Canada Wildlife Act violations in Nunavut Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
7 May 2026 South Staffordshire Plc und South Staffordshire Water PlcICO: almost £1 million against water supplier South Staffordshire after cyber attack €1.12m
In 2020, malware entered the water supplier's network via a phishing e-mail and remained undetected for around 20 months; in 2022, attackers obtained administrator rights and stole data on 633,887 people, which ended up on the dark web. The UK Information Commissioner's Office (ICO) criticised, among other things, monitoring of only 5% of the IT environment, outdated software such as Windows Server 2003 and a lack of vulnerability and patch management.
Utilities in critical infrastructure must also monitor their entire IT estate and replace legacy systems – an attack must not only come to light through performance problems.
Recognising phishing
- Authority / court
- Information Commissioner's Office (ICO)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- UK GDPR Art. 5 Abs. 1 lit. f, Art. 32 Abs. 1
- Action
- Fine
- Status of proceedings
- final
- Sector
- Energy and utilities
- Culpability
- negligent
- Mitigating circumstances
- 40% reduction for early admission of liability; payment agreed without appeal.
- Published
- 11 May 2026
Original amount 963,900 GBP, converted at the ECB reference rate of 7 May 2026.
- Fine of nearly £1m issued against South Staffordshire Plc and South Staffordshire Water Plc following major cyber attack and data breach Press release of an authority
- ICO Enforcement: South Staffordshire Plc and South Staffordshire Water Plc Enforcement database of an authority
- ICO Monetary Penalty Notice: South Staffordshire Plc and South Staffordshire Water Plc Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
7 May 2026 Duncan Farms LimitedDuncan Farms: 53,000 GBP because a worker was caught in an unguarded conveyor €61,335
In October 2024, an employee of the egg producer climbed between two running manure conveyors to check a noise and was caught at the in-running nip; he suffered nerve damage to both arms. The drive had no fixed or interlocked guards – instruction and clothing rules alone were not sufficient. The Health and Safety Executive (HSE) prosecution resulted in a fine of 53,000 GBP.
Instruction is no substitute for technical safeguards: in-running nips must be protected by fixed or interlocked guards.
Stopping machinery before intervening
- Authority / court
- Health and Safety Executive (Aberdeen Sheriff Court)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Provision and Use of Work Equipment Regulations 1998, reg. 11(1) und (2); Health and Safety at Work etc. Act 1974, s. 33(1)(c)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Food and agriculture
- Published
- 13 May 2026
Original amount 53,000 GBP, converted at the ECB reference rate of 7 May 2026.
- Egg farm fined after worker trapped in running conveyor machinery Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
7 May 2026 Canada Revenue Agency (CRA)Privacy Commissioner: Canada's tax authority CRA must strengthen protection against account takeovers Other
Since 2020, the Canada Revenue Agency (CRA) has experienced more than 42,000 individual breaches in which unauthorised persons accessed tax accounts or changed data in order to redirect benefits. In a special report to Parliament, the Privacy Commissioner of Canada criticised, among other things, the delayed introduction of mandatory MFA and incomplete incident recording, and made nine recommendations, eight of which were accepted in full and one in part.
Online accounts with payment functions need mandatory strong authentication and complete recording of incidents.
- Authority / court
- Office of the Privacy Commissioner of Canada (OPC)
- Area of law
- Data protection · Data breaches and data security
- Legal basis
- Privacy Act (Kanada)
- Action
- Other
- Status of proceedings
- unknown
- Sector
- Public sector
- Employees
- 10,000 or more
- Published
- 7 May 2026
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
6 May 2026 HP TRONIC Zlín, spol. s r.o.HP TRONIC Zlín: 39 million CZK for price requirements imposed on electronics retailers €1.6m
For more than ten years from 2012, the distributor and retailer of consumer electronics and household appliances set minimum resale prices for its retail customers, monitored them and sanctioned deviations. The Úřad pro ochranu hospodářské soutěže (Czech Office for the Protection of Competition, ÚOHS) imposed 38.971 million CZK; a leniency application, settlement and an improved compliance programme reduced the fine, and the company appealed against the amount.
Reprimanding retailers over low prices risks high fines – an effective compliance programme can reduce them but is no substitute for ending the practice.
Resale price maintenance in sales
Missing or inadequate training played a role in the decision.
