Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe, North America, Latin America, Asia-Pacific and Middle East: 1,929 cases from 40 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

1,605cases from 40 jurisdictions
€38.5bnTotal of monetary amounts (1342 cases with an amount)
€4.75bnLargest single case: Purdue Pharma L.P.
€696,290Median per case with an amount

Click a bar to drill down one level.

Where?

by region

All jurisdictions

  1. USA €19.1bn 50 % · 239 cases
  2. EU €16.1bn 42 % · 758 cases
  3. United Kingdom €1.16bn 3 % · 286 cases
  4. Switzerland €469.9m 1 % · 30 cases
  5. Brazil €444.4m 1 % · 38 cases
  6. Norway €438.3m 1 % · 16 cases
  7. Australia €437.3m 1 % · 42 cases
  8. Canada €243.7m 1 % · 113 cases
  9. United Arab Emirates €59.9m 0 % · 24 cases
  10. Hong Kong €23.9m 0 % · 29 cases
  11. 3 more€23.9m

What for?

by area of law

All areas of law

  1. Competition law €10.6bn 27 % · 227 cases
  2. Bribery and corruption €7.22bn 19 % · 64 cases
  3. Environment and sustainability €4.45bn 12 % · 84 cases
  4. Data protection €3.79bn 10 % · 356 cases
  5. Consumer protection and online retail €3.36bn 9 % · 143 cases
  6. AI and digital regulation €2.51bn 7 % · 26 cases
  7. Sanctions and export control €2.42bn 6 % · 76 cases
  8. Money laundering and terrorist financing €2.42bn 6 % · 206 cases
  9. Capital markets and financial supervision €1.18bn 3 % · 201 cases
  10. Other €423.5m 1 % · 20 cases
  11. 4 more€152m

Who?

by sector

All sectors

  1. Chemicals and pharmaceuticals €6.06bn 16 % · 40 cases
  2. Media and online platforms €5.74bn 15 % · 86 cases
  3. Financial services and insurance €5.51bn 14 % · 466 cases
  4. Retail and e-commerce €5.11bn 13 % · 136 cases
  5. Automotive €4.99bn 13 % · 32 cases
  6. Telecoms, IT and software €3.56bn 9 % · 104 cases
  7. Energy and utilities €2.1bn 5 % · 104 cases
  8. Manufacturing and mechanical engineering €1.13bn 3 % · 52 cases
  9. Transport, logistics and shipping €1.12bn 3 % · 66 cases
  10. Steel and metals €894.2m 2 % · 36 cases
  11. 6 more€2.27bn

When?

per quarter, by date of decision
Trend
PeriodCasesTotal
Q4 2023108€1.33bn
Q1 202485€2.14bn
Q2 202478€771.4m
Q3 202487€1.81bn
Q4 2024163€5.44bn
Q1 2025123€3.64bn
Q2 2025135€2.95bn
Q3 2025145€7.22bn
Q4 2025188€3.16bn
Q1 2026165€1.32bn
Q2 2026172€6.6bn
Q3 2026156€2.12bn
Q4 20260–

1,605 cases

25 Nov 2025 Shell UK LimitedShell UK: £560,000 fine after hydrocarbon release on Brent Charlie United KingdomWorkplace safety and accidents €637,233

Shell UK pleaded guilty to two charges under the offshore fire and explosion regulations (PFEER 1995) and was fined £560,000. On 19 May 2017, around 200 kg of gas and 1,550 kg of crude oil escaped into a concrete leg of the Brent Charlie platform from corroded pipework that had originally been installed only temporarily; the ventilation systems had also been inadequately maintained. More than 170 people on board were exposed to a potential fire and explosion risk.

What organisations can take from it

Temporary installations need a fixed removal date and, until then, their own inspection regime.

Relevance to training and awareness

Management of change for temporary pipework

Authority / court
Aberdeen Sheriff Court (Ermittlung: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Offshore Installations (Prevention of Fire and Explosion, and Emergency Response) Regulations 1995 (PFEER), zwei Anklagepunkte
Action
Fine
Status of proceedings
final
Sector
Energy and utilities
Mitigating circumstances
Guilty plea; the court set the fine after taking mitigating factors into account.
Published
28 Nov 2025

Original amount 560,000 GBP, converted at the ECB reference rate of 25 Nov 2025.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Sep 2026 Plaček Pet Products s.r.o.Plaček Pet Products: 36.4 million CZK for minimum prices on pet food CzechiaCartels and collusion €1.49m

From January 2013 to March 2022, the distributor of premium pet food and pet supplies imposed minimum resale prices on its retailers and threatened sanctions if they were undercut. In a settlement procedure, the Úřad pro ochranu hospodářské soutěže (Czech Office for the Protection of Competition, ÚOHS) imposed 36.438 million CZK; the company ended the conduct after the inspection and introduced a compliance programme.

What organisations can take from it

Never enforce recommended retail prices with supply stops or sanctions – sales teams need clear rules on this.

Relevance to training and awareness

Price requirements imposed on retailers in sales

Missing or inadequate training played a role in the decision.

Authority / court
Úřad pro ochranu hospodářské soutěže (ÚOHS)
Area of law
Competition law · Cartels and collusion
Legal basis
Verbot vertikaler Preisbindung (tschechisches Wettbewerbsgesetz, Art. 101 AEUV)
Action
Fine
Status of proceedings
final
Sector
Retail and e-commerce
Culpability
intentional
Mitigating circumstances
Termination immediately after the inspection, information of customers about free pricing, full cooperation, settlement and newly introduced compliance programme.
Published
24 Sep 2026

Original amount 36,438,000 CZK, converted at the ECB reference rate of 24 Sep 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Sep 2026 M&J GroupCMA: fine against construction firm for concealing evidence during an inspection United KingdomCartels and collusion €29,075

During an inspection as part of an investigation into bid rigging, a work mobile phone and documents were removed from the premises on the instructions of a manager, and possession of a work mobile phone was denied. The UK Competition and Markets Authority (CMA) imposed a fine of 25,000 GBP on M&J.

What organisations can take from it

Dawn raid training is mandatory: removing mobile phones or documents during an inspection obstructs the investigation, even when acting on instructions.

Relevance to training and awareness

Correct conduct during inspections (dawn raids), no removal of evidence

Authority / court
Competition and Markets Authority (CMA)
Area of law
Competition law · Cartels and collusion
Legal basis
Section 40A(1) Competition Act 1998
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Culpability
intentional
Liability of senior managers
Measures against individuals are not reported here.
Published
24 Sep 2026

Original amount 25,000 GBP, converted at the ECB reference rate of 24 Sep 2026.

Sources

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Sep 2026 Kalibrate Canada (Tochter der Kalibrate Technologies Ltd.)Canada: Kalibrate must stop sharing retailer-specific petrol station data CanadaAbuse of market power Order

Kalibrate's "Market Intelligence" product passed on retailer-specific sales data from petrol stations that allowed conclusions to be drawn about competitors and could facilitate coordinated pricing behaviour. In an agreement registered with the Competition Tribunal, Kalibrate undertakes to supply only aggregated and time-delayed data – the first case under the reformed abuse of dominance rules.

What organisations can take from it

Providers of market and price data must ensure that their products do not disseminate individualised competitor data.

Authority / court
Competition Bureau Canada (Consent Agreement beim Competition Tribunal)
Area of law
Competition law · Abuse of market power
Legal basis
Abuse-of-dominance-Bestimmungen des Competition Act (Fassung 2023)
Action
Order
Status of proceedings
unknown
Sector
Energy and utilities
Published
24 Sep 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 Sep 2026 Southern WaterSouthern Water: 2.4 million GBP fine for sewage and diesel pollution in Kent United KingdomEmissions and permits €2.9m

Between 2019 and 2021, untreated sewage, sewage residues, diesel from a generator and waste entered a stream and the sea around Faversham and Whitstable; the circumstances of one incident were not reported to the Environment Agency, around 70 fish died, and bathing warnings were in place at beaches in Tankerton and Herne Bay for almost a week. The court imposed a fine of 2,416,666.67 GBP, 69,894.04 GBP in costs and a 190 GBP victim surcharge; it was the company's second conviction that year (announcement of 22 September 2026, exact date of judgment not stated). According to the annual accounts filed with the UK companies register for financial year 2026, the company had around 3,109 employees.

What organisations can take from it

Repeated pollution and failure to report incidents lead to a series of prosecutions with rising fines.