- Authority / court
- Úřad pro ochranu hospodářské soutěže (ÚOHS)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Tschechisches Wettbewerbsgesetz, Art. 101 AEUV (S0551/2023)
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Retail and e-commerce
- Culpability
- intentional
- Mitigating circumstances
- Leniency application, settlement and expansion of the internal compliance programme.
- Published
- 6 May 2026
Original amount 38,971,000 CZK, converted at the ECB reference rate of 6 May 2026.
- HP Tronic Faces Nearly CZK 40 Million Fine for Dictating Prices to Retailers Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
5 May 2026 P&V Assurances SCP&V Assurances: 150,000 EUR – distribution via a deregistered insurance intermediary €150,000
One of the insurer’s intermediaries was removed from the FSMA register in December 2023; owing to a human data entry error in the monitoring tool, P&V only noticed this after more than a month and concluded 34 contracts through him during that time. The Autorité des services et marchés financiers (Belgian Financial Services and Markets Authority, FSMA) accepted a settlement of 150,000 EUR; there had already been a settlement for the same amount in 2020.
Automated register checks are only as good as the underlying data maintenance – critical entries require a four-eyes principle.
Care in master data maintenance / register reconciliation
- Authority / court
- Autorité des services et marchés financiers (FSMA)
- Area of law
- Capital markets and financial supervision · Organisational requirements
- Legal basis
- Loi du 4 avril 2014 relative aux assurances, Art. 259
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Repeat case
- yes
- Mitigating circumstances
- IT adjustments to prevent recurrence.
- Published
- 5 May 2026
- FSMA – Règlement transactionnel P&V Assurances SC (05.05.2026) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
4 May 2026 Malta: insurer reprimanded again and fined – marketing calls despite objection €1,000
Although the Information and Data Protection Commissioner (IDPC) had already ruled in favour of a complainant, an insurance company (name redacted) again had him called for marketing purposes via a third-party company; his number remained on call lists. The IDPC criticised the lack of safeguards and inadequate contracts with processors, ordered remedial action within 20 days and imposed two fines totalling 1,000 EUR.
An objection to marketing must also reach all call centres engaged – otherwise the next complaint follows.
Passing marketing objections on to service providers (suppression lists)
- Authority / court
- Information and Data Protection Commissioner (IDPC)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Art. 5 Abs. 2, Art. 21 Abs. 2, Art. 24 Abs. 1, Art. 28 Abs. 3 i. V. m. Art. 58 Abs. 2 lit. b, d, i DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Repeat case
- yes
- IDPC Commissioner's Decision (4. Mai 2026) Decision of an authority
- Data Protection Decisions – IDPC Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
4 May 2026 Berliner Verkehrsbetriebe (BVG) AöRBlnBDI reprimands BVG: deletion at service provider not checked, data breach reported too late Reprimand or warning
A processor of Berlin's public transport operator BVG, which had sent customer letters in early 2025, was hacked; around 180,000 customer records were affected, although they should long since have been deleted after the end of the contract. BVG had never checked the deletion, had not agreed any procedure for data breaches in the data processing agreement and reported the incident only after the 72-hour deadline had expired; the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI) issued a reprimand.
Have service providers prove deletion after the end of the contract, and have an internal procedure that immediately turns indications of a breach into a 72-hour notification.
Reporting process for data breaches and management of service providers
- Authority / court
- Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)
- Area of law
- Data protection · Data processors
- Legal basis
- Art. 5 Abs. 2 i. V. m. Abs. 1 lit. c, e, f, Art. 28 Abs. 3 S. 2 lit. f, Art. 32 Abs. 1, Art. 33 DSGVO
- Action
- Reprimand or warning
- Status of proceedings
- unknown
- Sector
- Transport, logistics and shipping
- Mitigating circumstances
- BVG has announced measures against similar incidents.
- Published
- 4 May 2026
- Datenschutzbeauftragte verwarnt BVG Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
1 May 2026 Ultra Electronics Holdings Limited (vormals plc)Ultra Electronics: DPA of around 10.1 million GBP over bribery in Algeria and Oman €11.6m
The British defence supplier failed to prevent bribery by agents in connection with three public contracts in Oman and Algeria (including a contract with the Omani Ministry of Transport worth up to 200 million GBP). The DPA approved by Southwark Crown Court provides for a penalty of 10,083,150 GBP; in addition, the company is bearing around 4.8 million GBP of the SFO's investigation costs and must report on its compliance programme for three years.
Companies that use agents for government contracts must be able to demonstrate adequate procedures – otherwise the company is liable under Section 7 Bribery Act even without any intent to bribe on its own part.
Use of sales agents in public contracts
- Authority / court
- Serious Fraud Office (SFO)
- Area of law
- Bribery and corruption · Bribery of public officials
- Legal basis
- Section 7 Bribery Act 2010 (Failure to prevent bribery); Deferred Prosecution Agreement
- Action
- Fine
- Status of proceedings
- final
- Sector
- Defence and security
- Culpability
- intentional
- Mitigating circumstances
- Self-report of the Algerian matters in 2018; restructuring of ownership and leadership; 45 % discount on the penalty.
- Published
- 1 May 2026
Original amount 10,083,150 GBP, converted at the ECB reference rate of 30 Apr 2026.
- SFO secures £10m from British defence supplier Press release of an authority
- SFO DPA with Ultra Electronics Holdings Limited (formerly plc) Decision of an authority
- Serious Fraud Office v Ultra Electronics Holdings [2026] EWCR 4 (Approved Judgment, 1 May 2026) Court decision
- SFO-Ultra Indictment (Crown Court at Southwark) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
1 May 2026 Modern Nuclear Inc.Modern Nuclear: 8.33 million USD – excessive supervision fees paid to referring cardiologists €7.12m
The Californian provider of mobile PET scans allegedly paid referring cardiologists excessive fees for supervising the examinations in order to secure referrals. The settlement of 8,334,350.71 USD plus revenue-based payments is based on ability to pay; in addition, there is a Corporate Integrity Agreement.
Remuneration of business partners who refer work must correspond to the market value of the service – any overpayment acts as a bribe.
Checking fee agreements with referrers for market conformity
- Authority / court
- U.S. Department of Justice / U.S. Attorney's Office, Central District of California
- Area of law
- Bribery and corruption · Commercial bribery
- Legal basis
- Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
- Action
- Other
- Status of proceedings
- final
- Sector
- Healthcare
Original amount 8,334,350.71 USD, converted at the ECB reference rate of 30 Apr 2026.
- HHS-OIG Enforcement Actions: Mobile PET Scan Provider to Pay $8.33 Million … Unlawful Kickbacks to Medical Practices (01.05.2026) Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
30 Apr 2026 „Вазовски машиностроителни заводи“ ЕАД (VMZ)Arms manufacturer VMZ used a partner’s know-how for disposable grenade launchers – 50,855 EUR €50,855
On application by the client Armar, the Комисия за защита на конкуренцията (Bulgarian Commission for the Protection of Competition, KZK) found that VMZ had used technical documentation on disposable grenade launchers that had been provided in confidence (trade secret) contrary to the confidentiality agreements and good commercial practice (Art. 37(1) ZZK – Bulgarian Protection of Competition Act). Sanction of 50,855.09 EUR and obligation to cease, with immediate enforceability. Appeals have been lodged against the decision.
Design documents provided in confidence may only be used within the agreed scope – especially in sensitive industries.
Handling confidential know-how of business partners
- Authority / court
- Комисия за защита на конкуренцията (КЗК, Bulgarische Wettbewerbskommission)
- Area of law
- Competition law
- Legal basis
- Art. 37 Abs. 1 ZZK (Geschäftsgeheimnisse)
- Action
- Fine
- Status of proceedings
- under appeal
- Sector
- Defence and security
- КЗК Публичен електронен регистър – Производство (Решение № 389 от 30.04.2026; Volltext als PDF im Register) Official register or notice
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
29 Apr 2026 Delta Dental Insurance Company und Delta Dental of New York, Inc.NYDFS: $2.25 million against Delta Dental after MOVEit attack and late notification €1.92m
In 2023, attackers exploited a zero-day vulnerability in MOVEit Transfer to steal files containing social security, driving licence, account and health data. The New York State Department of Financial Services (NYDFS) criticised inadequate retention settings, policies and controls as well as the late notification of the cybersecurity incidents to the supervisory authority.
Keep data in transfer tools only for as long as necessary – and report security incidents to the supervisory authority on time.