Relevance to training and awareness

Reporting environmental incidents to the regulator

Authority / court
Bromley Magistrates' Court (Anklage: Environment Agency)
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Regulations 12(1)(b) und 38(1)(a) Environmental Permitting (England and Wales) Regulations 2016
Action
Fine
Status of proceedings
unknown
Sector
Energy and utilities
Employees
1,000 to 9,999
Repeat case
yes
Published
22 Sep 2026

Original amount 2,486,750.71 GBP, converted at the ECB reference rate of 22 Sep 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 Sep 2026 Carioca Christiani-Nielsen Engenharia S.A.Carioca Engenharia pays 6.13 million BRL in CADE settlement on construction tenders BrazilCartels and collusion €1.04m

Carioca Christiani-Nielsen Engenharia S.A. concluded a single settlement (Termo de Compromisso de Cessação) with the Conselho Administrativo de Defesa Econômica (CADE, Brazilian competition authority) covering four proceedings concerning alleged collusion in public tenders for infrastructure projects (metro, airports operated by Infraero, the rail company CPTM and the transport authority DNIT). The company admitted its participation, allegedly pays 6,134,676.92 BRL in instalments to the Fund for Diffuse Rights (FDD) and waives court and administrative disputes on these matters. Together with the company’s earlier settlements with CADE, its contributions exceed 90 million BRL.

What organisations can take from it

A settlement covering all pending cartel cases creates legal certainty but requires an admission, payment and full cooperation.

Relevance to training and awareness

Bid rigging in public construction contracts

Authority / court
Conselho Administrativo de Defesa Econômica (CADE)
Area of law
Competition law · Cartels and collusion
Legal basis
Lei nº 12.529/2011 (Lei de Defesa da Concorrência), Termo de Compromisso de Cessação
Action
Other
Status of proceedings
final
Sector
Construction and real estate
Published
22 Sep 2026

Original amount 6,134,676.92 BRL, converted at the ECB reference rate of 22 Sep 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 Sep 2026 OTC Link LLCOTC Link: 575,000 USD – security policies never completed despite examination findings USACritical infrastructure €501,614

From 2016 to 2025, the operator of the OTC Link ATS trading system lacked complete policies on systems security, access control and vulnerability management as required under Regulation SCI. Although the examiners of the U.S. Securities and Exchange Commission (SEC) had criticised the gaps in several examinations, drafts remained unfinished; the SEC issued a censure and imposed 575,000 USD.

What organisations can take from it

Track supervisory examination findings with a deadline and a responsible person – points that remain open repeatedly become expensive.

Authority / court
U.S. Securities and Exchange Commission (SEC)
Area of law
Information security and cyber · Critical infrastructure
Legal basis
Regulation SCI, Rule 1001(a)(1)–(3)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Repeat case
yes

Original amount 575,000 USD, converted at the ECB reference rate of 22 Sep 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 Sep 2026 Miljödata i Karlskrona AktiebolagIMY: 1.8 million SEK against HR software provider Miljödata after data leak SwedenData breaches and data security €160,053

The provider of web-based systems for sickness reporting, rehabilitation and occupational safety incidents was hacked in August 2025; the stolen personal data appeared on the dark web shortly afterwards. The Swedish data protection authority (Integritetsskyddsmyndigheten, IMY) found that, despite the high need for protection, there were no adequate security measures and no automatic real-time monitoring for attacks, assessed this as negligent and imposed 1,800,000 SEK.

What organisations can take from it

Service providers hosting the health and personnel data of many employers need real-time attack detection, not just perimeter protection.

Authority / court
Integritetsskyddsmyndigheten (IMY)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 32 Abs. 1 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Telecoms, IT and software
Culpability
negligent
Published
22 Sep 2026

Original amount 1,800,000 SEK, converted at the ECB reference rate of 22 Sep 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 Sep 2026 Audax Renovables, S.A. – Sucursal em PortugalPortugal: 22,000 EUR against Audax Renovables over missing gas reserves and hotline PortugalOther €22,000

On a total of 249 days, the Portuguese branch of the energy supplier failed to hold the mandatory natural gas security reserves, did not correctly show network charges on invoices, did not publish, or published late, mandatory information and its quality report, and failed to meet the standards for hotline waiting times. In a settlement procedure, the Entidade Reguladora dos Serviços Energéticos (Portuguese Energy Services Regulatory Authority, ERSE) set a fine of 44,000 EUR and reduced it to 22,000 EUR.

What organisations can take from it

Security of supply and service obligations in the energy sector are sanctioned individually – a compliance calendar for reserves and reports helps.

Authority / court
Entidade Reguladora dos Serviços Energéticos (ERSE)
Area of law
Other
Legal basis
Regime Sancionatório do Setor Energético (RSSE), Art. 28, 29; Decreto-Lei n.º 62/2020, Art. 96; RRC; RQS
Action
Fine
Status of proceedings
final
Sector
Energy and utilities
Culpability
negligent
Mitigating circumstances
Settlement (transação) with full admission, remediation of all infringements

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 Sep 2026 Empire Company LimitedSobeys parent Empire: consent agreement on property controls in grocery retail CanadaCompetition law Order

Empire Company Limited, parent company of grocery banners such as Sobeys, Farm Boy, Safeway, IGA, Foodland, FreshCo, Marché Bonichoix and Les Marchés Tradition, reached an agreement with the Competition Bureau on its use of property controls in the Canadian grocery sector. The Commissioner of Competition filed it with the Competition Tribunal as a registered consent agreement on 22 September 2026. In June 2026 the Bureau had obtained court orders to advance its investigation into these property controls.

What organisations can take from it

Use and exclusivity restrictions on property can be challenged under competition law where they make it harder for competitors to access sites.

Authority / court
Competition Bureau Canada (Consent Agreement, registriert beim Competition Tribunal)
Area of law
Competition law
Legal basis
Competition Act; beim Competition Tribunal registriertes Consent Agreement (Paragraf in den zugänglichen Quellen nicht genannt)
Action
Order
Status of proceedings
final
Sector
Retail and e-commerce
Employees
10,000 or more
Published
22 Sep 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Sep 2026 FleetCor Technologies Inc. (heute Corpay Inc.)FleetCor/Corpay pays 100 million USD over hidden fees on fuel cards USAMisleading advertising and pricing €87.1m

In 2023, a federal court found by way of summary judgment that the fuel card provider had charged its predominantly small business customers hidden or unauthorised fees and misrepresented savings; an appeals court upheld this in 2026. According to the FTC, the fees added up to hundreds of millions of dollars, and late fees were also charged despite punctual payment. Under the settlement resolving the administrative proceedings, FleetCor and a further settling party are jointly paying 100 million USD for refunds; the order is not yet final.

What organisations can take from it

Fees hidden behind links or in account documents are deemed not to have been disclosed – including vis-à-vis business customers.

Authority / court
Federal Trade Commission (FTC)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Section 5 FTC Act
Action
Disgorgement of profits
Status of proceedings
unknown
Sector
Financial services and insurance
Liability of senior managers
Measures against individuals are not reported here.
Published
17 Sep 2026

Original amount 100,000,000 USD, converted at the ECB reference rate of 17 Sep 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Sep 2026 Lesy České republiky, s.p. (Lesy ČR)Lesy ČR: 17.3 million CZK for export ban on wood chips CzechiaCartels and collusion €710,383

From July 2021 to July 2024, the state forestry company contractually prohibited a customer from actively and passively exporting wood chips and logging residues and secured the ban with a right of termination. The Úřad pro ochranu hospodářské soutěže (Czech Office for the Protection of Competition, ÚOHS) considered this a restriction of competition by object under Czech and EU law and imposed 17.268 million CZK (first instance, not final).

What organisations can take from it

State-owned companies are also subject to competition law – have export and resale bans in framework agreements legally reviewed before signing.

Relevance to training and awareness

Anticompetitive clauses in supply contracts

Authority / court
Úřad pro ochranu hospodářské soutěže (ÚOHS)
Area of law
Competition law · Cartels and collusion
Legal basis
Tschechisches Wettbewerbsgesetz, Art. 101 AEUV (Exportverbot)
Action
Fine
Status of proceedings
unknown
Sector
Food and agriculture
Mitigating circumstances
Voluntary termination immediately after proceedings were opened.
Published
17 Sep 2026

Original amount 17,268,000 CZK, converted at the ECB reference rate of 17 Sep 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Sep 2026 China Power International Development Limited, Towngas - China Power (HK) Integrated Energy Company Limited, A. Kourage Limited u. a. (4 Unternehmen)Fatal electric shock at Science Park: four companies pay 3,137,250 HKD Hong KongWorkplace safety and accidents €348,309

On 17 September 2026 the Shatin Magistrates' Courts (a Hong Kong magistrates' court), on prosecutions brought by the Labour Department (Hong Kong's labour authority), fined four companies for breaches of the Factories and Industrial Undertakings Regulations, the Factories and Industrial Undertakings (Electricity) Regulations and the Construction Sites (Safety) Regulations (Hong Kong workplace safety rules). The case concerned a fatal accident on 10 September 2023 at Hong Kong Science Park, in which a worker received an electric shock while carrying out electrical work. China Power International Development Limited and Towngas - China Power (HK) Integrated Energy Company Limited pay 908,000 HKD each, A. Kourage Limited 904,250 HKD and Skynet Engineering Company Limited 417,000 HKD, 3,137,250 HKD in total.

What organisations can take from it

In electrical work several companies involved can be criminally liable at the same time – workplace safety must be coordinated among all parties.

Relevance to training and awareness

Electrical safety in installation and construction work

Authority / court
Shatin Magistrates' Courts, Hongkong (Anklage: Labour Department)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Factories and Industrial Undertakings Regulations; Factories and Industrial Undertakings (Electricity) Regulations; Construction Sites (Safety) Regulations
Action
Fine
Status of proceedings
unknown
Sector
Energy and utilities
Published
17 Sep 2026

Original amount 3,137,250 HKD, converted at the ECB reference rate of 17 Sep 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Sep 2026 Hillbeck Homes (Sowerby Bridge) LtdDeveloper pays £300,000 after agency worker falls through unprotected stairwell opening United KingdomWorkplace safety and accidents €349,895

A 24-year-old labourer working as a temporary worker for a scaffolding company fell, in his second week of work on the developer's housing site, through a stairwell opening that was neither securely covered nor guarded, dropping one storey onto concrete and suffering serious spinal injuries. The court found the company guilty on three counts because it had neither adequately planned nor supervised work at height and had not taken suitable measures to prevent falls. Fine of £300,000 plus costs. The company is a micro-enterprise with fewer than 10 employees.

What organisations can take from it

Floor openings on construction sites must be covered with load-bearing covers or guarded at all times – new and temporary workers in particular do not know where the hazards are.

Relevance to training and awareness

Fall protection at openings; induction of new workers

Authority / court
Leeds Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Work at Height Regulations 2005
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Employees
Under 50
Published
21 Sep 2026

Original amount 300,000 GBP, converted at the ECB reference rate of 16 Sep 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Sep 2026 AIFM Capital ABAIFM Capital: 2 million SEK for inadequate selection and oversight of fund managers SwedenOrganisational requirements €177,187

As a so-called fund hotel, the company had its funds managed by other firms, but examined these delegation agreements only insufficiently, did not take the related decisions properly and did not monitor the funds’ returns in relation to risk closely enough. The Swedish financial supervisory authority Finansinspektionen (FI) issued a remark and imposed 2 million SEK; no damage to investors was established.

What organisations can take from it

Outsourcing tasks does not outsource responsibility: document the selection of service providers, the decisions taken and ongoing oversight.

Authority / court
Finansinspektionen (FI)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Schwedisches Fondsrecht – Regeln zur Delegation der Fondsverwaltung und deren Überwachung
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Mitigating circumstances
No established damage to investors; remedial measures already taken during the investigation.
Published
16 Sep 2026

Original amount 2,000,000 SEK, converted at the ECB reference rate of 16 Sep 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Sep 2026 Wallester ASFinancial supervisor orders Wallester to remedy governance and AML deficiencies EstoniaInternal controls Order

Following an on-site inspection, the Finantsinspektsioon (Estonian Financial Supervision Authority) issued an order requiring the payment institution Wallester to remedy, by 31 December, deficiencies in governance and control functions (separation of the lines of defence, internal rules), in safeguarding customer funds and in the staffing of its anti-money laundering and counter-terrorist financing function. Date = publication of the press release.

What organisations can take from it

Fast-growing payment service providers must let their compliance, AML and internal audit functions grow with them in terms of staffing and organisation.

Authority / court
Finantsinspektsioon (Estnische Finanzaufsicht)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
Aufsichtsrechtliche Anordnung (ettekirjutus) der Finantsinspektsioon
Action
Order
Status of proceedings
unknown
Sector
Financial services and insurance
Published
16 Sep 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Sep 2026 Ministerstvo životního prostředí (Umweltministerium der Tschechischen Republik)Ministry of the Environment: 300,000 CZK over unresolved conflict of interest of an insurance broker CzechiaOther €12,350

In an insurance tender in 2024 worth around 200 million CZK, the ministry had parts of the tender documents drawn up by a broker who could later receive commissions from the winning insurer. As the contracting authority took no measures against the conflict of interest, the Úřad pro ochranu hospodářské soutěže (Czech Office for the Protection of Competition, ÚOHS) imposed a final fine of 300,000 CZK.

What organisations can take from it

External advisers who help draft tender documents must not benefit from the outcome – examine and document conflicts of interest before the tender.

Relevance to training and awareness

Conflicts of interest of external advisers in procurement procedures

Authority / court
Úřad pro ochranu hospodářské soutěže (ÚOHS)
Area of law
Other
Legal basis
Gesetz über die Vergabe öffentlicher Aufträge (Pflicht zur Vermeidung von Interessenkonflikten)
Action
Fine
Status of proceedings
final
Sector
Public sector
Culpability
negligent
Published
15 Sep 2026

Original amount 300,000 CZK, converted at the ECB reference rate of 15 Sep 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

14 Sep 2026 Fire Protection Recycling LimitedFire extinguisher explodes fatally during recycling – 40,000 GBP fine United KingdomWorkplace safety and accidents €46,730

While decommissioned powder extinguishers were being discharged in Oldbury in 2023, a cartridge-type extinguisher exploded and struck a 37-year-old employee on the head, fatally injuring him. There was no risk assessment, no safe system of work, no suitable storage and no restraint system for discharging; the recycling business (20 employees according to its annual accounts) was fined 40,000 GBP plus 17,034.25 GBP in costs.

What organisations can take from it

Carry out a documented risk assessment even for routine work with pressurised containers and provide technical restraints – experience is no substitute for a safeguard.

Authority / court
Birmingham Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2(1) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Published
17 Sep 2026

Original amount 40,000 GBP, converted at the ECB reference rate of 14 Sep 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Sep 2026 Dompé U.S. Inc.Dompé U.S.: 32 million USD – Medicare patients’ co-payments covered via foundations USAGifts, hospitality and benefits €27.5m

From 2018 to 2021, the pharmaceutical manufacturer allegedly used two patient assistance foundations to fund Medicare beneficiaries’ co-payments for its drug Oxervate in order to promote its sales. Following a self-disclosure, Dompé paid 32 million USD.

What organisations can take from it

Benefits flowing to customers via foundations or other third parties remain benefits provided by the company – donations to patient assistance programmes require strict independence.

Relevance to training and awareness

Benefits to patients and customers via third parties

Authority / court
U.S. Department of Justice / U.S. Attorney's Office, District of Massachusetts
Area of law
Bribery and corruption · Gifts, hospitality and benefits
Legal basis
Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
Action
Other
Status of proceedings
final
Sector
Chemicals and pharmaceuticals
Mitigating circumstances
Self-disclosure.

Original amount 32,000,000 USD, converted at the ECB reference rate of 10 Sep 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Sep 2026 Southern Glazer’s Wine and Spirits, LLCSouthern Glazer’s: USD 12.5m over benefits to retailer employees USACommercial bribery €10.8m

The nationwide wine and spirits distributor headquartered in Florida entered into a non-prosecution agreement and pays USD 12.5 million. It admitted that executives and employees had for years provided employees of alcohol retailers, including grocery chains in California, with cash, prepaid gift cards, flights, golf trips, resort stays and luxury goods to influence the purchase and placement of its products, concealing this through third-party vendors and false invoices. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Benefits to customers' employees are commercial bribery – marketing budgets run through third-party vendors need document and recipient checks.

Relevance to training and awareness

Benefits to buyers and employees of trade customers; concealment through third-party vendors and false invoices

Authority / court
U.S. Attorney's Office, Northern District of California (U.S. Department of Justice)
Area of law
Bribery and corruption · Commercial bribery
Action
Other
Status of proceedings
final
Sector
Retail and e-commerce
Liability of senior managers
According to the announcement, several California-based executives, including vice presidents, were directly involved.
Published
10 Sep 2026

Original amount 12,500,000 USD, converted at the ECB reference rate of 10 Sep 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Sep 2026 Algoma Steel Inc.Algoma Steel: 1.2 million CAD fine for gear oil in the St. Marys River Canada, ONWaste and hazardous substances €747,710

In June 2022, a gear oil tank overflowed at the steelworks in Sault Ste. Marie; an estimated 1,000 to 1,250 litres of oil entered the St. Marys River, harmful to fish and migratory birds. The company pleaded guilty to two counts and is paying 1.2 million CAD into the Environmental Damages Fund; its name is listed in the Environmental Offenders Registry.

What organisations can take from it

Even small tank overflows near watercourses lead to fines in the millions – overfill protection and containment systems are mandatory.

Relevance to training and awareness

Filling and monitoring oil tanks

Authority / court
Ontario Court of Justice, Sault Ste. Marie (Ermittlungen: Environment and Climate Change Canada)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Fisheries Act, Subsection 36(3); Migratory Birds Convention Act, 1994, Subsection 5.1(1)
Action
Fine
Status of proceedings
unknown
Sector
Steel and metals
Mitigating circumstances
Guilty plea.
Published
11 Sep 2026

Original amount 1,200,000 CAD, converted at the ECB reference rate of 10 Sep 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 Sep 2026 United Utilities Water LimitedUnited Utilities: record fine of 900,000 GBP after sewage flood on the Fylde coast United KingdomEmissions and permits €1.12m

Following a partial pipe collapse at the Fleetwood wastewater treatment works, untreated sewage flowed from three pumping stations into the Irish Sea for over 35 hours in June 2023; seven bathing waters were affected and shellfish beds were closed. The water company pleaded guilty to five offences and must pay a fine of 900,000 GBP, 62,225 GBP in costs and a 2,000 GBP victim surcharge. According to the annual accounts filed with the UK companies register for financial year 2026, the company had around 6,678 full-time equivalent employees.