- Authority / court
- New York State Department of Financial Services (NYDFS)
- Area of law
- Information security and cyber · Security measures and risk management
- Legal basis
- 23 NYCRR Part 500 (Cybersecurity Regulation)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Culpability
- negligent
- Published
- 30 Apr 2026
Original amount 2,250,000 USD, converted at the ECB reference rate of 29 Apr 2026.
- DFS Secures $2.25 Million Cybersecurity Settlement with Delta Dental Press release of an authority
- Consent Order to Delta Dental 2026 Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
28 Apr 2026 Purdue Pharma L.P.Purdue Pharma: 5.544 billion USD penalty – including kickbacks via the speaker programme €4.75bn
Following its 2020 guilty plea, the opioid manufacturer was sentenced in Newark to a criminal fine of 3.544 billion USD (asserted in the insolvency proceedings) and forfeiture of 2 billion USD; up to 1.775 billion USD can be credited against the forfeiture if Purdue emerges from insolvency as a public benefit company. Purdue had deceived the DEA and paid kickbacks to prescribers via its speaker programme and to an electronic health records platform in order to increase opioid prescriptions.
Fee programmes for customers who drive revenue can become part of a criminal overall scheme – with consequences that threaten the company’s existence.
Speaker fees and benefits for prescribing physicians
- Authority / court
- U.S. District Court, District of New Jersey (Anklage: U.S. Department of Justice)
- Area of law
- Bribery and corruption · Gifts, hospitality and benefits
- Legal basis
- Verschwörung zum Betrug der USA und zur Verletzung des Food, Drug, and Cosmetic Act; zwei Fälle Verschwörung zur Verletzung des Anti-Kickback Statute (Schuldbekenntnis vom 24.11.2020)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Chemicals and pharmaceuticals
- Culpability
- intentional
Original amount 5,544,000,000 USD, converted at the ECB reference rate of 28 Apr 2026.
- HHS-OIG Enforcement Actions: Opioid Manufacturer Purdue Pharma Sentenced for Fraud and Kickback Conspiracies (28.04.2026) Enforcement database of an authority
- U.S. Department of Justice: Opioid Manufacturer Purdue Pharma Sentenced for Fraud and Kickback Conspiracies (28.04.2026) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
28 Apr 2026 Amica Chips S.p.A., Pata S.p.A., Preziosi Food S.p.A.Italy: 23.3 million EUR against Amica Chips, Pata and Preziosi Food over snack cartel €23.3m
In a secret, continuing agreement, three manufacturers of salty snacks and crisps divided up among themselves the supply of private-label snacks to food retailers. Fines: Amica Chips 8,239,210 EUR, Pata 7,555,387 EUR, Preziosi Food 7,503,550 EUR; this was the first time Italy's competition authority (Autorità Garante della Concorrenza e del Mercato, AGCM) applied its settlement procedure.
Retailers' tenders for private labels are competition – coordinated sham bids to retailers constitute a cartel.
Sham bids in retailers' private-label tenders
- Authority / court
- Autorità Garante della Concorrenza e del Mercato (AGCM)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Art. 101 AEUV; Art. 14-quater Gesetz 287/1990 (Settlement)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Food and agriculture
- Mitigating circumstances
- Leniency reduction for Pata and Amica Chips; 10 % settlement discount for all
- Published
- 28 Apr 2026
- I871 - The Italian Competition Authority fines Amica Chips, Pata and Preziosi Food over €23 million Press release of an authority
- AGCM - Sanzioni per oltre 23 milioni di euro ad Amica Chips, Pata e Preziosi Food Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Apr 2026 12066424 Canada Inc.Temporary staffing agency and director: CA$150,000 over unpaid wages €93,832
Following complaints, the labour inspectorate found, among other things, outstanding minimum wages at the temporary staffing agency in Leamington; an audit for 2022 showed that hundreds of employees were owed a total of CA$234,212 in regular wages, public holiday pay and vacation pay. The company and its director did not comply with the 2023 orders to pay; in proceedings held in their absence, the court imposed CA$100,000 on the company and CA$50,000 on the director (plus victim fine surcharge).
Companies that ignore regulatory orders to pay outstanding wages risk not only a corporate fine but also personal liability for management.