What organisations can take from it

The condition and redundancy of critical wastewater infrastructure are a permit obligation; the Environment Agency assessed the failure as reckless and in the highest harm category.

Authority / court
Preston Magistrates' Court (Anklage: Environment Agency)
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Regulation 38(2) Environmental Permitting (England and Wales) Regulations 2016
Action
Fine
Status of proceedings
unknown
Sector
Energy and utilities
Employees
1,000 to 9,999
Culpability
negligent
Mitigating circumstances
Around 38 million GBP invested in response and repair, and a voluntary payment of 250,000 GBP to Blackpool Council.
Published
8 Sep 2026

Original amount 964,225 GBP, converted at the ECB reference rate of 8 Sep 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Sep 2026 Samworth Brothers LimitedSamworth Brothers: £594,000 after two workers scalded at steam line United KingdomWorkplace safety and accidents €691,518

At the Kettleby Foods plant in Melton Mowbray, an employee and a contractor were scalded with hot water while replacing a leaking gasket on an isolation valve of a steam line (burns to 4–5 % and 9 % of their body surface respectively). The Health and Safety Executive (HSE) found that the task had neither been assessed nor documented as a safe system of work, isolation and lock-off procedures had not been applied, fall protection was missing and supervision was inadequate. Following a guilty plea, a fine of £594,000, plus £6,000 compensation for the injured employee, costs and a victim surcharge.

What organisations can take from it

Maintenance on steam and pressure lines requires a written isolation and lock-off procedure that is supervised on site.

Relevance to training and awareness

Isolating and locking off equipment during maintenance (lockout/tagout)

Authority / court
Birmingham Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2 Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
final
Sector
Food and agriculture
Published
16 Sep 2026

Original amount 594,000 GBP, converted at the ECB reference rate of 4 Sep 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Sep 2026 In Construction LimitedHong Kong: HKD 640,000 fine for In Construction after fatal crane accident Hong KongWorkplace safety and accidents €70,237

In Construction was fined HKD 640,000 for breaches of the Factories and Industrial Undertakings Ordinance and the regulations on lifting appliances and safety management. On a foundation construction site in Tai Po on 30 September 2025, a female worker had been trapped between the rear end of a slewing crawler crane and the railing of a steel platform and later died.

What organisations can take from it

A crane's slewing zone must be cordoned off, especially on confined platforms where railings create a crushing point.

Relevance to training and awareness

Securing the danger zone of slewing cranes

Authority / court
Shatin Magistrates' Courts, Hongkong (Anklage: Labour Department)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Factories and Industrial Undertakings Ordinance; Factories and Industrial Undertakings (Lifting Appliances and Lifting Gear) Regulations; Factories and Industrial Undertakings (Safety Management) Regulation
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Published
4 Sep 2026

Original amount 640,000 HKD, converted at the ECB reference rate of 4 Sep 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Sep 2026 Banco Bilbao Vizcaya Argentaria, S.A. – Niederlassung Italien (BBVA Italia)Garante: 5.5 million EUR against BBVA Italia over advertising despite objection ItalyMarketing and consent €5.51m

For seven months (October 2025 to May 2026), the bank continued to send a customer advertising via its app, although he had objected several times. The Italian data protection authority (Garante per la protezione dei dati personali) also found deficient systems for implementing objections and inaccurate information about the processing, and imposed 5,508,000 EUR (Provvedimento No. 613).

What organisations can take from it

An objection to advertising must take effect immediately and reliably across all channels – including app messages.

Authority / court
Garante per la protezione dei dati personali
Area of law
Data protection · Marketing and consent
Legal basis
Art. 5 Abs. 1 lit. a, Art. 12, 21, 24 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Published
11 Sep 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Sep 2026 B&Q LimitedB&Q: publicly named for minimum wage underpayment of 4,530 workers United KingdomMinimum wage and undeclared work €530,980

In the 24th naming round of the National Minimum Wage scheme, B&Q was listed first: the company had underpaid 4,530 workers by a total of £456,934.72 (period according to the list: 15 May 2020 to 31 March 2025). Named employers had to pay the arrears and additionally received penalties whose amount per employer is not published (around £7m for the whole round). The amount is the arrears ordered to be repaid, not a fine.

What organisations can take from it

Minimum wage errors in payroll quickly affect thousands of workers and are made public.

Relevance to training and awareness

Minimum-wage-compliant payroll

Authority / court
Department for Business, Innovation, Science and Trade / Fair Work Agency (Ermittlung: HM Revenue and Customs)
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Action
Order
Status of proceedings
final
Sector
Retail and e-commerce
Published
3 Sep 2026

Original amount 456,934.72 GBP, converted at the ECB reference rate of 3 Sep 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Sep 2026 BDW Trading (Barratt Redrow)Barratt Redrow subsidiary BDW pays 201,500 GBP to environmental projects after silt entered brooks United KingdomEmissions and permits €234,153

At the Ladden Garden Village construction site in Yate, a subcontractor washed silt from the site drainage into two brooks over six days in July 2022. The Environment Agency accepted an Enforcement Undertaking: BDW is paying 201,500 GBP to three environmental and charitable projects, bears the investigation costs and had already invested over 180,000 GBP in remediation, training and improved surface water management. According to the annual accounts filed with the UK companies register for financial year 2025, the company had around 5,217 employees.

What organisations can take from it

Developers are liable for environmental damage caused by their subcontractors; clear procedures and training on handling surface water prevent costly proceedings.

Relevance to training and awareness

Protecting watercourses on construction sites and managing subcontractors

Missing or inadequate training played a role in the decision.

Authority / court
Environment Agency
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Environmental Civil Sanctions (England) Order 2010 (Enforcement Undertaking)
Action
Other
Status of proceedings
final
Sector
Construction and real estate
Employees
1,000 to 9,999
Mitigating circumstances
Acceptance of responsibility, remediation, training of employees and application for a discharge permit.
Published
3 Sep 2026

Original amount 201,500 GBP, converted at the ECB reference rate of 3 Sep 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Sep 2026 SSM Investments LimitedTakeaway operator SSM Investments: 90,000 NZD penalty for worker exploitation New ZealandMinimum wage and undeclared work €45,501

The restaurant and takeaway business with branches in Auckland and Cromwell did not pay five employees the minimum wage, denied holiday, public holiday and sick pay, made unlawful deductions from wages and kept no accurate wage, time and leave records. After the Employment Relations Authority (ERA, New Zealand's employment tribunal) had already ordered arrears of 147,001 NZD, it imposed a penalty of 90,000 NZD against the company following an investigation by the Labour Inspectorate (labour standards enforcement unit of the Ministry of Business, Innovation and Employment). Measures against individuals are not set out here.

What organisations can take from it

Minimum wage, holiday pay and proper time records are mandatory.

Relevance to training and awareness

Minimum wage, holiday pay and permissible wage deductions

Authority / court
Employment Relations Authority (Verfahren des Labour Inspectorate, MBIE)
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Action
Fine
Status of proceedings
unknown
Sector
Food and agriculture
Mitigating circumstances
The company acknowledged its wrongdoing.
Liability of senior managers
Measures against individuals are not set out here.
Published
3 Sep 2026

Original amount 90,000 NZD, converted at the ECB reference rate of 3 Sep 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Sep 2026 Azienda Sanitaria Universitaria Friuli Centrale (ASUFC)Garante: Udine hospital group pays 24,000 EUR for viewing a colleague's patient record ItalyEmployee data €24,000

Hospital staff opened a colleague's electronic health record to organise duty rosters during Covid rather than for treatment purposes. Technical barriers limiting access to treating staff were lacking; the Italian data protection authority (Garante per la protezione dei dati personali) imposed 24,000 EUR (Provvedimento No. 616).

What organisations can take from it

Patient records may only be opened for treatment – include this in training and secure it technically through role-based rights and logging.

Relevance to training and awareness

Purpose limitation when accessing patient records

Authority / court
Garante per la protezione dei dati personali
Area of law
Data protection · Employee data
Legal basis
Art. 5 Abs. 1 lit. a, b, c, f, Art. 9, 25, 32 DSGVO; Art. 75 Codice privacy; Linee guida dossier sanitario
Action
Fine
Status of proceedings
unknown
Sector
Healthcare
Published
11 Sep 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Sep 2026 ASIS – Azienda Speciale per la gestione degli Impianti Sportivi (Trento)Garante: 8,000 EUR for cameras in swimming pool changing rooms of a Trentino sports operator ItalyVideo surveillance €8,000

Since 2007, the municipal sports facilities operator had had cameras in the changing rooms of a swimming pool that recorded the locker area. The Italian data protection authority (Garante per la protezione dei dati personali) found no sound legal basis, incomplete notices and a 72-hour retention period not justified by a necessity assessment, and imposed 8,000 EUR (Provvedimento No. 619); the cameras were removed during the proceedings.

What organisations can take from it

Changing rooms and comparably intimate areas are off limits for video surveillance – even when theft prevention is the motive.

Authority / court
Garante per la protezione dei dati personali
Area of law
Data protection · Video surveillance
Legal basis
Art. 5 Abs. 1 lit. a, Art. 6 Abs. 1 lit. c und e DSGVO; Art. 2-ter Codice privacy
Action
Fine
Status of proceedings
unknown
Sector
Public sector
Published
11 Sep 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Sep 2026 Cervejaria Petrópolis S.A. (em recuperação judicial); Imcopa Importação, Exportação e Indústria de Óleos S.A.CADE fines Cervejaria Petrópolis for early closing of Imcopa takeover BrazilMerger control €231,813

The Tribunal of the Conselho Administrativo de Defesa Econômica (CADE, Brazilian competition authority) unanimously found that Cervejaria Petrópolis had taken control of the oil producer Imcopa before the legally required notification (gun jumping) and imposed a fine of 1,382,418.22 BRL. According to the investigation, the acquisition was completed on 19 March 2024 but notified only on 9 April 2024; CADE itself cleared the transaction without conditions in April 2024. The argument that the change of control resulted from court decisions in the judicial reorganisation proceedings (recuperação judicial) did not persuade the authority. The amount and the facts have not been confirmed against the primary source.

What organisations can take from it

Acquisitions in a restructuring or insolvency context, too, may be completed only after notification and clearance.

Relevance to training and awareness

Standstill obligation before clearance in merger control (gun jumping)

Authority / court
Conselho Administrativo de Defesa Econômica (CADE), Tribunal Administrativo
Area of law
Competition law · Merger control
Legal basis
Art. 88 § 3 Lei nº 12.529/2011 (Lei de Defesa da Concorrência)
Action
Fine
Status of proceedings
unknown
Sector
Food and agriculture
Published
8 Sep 2026

Original amount 1,382,418.22 BRL, converted at the ECB reference rate of 2 Sep 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 Sep 2026 PPS Metal Recycling LtdScrapyard: £40,000 fine after metal pile collapses on father and son United KingdomWorkplace safety and accidents €46,699

In February 2025, a pile of scrap collapsed on a father and his son at the metal recycler's site while an excavator had been working near them for around 20 minutes; one of them suffered a broken leg. Pedestrians were separated neither from machinery nor from unstable stockpiles, even though there had been a near miss involving the same excavator shortly before. Fine of £40,000 plus £6,181 costs. According to the annual accounts filed with the UK companies register for financial year 2025, the company had around 18 employees.

What organisations can take from it

Companies that allow customers or visitors onto a site with machinery must physically separate pedestrians and vehicles and treat near misses as a warning sign.

Authority / court
Grimsby Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 3(1) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
final
Sector
Steel and metals
Employees
Under 50
Mitigating circumstances
After the accident, a separate unloading zone, signage, supervised procedures and fenced-off walkways were introduced.
Published
2 Sep 2026

Original amount 40,000 GBP, converted at the ECB reference rate of 1 Sep 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

31 Aug 2026 EM@NEY P.L.C.Malta: EM@NEY pays 97,622 EUR under settlement for late bank account register reports MaltaMoney laundering and terrorist financing €97,622

The financial institution did not deliver on time the data due every seven days to the Centralised Bank Account Register (CBAR). The Financial Intelligence Analysis Unit (FIAU) set a fine of 162,704 EUR, which was reduced by 40% to 97,622 EUR under a settlement pursuant to its 2026 settlement policy.

What organisations can take from it

Recurring mandatory reports need deadline monitoring with escalation – otherwise individual omissions add up to six-figure sums.

Authority / court
Financial Intelligence Analysis Unit (FIAU)
Area of law
Money laundering and terrorist financing
Legal basis
Reg. 4(2), 8, 9 CBAR Regulations (S.L. 373.03)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Settlement with 40% reduction
Published
4 Sep 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

28 Aug 2026 MSC Shipmanagement Limited; Hong Kong Spirit Shipping and Trading LimitedMSC Shipmanagement: 1.75 million USD fine for secretly discharging oily bilge water USAWaste and hazardous substances €1.5m

On board the MSC Samira III, oily bilge water was pumped overboard via the sewage tank, bypassing the oily water separator, in 2024/2025; the oil content monitoring was manipulated and the oil record book, which was presented to the Coast Guard in Philadelphia, was falsified. The operator and the owner each pleaded guilty to two counts under the Act to Prevent Pollution from Ships (APPS) and are paying a combined 1.75 million USD; in addition, there are four years of probation.

What organisations can take from it

Shipping companies must actively monitor practice on board and the oil record book, because instructions given by individual officers are attributed to the company under criminal law.

Relevance to training and awareness

MARPOL obligations on board, oil record book and reporting channels for crews

Authority / court
U.S. District Court for the Eastern District of Pennsylvania (Anklage: DOJ Environment and Natural Resources Division)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Act to Prevent Pollution from Ships (APPS), 33 U.S.C. § 1908
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Employees
10,000 or more
Culpability
intentional
Published
28 Aug 2026

Original amount 1,750,000 USD, converted at the ECB reference rate of 28 Aug 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Aug 2026 Maple Lodge Farms Ltd.Poultry processor Maple Lodge Farms: CA$500,000 after CO2 leak without gas detection system Canada, ONWorkplace safety and accidents €309,578

In March 2024, a CO2 hose on a vacuum mixer ruptured in the deli area of the plant in Brampton; around 16,000 pounds of carbon dioxide escaped and one worker suffered life-threatening injuries. There was no CO2 sensor with an alarm. Following a guilty plea, a fine of CA$500,000 plus a 25 % victim fine surcharge.

What organisations can take from it

Wherever refrigerant or inert gases are used in quantity, a gas detection system is part of the basic equipment.

Authority / court
Provincial Offences Court Brampton (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 25(2)(h) Occupational Health and Safety Act (Ontario)
Action
Fine
Status of proceedings
final
Sector
Food and agriculture
Mitigating circumstances
Guilty plea; permanently installed CO2 sensor after the incident.
Published
27 Aug 2026

Original amount 500,000 CAD, converted at the ECB reference rate of 27 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Aug 2026 MiFinity Malta LimitedMalta: MiFinity pays 160,099 EUR following anti-money laundering examination MaltaCustomer due diligence €160,099

At the payment institution, the customer risk assessment had only been introduced after business had started, some customers remained unassessed, and customer profiles were based on transaction thresholds rather than on risk. The Financial Intelligence Analysis Unit (FIAU) set a fine of 266,833 EUR and a follow-up directive; under a settlement, the fine was reduced by 40% to 160,099 EUR.

What organisations can take from it

A customer risk assessment belongs before business starts, not in a later remediation project.

Relevance to training and awareness

Risk-based customer profiles and source of funds

Authority / court
Financial Intelligence Analysis Unit (FIAU)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Reg. 2(1), 5(5)(a)(ii), 7(1)(c), 7(2)(a), 21, 22 PMLFTR
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Settlement with 40% reduction; remediation demonstrated
Published
2 Sep 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Aug 2026 Flower bulb business failed to disclose hours of Polish seasonal workers – fine of around 95,600 EUR NetherlandsMinimum wage and undeclared work €95,588

A lily and tulip grower with an average of around 50 (at peak 75) employees, where Polish migrant workers are employed (anonymised in the judgment), was unable to produce sufficient records of hours worked and wages paid for 18 employees for September 2020 to February 2021. The Dutch Minister of Social Affairs and Employment (Minister van Sociale Zaken en Werkgelegenheid) imposed 118,000 EUR in 2024 (112,100 EUR after objection); the North Netherlands District Court (Rechtbank Noord-Nederland) reduced the fine to 95,587.50 EUR, partly because of measures taken and excessively long proceedings.

What organisations can take from it

Companies employing seasonal workers must be able to document hours and wage payments for each person without gaps – missing records are fined separately for each employee.

Authority / court
Rechtbank Noord-Nederland (Bußgeld: Minister van Sociale Zaken en Werkgelegenheid / Nederlandse Arbeidsinspectie)
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
Art. 18b Abs. 2 Wet minimumloon en minimumvakantiebijslag (Wml)
Action
Fine
Status of proceedings
reduced
Sector
Food and agriculture
Employees
50 to 249
Mitigating circumstances
Reduction of 12.5 % for appropriate measures, 5 % for delay and 2,500 EUR for exceeding the reasonable length of proceedings.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Aug 2026 O2 Czech Republic a.s.; SHERLOG Technology, a.s.O2 Czech Republic and SHERLOG: 280 million CZK for customer allocation in vehicle tracking CzechiaCartels and collusion €11.7m

From December 2012 to June 2022, the two companies allocated customers for vehicle tracking and electronic logbook services between themselves and coordinated bids, including in public tenders. At first instance, the Úřad pro ochranu hospodářské soutěže (Czech Office for the Protection of Competition, ÚOHS) fined O2 262.32 million CZK and SHERLOG 18.357 million CZK and imposed a six-month ban on public contracts; for O2, the fine was increased instead of a procurement ban.