- Authority / court
- Provincial Offences Court Windsor (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)
- Area of law
- Health and safety and employment law · Minimum wage and undeclared work
- Legal basis
- Employment Standards Act, 2000 (Ontario), ss. 103(8), 106, 132, 136
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Liability of senior managers
- Director Son-Van Duong personally fined CA$50,000.
- Published
- 3 Jun 2026
Original amount 150,000 CAD, converted at the ECB reference rate of 23 Apr 2026.
- Temporary Help Agency and Director Fined $150,000 Total for Failing to Pay Wages (Ontario Newsroom, Court Bulletin) Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
21 Apr 2026 Industrial Chemicals LimitedIndustrial Chemicals: 3.8 million GBP after caustic soda burns – one leg amputated €4.37m
In 2019, an employee stepped into a puddle of caustic soda; his safety boots offered no protection, and his leg had to be amputated below the knee. In 2022, another worker suffered chemical burns during manual decanting. The Health and Safety Executive (HSE) found leaking pipes and valves, a lack of maintenance, no risk assessment for decanting and untested safety footwear; fine of 3.8 million GBP plus 124,748 GBP in costs.
Leaks of hazardous substances are not a normal state of affairs – maintenance, spill management and tested protective equipment go hand in hand.
Handling corrosive hazardous substances and PPE
- Authority / court
- Health and Safety Executive (Southwark Crown Court)
- Area of law
- Health and safety and employment law · Workplace safety and accidents
- Legal basis
- Control of Substances Hazardous to Health Regulations 2002, reg. 7(1)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Chemicals and pharmaceuticals
- Published
- 24 Apr 2026
Original amount 3,800,000 GBP, converted at the ECB reference rate of 21 Apr 2026.
- Chemical company fined £3.8 million after investigation into serious chemical burns suffered by two employees Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
17 Apr 2026 Medirex s. r. o.; KLINICKÁ BIOCHÉMIA s.r.o.; Unilabs Slovensko, s. r. o.; synlab slovakia s. r. o.; Asociácia laboratóriíLaboratory cartel: 14.6 million EUR and procurement bans against diagnostic laboratories €14.6m
Four laboratories and their association coordinated negotiations on prices with health insurers, coordinated in tenders, exchanged sensitive information and allocated customers. At first instance, the Protimonopolný úrad Slovenskej republiky (Antimonopoly Office of the Slovak Republic, PMÚ SR) imposed 14,551,800 EUR and three-year procurement bans; Unilabs received a substantially reduced fine as leniency applicant and under a settlement.
Common negotiating positions towards payers via an association are a cartel – association meetings need minutes and a review of the agenda.
Information exchange among competitors and association work
- Authority / court
- Protimonopolný úrad Slovenskej republiky (PMÚ SR)
- Area of law
- Competition law · Cartels and collusion
- Legal basis
- Slowakisches Wettbewerbsschutzgesetz (Kartellverbot)
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Healthcare
- Culpability
- intentional
- Mitigating circumstances
- Unilabs: leniency reduction (50%) and settlement (a further 30%).
- Published
- 12 May 2026
- KARTELY: PMÚ odhalil kartel laboratórií a uložil pokuty takmer 15 miliónov eur Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
17 Apr 2026 Cream della Cream Switzerland GmbH und Philipp Plein International AGFDPIC ruling: Philipp Plein and Cream della Cream ignored objections to advertising Order
Both companies continued to use e-mail addresses and telephone numbers from online purchases for advertising, although data subjects had objected – in some cases after deletion had been confirmed. The Swiss Federal Data Protection and Information Commissioner (Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter, EDÖB) ordered the processing for advertising to cease and the data to be deleted on request.
An objection to advertising must take effect across all systems – a confirmed deletion followed by further advertising violates the principle of good faith.
Handling objections to advertising and deletion requests
- Authority / court
- Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter (EDÖB)
- Area of law
- Data protection · Marketing and consent
- Legal basis
- DSG Art. 6, Art. 30 Abs. 2 lit. b, Art. 31
- Action
- Order
- Status of proceedings
- final
- Sector
- Retail and e-commerce
- Published
- 26 Jun 2026
- Verfügung des EDÖB gegen Cream della Cream Switzerland GmbH und Philipp Plein International AG Press release of an authority
Checked against the official source on 25 Sep 2026 · Direct link