What organisations can take from it

Do not let sales cooperation with competitors turn into customer allocation – e-mail arrangements about individual tenders are the typical evidence.

Relevance to training and awareness

Coordination with cooperation partners on customers and tenders

Authority / court
Úřad pro ochranu hospodářské soutěže (ÚOHS)
Area of law
Competition law · Cartels and collusion
Legal basis
Tschechisches Wettbewerbsgesetz, Art. 101 AEUV
Action
Fine
Status of proceedings
unknown
Sector
Telecoms, IT and software
Culpability
intentional
Published
26 Aug 2026

Original amount 280,677,000 CZK, converted at the ECB reference rate of 26 Aug 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Aug 2026 Wolt DenmarkWolt: Competition Council finds abuse of dominant position vis-à-vis restaurants DenmarkAbuse of market power Order

In 2022–2024, the delivery service used a standard clause to prohibit restaurants from being cheaper on their own channels than on Wolt, while at the same time being able to grant discounts without consultation and to compensate customers up to 400 DKK at the restaurants’ expense. The Konkurrencerådet (Danish Competition Council) ordered the practice to cease, required Wolt to inform all restaurants and intends to enforce a fine through the courts.

What organisations can take from it

Platforms with a high market share should have parity clauses and unilateral cost shifting in standard terms reviewed under competition law.

Authority / court
Konkurrencerådet (Danish Competition Council)
Area of law
Competition law · Abuse of market power
Legal basis
Konkurrenceloven; AEUV Art. 102
Action
Order
Status of proceedings
unknown
Sector
Media and online platforms
Published
26 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

25 Aug 2026 Health Service Executive (HSE)Irish health service HSE: 645,000 EUR for neglected paper patient records IrelandData breaches and data security €645,000

In 2023, intruders gained access to two former psychiatric hospitals and posted videos of the patient records stored there online. An inspection of twelve sites found records with mould, water and animal damage in unsuitable rooms, up to and including shipping containers. Ireland's Data Protection Commission (DPC) imposed a fine of 645,000 EUR, issued a reprimand and ordered audits and the relocation of records.

What organisations can take from it

Data protection also applies to paper archives in disused buildings – retention requires an inventory, erasure periods and physical security.

Relevance to training and awareness

Physical security and retention of paper records

Authority / court
Data Protection Commission (DPC)
Area of law
Data protection · Data breaches and data security
Legal basis
DSGVO Art. 5 Abs. 1 lit. e und f, 32 Abs. 1, 33 Abs. 1, 34 Abs. 1
Action
Fine
Status of proceedings
final
Sector
Public sector
Employees
10,000 or more
Published
2 Sep 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

25 Aug 2026 ExxonMobil Chemical LimitedExxonMobil Chemical: 267,000 GBP for five hydrocarbon leaks at Fife ethylene plant United KingdomWorkplace safety and accidents €312,098

Between February 2018 and September 2019, five leaks of highly flammable hydrocarbons occurred at the Mossmorran major hazard site (COMAH upper tier), all caused by corrosion under insulation; around 82 tonnes escaped in one leak. During a routine inspection in May 2019, inspectors of the Health and Safety Executive (HSE) smelled escaping gas – the company had known about this leak for around four months and had continued production without additional precautions. The inspection arrangements for insulated pipework were inadequate; fine of 267,000 GBP.

What organisations can take from it

Recurring damage patterns must change the inspection concept – visual inspections from the ground are not sufficient for insulated pipework.

Authority / court
Health and Safety Executive (Kirkcaldy Sheriff Court)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Provision and Use of Work Equipment Regulations 1998, reg. 6(2); Health and Safety at Work etc. Act 1974, s. 33(1)(c)
Action
Fine
Status of proceedings
final
Sector
Chemicals and pharmaceuticals
Employees
10,000 or more
Published
26 Aug 2026

Original amount 267,000 GBP, converted at the ECB reference rate of 25 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

25 Aug 2026 Elizabeta Promet d.o.o., SolinCroatia: 10,000 EUR against Elizabeta Promet for deliveries without a written contract CroatiaAbuse of market power €10,000

As a buyer with significant bargaining power, the company from Solin purchased agricultural and food products from two suppliers without written contracts. The Agencija za zaštitu tržišnog natjecanja (Croatian Competition Agency, AZTN) considered this an unfair trading practice and, taking mitigating circumstances into account, imposed 10,000 EUR (date = publication).

What organisations can take from it

In food purchasing, the mere absence of written supply contracts is an infringement – a simple contract standard prevents this.

Relevance to training and awareness

Written form for supply contracts in food purchasing

Authority / court
Agencija za zaštitu tržišnog natjecanja (AZTN)
Area of law
Competition law · Abuse of market power
Legal basis
Zakon o zabrani nepoštenih trgovačkih praksi u lancu opskrbe hranom (ZNTP)
Action
Fine
Status of proceedings
unknown
Sector
Food and agriculture
Mitigating circumstances
Several mitigating circumstances taken into account
Published
25 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

25 Aug 2026 Wise Europe SAWise Europe: NBB order and public statement over customer due diligence failures BelgiumCustomer due diligence Order

The Banque nationale de Belgique (National Bank of Belgium) found serious anti-money laundering due diligence failures at Wise Europe SA, including in identifying and verifying customers and beneficial owners, ongoing monitoring of business relationships, analysis of atypical transactions and intra-group information sharing. It made public that Wise Europe had not complied with an order of 8 July 2025 to meet these obligations by 31 March 2026, and ordered full compliance by 31 January 2027 at the latest; no fine was published.

What organisations can take from it

Letting a supervisory deadline to remedy KYC failures lapse risks new orders and public naming.

Relevance to training and awareness

KYC and transaction monitoring at payment service providers

Authority / court
Banque nationale de Belgique / Nationale Bank van België (BNB/NBB)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Art. 13 § 1, 23, 26, 27, 35 § 1 und 45 Gesetz vom 18. September 2017 zur Verhinderung von Geldwäsche; Anordnung nach Art. 93 § 1 1°, Veröffentlichung nach Art. 93 § 2 1° und Art. 98/1 i. V. m. 135 § 3
Action
Order
Status of proceedings
unknown
Sector
Financial services and insurance
Repeat case
yes
Published
25 Aug 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

25 Aug 2026 Kommunal Landspensjonskasse Gjensidig Forsikringsselskap (KLP)KLP: binding commitments after suspected abuse in municipal pensions NorwayAbuse of market power Order

Konkurransetilsynet (Norwegian Competition Authority) made commitments offered by KLP binding and thereby closed its investigation into a possible abuse of a dominant position in public occupational pensions for municipalities. The authority was concerned that, from 2019, when a competitor entered the market, KLP had systematically discouraged municipalities from putting their occupational pension schemes out to tender; KLP now undertakes to refrain from such influence and to remedy the effects of its earlier practice. No infringement was conclusively established and no fine was imposed.

What organisations can take from it

Dominant companies must not use close customer relationships to deter customers from running tenders – even a suspicion of this can lead to binding obligations.

Relevance to training and awareness

Conduct of dominant companies towards public purchasers

Authority / court
Konkurransetilsynet
Area of law
Competition law · Abuse of market power
Legal basis
§ 12 Abs. 3 i. V. m. § 11 konkurranseloven; Art. 54 EWR-Abkommen
Action
Order
Status of proceedings
unknown
Sector
Financial services and insurance
Published
2 Sep 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Aug 2026 ByteDance Brasil Tecnologia Ltda. (TikTok)ANPD fines TikTok operator 153.77 million BRL over data of minors BrazilData protection €25.6m

The Agência Nacional de Proteção de Dados (ANPD, Brazilian data protection authority) imposed three fines totalling 153,769,671.33 BRL on ByteDance Brasil Tecnologia Ltda., which operates TikTok in Brazil (63,176,686.67 BRL each for breaches of Art. 7 and Art. 6 VIII LGPD, and 27,416,297.99 BRL for Art. 6 X LGPD). According to the decision, data of children and adolescents were processed without a valid legal basis both in the feed available without registration and when accounts were created, and effective preventive and accountability measures were lacking. The authority also ordered the deletion of data of registered adolescents aged 13 to 18 whose legal representation is not regularised within 60 working days, backed by a daily penalty of 137,081.49 BRL for each day of delay.

What organisations can take from it

Platforms that reach minors need a sound legal basis and demonstrably effective safeguards – including for services used without registration.

Relevance to training and awareness

Protecting the data of children and adolescents on online platforms

Authority / court
Agência Nacional de Proteção de Dados (ANPD), Superintendência de Fiscalização
Area of law
Data protection
Legal basis
Art. 6 VIII, Art. 6 X und Art. 7 LGPD (Lei nº 13.709/2018); Sanktionen nach Art. 52 LGPD; Resolução CD/ANPD nº 4/2023 (Regulamento de Dosimetria)
Action
Fine
Status of proceedings
unknown
Sector
Media and online platforms
Employees
10,000 or more
Published
25 Aug 2026

Original amount 153,769,671.33 BRL, converted at the ECB reference rate of 24 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Aug 2026 Container Manufacturing Ltd.Small US machinery supplier exported spare parts for can presses to Russia USAExport control and dual-use goods €857,339

Between March 2023 and March 2025, the Ohio manufacturer of presses for beverage can ends (nine employees) supplied, in ten instances, spare parts for aluminium forming tools worth around 264,700 USD – partly via the UAE and Turkey – without a licence to a Russian customer whose group also supplies defence precursors. In two instances, the company acted with knowledge of the violation; it admitted the allegations, which were brought by the US Commerce Department's Bureau of Industry and Security (BIS).

What organisations can take from it

Even small businesses with few employees must check tariff codes against Russia restrictions and treat deliveries via third countries as a warning sign.

Relevance to training and awareness

HTS-based export restrictions on Russia, diversion via third countries

Missing or inadequate training played a role in the decision.

Authority / court
U.S. Department of Commerce, Bureau of Industry and Security (BIS)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Export Administration Regulations, § 746.8(a)(5) (HTS-Codes Supplement No. 4 to Part 746), §§ 764.2(a), 764.2(e)
Action
Fine
Status of proceedings
final
Sector
Manufacturing and mechanical engineering
Employees
Under 50
Mitigating circumstances
Full cooperation; compliance programme subsequently expanded with screening, an approval process and additional export control training
Published
24 Aug 2026

Original amount 1,000,000 USD, converted at the ECB reference rate of 24 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Aug 2026 Fitnessstudiokette in Amsterdam (anonymisiert)Labour Authority: €316,875 in fines for Amsterdam gym chain NetherlandsMinimum wage and undeclared work €316,875

The Nederlandse Arbeidsinspectie (Netherlands Labour Authority) imposed fines totalling 316,875 EUR on a gym chain in Amsterdam that is not named in the release. For 25 foreign workers the required work permit or combined residence and work permit was missing, and for three people identity had not been established (Wav, Foreign Nationals Employment Act, 234,375 EUR); because of deficient records it could not be verified whether the minimum wage had been paid for all hours worked (WML, Minimum Wage and Minimum Holiday Allowance Act, 60,000 EUR), plus a breach of the Arbeidstijdenwet (Working Hours Act, 22,500 EUR). The company also received two warnings that work may be preventively halted if the same or similar breaches recur.

What organisations can take from it

Before anyone starts work, their right to work and identity must be checked and working hours must be fully recorded.

Relevance to training and awareness

Checking the right to work and recording working hours

Authority / court
Nederlandse Arbeidsinspectie
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
Wet arbeid vreemdelingen (Wav); Wet minimumloon en minimumvakantiebijslag (WML); Arbeidstijdenwet (ATW)
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
24 Aug 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

21 Aug 2026 Bank oder Finanzinstitut (anonymisiert)Liechtenstein: CHF 50,000 fine for due diligence and sanctions screening failures LiechtensteinCustomer due diligence €53,459

The Finanzmarktaufsicht (FMA, Liechtenstein Financial Market Authority) fined an unnamed legal person CHF 50,000 for breaches of the Sorgfaltspflichtgesetz (Due Diligence Act) – business profiles not established or updated as required, group-wide application of the due diligence standard not ensured – and of the Gesetz über die Durchsetzung internationaler Sanktionen (ISG, Act on the Enforcement of International Sanctions). The ISG provision relied on makes it an offence punishable by a fine not to carry out the sanctions screening of customer and transaction documents, or to carry it out improperly or late.

What organisations can take from it

Sanctions screening of customers and transactions must be complete and timely, and in groups the due diligence standard must also be applied at branches and subsidiaries.

Relevance to training and awareness

Sanctions screening of customers and transactions and group-wide due diligence standards

Authority / court
Finanzmarktaufsicht Liechtenstein (FMA)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Art. 31 Abs. 1 Bst. e und k Sorgfaltspflichtgesetz (SPG); Art. 11 Abs. 1a Bst. c Gesetz über die Durchsetzung internationaler Sanktionen (ISG)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance

Original amount 50,000 CHF, converted at the ECB reference rate of 21 Aug 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Aug 2026 Hopper (USA) Inc. und Hopper Inc.FTC: travel app Hopper pays 35 million USD over hidden and pre-selected fees USAMisleading advertising and pricing €30m

Despite promising no hidden fees, the travel app, according to the FTC, charged tips and fees for a VIP support service without consent because they were hidden and pre-selected, and misled users about total prices and the benefits of VIP support and price freezing. The court order against the Canadian Hopper Inc. and its US subsidiary sets 35 million USD, payable in twelve instalments. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Paid add-ons must never be pre-selected or hidden in the booking flow.

Relevance to training and awareness

Pre-selected add-ons and fees in booking flows

Authority / court
Federal Trade Commission (FTC)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Section 5 FTC Act; Rule on Unfair or Deceptive Fees (16 C.F.R. Part 464)
Action
Disgorgement of profits
Status of proceedings
final
Sector
Media and online platforms
Published
2 Jul 2026

Original amount 35,000,000 USD, converted at the ECB reference rate of 20 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Aug 2026 QuinnBet (Gibraltar) LimitedQuinnBet: £415,986 over anti-money laundering and financial vulnerability check failings United KingdomInternal controls €485,256

The operator of quinnbet.com will pay £415,986 in lieu of a financial penalty to the Consolidated Fund (the UK Government's general account) under a settlement and contribute to the Commission's investigation costs. The settlement also includes a disgorgement of £193,118, which is not included in the amount shown. A compliance assessment found breaches of the anti-money laundering licence condition LC 12.1.1 paras. 2 and 3 (March 2023 to August 2025) and of the customer interaction requirements under SRCP 3.4.3; following an error during a platform migration, some of the required financial vulnerability checks under SRCP 3.4.4 were also not carried out between February and May 2025. It is the first enforcement action against the company.

What organisations can take from it

Financial vulnerability checks are a licence requirement that must continue without gaps, including during technical changeovers.

Relevance to training and awareness

Financial vulnerability checks and AML controls in online betting

Authority / court
Gambling Commission
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
s. 116 Gambling Act 2005; LC 12.1.1 Abs. 2 und 3, SRCP 3.4.3 und SRCP 3.4.4 Abs. 1 der Licence Conditions and Codes of Practice (LCCP)
Action
Fine
Status of proceedings
final
Sector
Other
Repeat case
no
Mitigating circumstances
No previous enforcement action, a swift action plan, full cooperation, early voluntary reporting of some of the failings, voluntary divestment of the funds gained from them and early acceptance of the failings.
Published
20 Aug 2026

Original amount 415,986 GBP, converted at the ECB reference rate of 20 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Aug 2026 IPMF LLC (NaturPak)NaturPak: $364,100 proposed after three deaths caused by bursting kettle lids USAWorkplace safety and accidents €311,703

At the food plant in Janesville (Wisconsin), the lids of pressurised industrial kettles opened in February and March 2026, scalding workers with steam and hot liquid; three people died. The U.S. Occupational Safety and Health Administration (OSHA) proposed a total of $364,100 for both inspections combined, including repeat violations relating to fall protection and lockout/tagout.

What organisations can take from it

After a serious accident, the technical cause must be eliminated immediately – otherwise, as here, a second similar incident may follow.

Authority / court
U.S. Department of Labor – Occupational Safety and Health Administration (OSHA)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Occupational Safety and Health Act of 1970; 29 CFR 1910 (u. a. Lockout/Tagout, Absturzsicherung, persönliche Schutzausrüstung)
Action
Fine
Status of proceedings
unknown
Sector
Food and agriculture
Repeat case
yes
Published
20 Aug 2026

Original amount 364,100 USD, converted at the ECB reference rate of 20 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Aug 2026 Truro Sawmills LimitedCornwall sawmill ignores three improvement notices: 20,000 GBP United KingdomWorkplace safety and accidents €23,330

According to the HSE, the sawmill failed to protect employees from wood dust (no face-fit testing for respiratory protective equipment, no health surveillance) and let staff drive lift trucks without training; three improvement notices from the HSE (Health and Safety Executive, Britain's workplace safety regulator) were not complied with. The court fined the company, a micro-entity, 20,000 GBP plus 5,000 GBP in costs.

What organisations can take from it

Treat improvement notices from the regulator as binding deadlines, not recommendations; ignoring them risks a fine.

Relevance to training and awareness

Lift truck training and protection against wood dust

Missing or inadequate training played a role in the decision.

Authority / court
Truro Crown Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2(1) und Section 33(1)(g) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Liability of senior managers
Measures against individuals are not reported here.
Published
21 Aug 2026

Original amount 20,000 GBP, converted at the ECB reference rate of 20 Aug 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Aug 2026 Grace Motors Limited (Grace Construction)Grace Construction: 38,500 NZD for working at height despite a prohibition notice New ZealandWorkplace safety and accidents €19,586

At a site for two-storey residential units in Kelston (Auckland), workers were working on the upper floor without adequate fall protection, and the site also had temporary platforms, partially removed scaffolding and unsecured ladders; WorkSafe (New Zealand's workplace health and safety regulator) therefore prohibited work at height on the second floor by a prohibition notice on 30 August 2024. Because work continued there on 2 and 4 September 2024 nonetheless, the Waitakere District Court imposed a fine of 38,500 NZD on 20 August 2026, plus costs of 1,099.10 NZD.

What organisations can take from it

A prohibition notice means an immediate stop to the work – site management must actively enforce it until the risk has demonstrably been remedied.

Relevance to training and awareness

Fall protection and compliance with regulatory stop-work orders

Authority / court
Waitakere District Court (Anklage: WorkSafe New Zealand)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Health and Safety at Work Act 2015, s 107(1), (2)(b)
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Liability of senior managers
The prohibition notice had been issued to one of the directors.
Published
4 Sep 2026

Original amount 38,500 NZD, converted at the ECB reference rate of 20 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Aug 2026 Poliserv JG (PJG) SRLPhishing on admin account – Poliserv JG must pay 3,000 EUR RomaniaData breaches and data security €2,998

Attackers obtained the credentials of a user account with administrator rights through phishing and accessed customer data. The Romanian data protection authority (ANSPDCP) criticised the lack of technical and organisational measures and of regular effectiveness testing, imposed 15,728 lei (3,000 EUR) and ordered regular employee training, including on recognising phishing e-mails. Date = publication of the press release; according to the authority, the investigation was concluded in the previous month.

What organisations can take from it

Admin accounts need MFA, and all employees must be able to recognise phishing – the supervisory authority now expressly orders training.

Relevance to training and awareness

Phishing recognition, protection of privileged accounts

Missing or inadequate training played a role in the decision.

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 32 Abs. 1 lit. b und Abs. 2 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
19 Aug 2026

Original amount 15,728 RON, converted at the ECB reference rate of 19 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Aug 2026 Sioux Erosion Control Inc.DOJ: jury convicts erosion control firm of price fixing in Oklahoma road construction USACartels and collusion –

A jury found Sioux Erosion Control guilty of having fixed prices for erosion control services, allocated contracts regionally and rigged bids on publicly funded road construction projects in Oklahoma (more than 100 million USD) from 2017 to 2023. Sentencing was still pending; the decision is not final.

What organisations can take from it

Subcontractors in public road construction are also targeted by prosecutors.

Relevance to training and awareness

Price-fixing and territorial agreements for subcontracted services in road construction

Authority / court
U.S. Department of Justice, Antitrust Division
Area of law
Competition law · Cartels and collusion
Legal basis
Section 1 Sherman Act
Status of proceedings
unknown
Sector
Construction and real estate
Liability of senior managers
Measures against individuals are not reported here.
Published
20 Aug 2026

Checked against the official source on 28 Sep 2026 · Version 4 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Aug 2026 Pluxee Česká republika a.s.; Edenred CZ s.r.o.; Up Česká republika s.r.o.Meal voucher cartel: 279 million CZK against Pluxee, Edenred and Up upheld with final effect CzechiaCartels and collusion €11.5m

From 2004 to 2018, the three issuers of paper meal vouchers coordinated with retail chains how many vouchers would be accepted per purchase. The President of the Úřad pro ochranu hospodářské soutěže (Czech Office for the Protection of Competition, ÚOHS) dismissed the appeals against the recalculation of the fines: Pluxee 132.271 million, Edenred 101.94 million and Up 44.941 million CZK, a total of 279.152 million CZK.

What organisations can take from it

Coordinating seemingly technical conditions such as acceptance limits is also a cartel – industry discussions need clear boundaries.

Relevance to training and awareness

Coordination of terms and conditions among competitors

Authority / court
Úřad pro ochranu hospodářské soutěže (ÚOHS)
Area of law
Competition law · Cartels and collusion
Legal basis
Tschechisches Wettbewerbsgesetz, Art. 101 AEUV
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Culpability
intentional
Published
17 Aug 2026

Original amount 279,152,000 CZK, converted at the ECB reference rate of 17 Aug 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

14 Aug 2026 Plexon, Inc.Plexon: brain research recording systems to listed Chinese military medical academy – 1.7 million USD suspended USAExport control and dual-use goods €1.47m

The neurotechnology company from Dallas, described by the Bureau of Industry and Security (BIS, the export control agency of the US Department of Commerce) as small, delivered neural data acquisition systems (“OmniPlex”) and accessories worth around 179,000 USD on eight occasions in 2022/23 via its Asian distributor to the Chinese Academy of Military Medical Sciences, which has been on the Entity List (the US export control list of restricted parties) since December 2021. The penalty of 1.7 million USD is suspended for five years and then waived, provided that Plexon submits an external audit of its export compliance programme on time and commits no further violations; a five-year denial of export privileges is likewise suspended, and Plexon must also provide export control training.

What organisations can take from it

Screen orders placed via distributors against the Entity List before production – research equipment can also end up with listed military institutions.

Relevance to training and awareness

Entity List screening for orders via distribution partners

Missing or inadequate training played a role in the decision.

Authority / court
U.S. Department of Commerce, Bureau of Industry and Security (BIS)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Export Administration Regulations, 15 C.F.R. § 764.2(a), § 744.11
Action
Fine
Status of proceedings
final
Sector
Healthcare
Mitigating circumstances
Penalty and denial of export privileges fully suspended for five years, conditional on an external export control audit.
Published
14 Aug 2026

Original amount 1,700,000 USD, converted at the ECB reference rate of 14 Aug 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

14 Aug 2026 Henkel AG & Co. KGaAHenkel/Liquid Nails: court blocks takeover of Loctite’s main competitor USAMerger control Order

Henkel wanted to buy the construction adhesive brand Liquid Nails for 725 million USD from the financial investor American Industrial Partners, thereby taking over the main competitor of its Loctite brand. After a seven-day trial, the federal court, on application by the Federal Trade Commission (FTC), issued a permanent injunction against the acquisition.

What organisations can take from it

Acquiring the closest competitor carries a high risk of prohibition, even at a moderate deal volume.

Authority / court
U.S. District Court for the Southern District of New York (auf Antrag der FTC)
Area of law
Competition law · Merger control
Legal basis
Section 7 Clayton Act; Section 13(b) FTC Act (Permanent Injunction)
Action
Order
Status of proceedings
unknown
Sector
Chemicals and pharmaceuticals
Employees
10,000 or more
Published
17 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

13 Aug 2026 Dante International S.A.; Extreme Digital-eMAG Kft. (Betreiber des eMAG-Webshops)eMAG: further 225 million HUF for unfulfilled commitments HungaryConsumer protection and online retail €620,091

In 2021, the operators of the online retailer eMAG had committed to a support programme for Hungarian businesses, but once again implemented it only partially and not with the prescribed content. In the follow-up review, the Gazdasági Versenyhivatal (Hungarian Competition Authority, GVH) imposed 225 million HUF; in total, the operators have already received fines of 710 million HUF.

What organisations can take from it

Commitments made binding by an authority require dedicated implementation and evidence controlling – otherwise the next fine follows.

Authority / court
Gazdasági Versenyhivatal (GVH)
Area of law
Consumer protection and online retail
Legal basis
Nachprüfungsverfahren zu verbindlichen Zusagen
Action
Fine
Status of proceedings
final
Sector
Retail and e-commerce
Repeat case
yes
Mitigating circumstances
The companies acknowledged the failures and waived legal remedies.
Published
13 Aug 2026

Original amount 225,000,000 HUF, converted at the ECB reference rate of 13 Aug 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

13 Aug 2026 Plattform für Freelancer und neun entleihende Unternehmen (anonymisiert)Labour Authority fines freelance platform and nine hirers NetherlandsMinimum wage and undeclared work €153,300

The Nederlandse Arbeidsinspectie (Netherlands Labour Authority) imposed fines totalling 153,300 EUR on a platform for freelancers and nine companies that used it to deploy foreign workers without a right to work in hospitality and education: 146,500 EUR under the Wav (Foreign Nationals Employment Act) (platform 66,000 EUR, the nine hirers 4,000 to 27,000 EUR each, together 80,500 EUR) and 6,800 EUR under the Waadi (Placement of Personnel by Intermediaries Act) (platform 3,400 EUR, two hirers 2,000 and 1,400 EUR). The platform regarded itself merely as an intermediary; based on how it actually operated, the Labour Authority classed it as an employer under the broad Wav definition.

What organisations can take from it

Platforms placing workers can be treated as employers based on how they actually operate and must check the right to work; hirers are liable as well.

Relevance to training and awareness

Employer obligations of placement platforms and hirers

Authority / court
Nederlandse Arbeidsinspectie
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
Wet arbeid vreemdelingen (Wav); Wet allocatie arbeidskrachten door intermediairs (Waadi)
Action
Fine
Status of proceedings
unknown
Sector
Media and online platforms
Published
13 Aug 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

13 Aug 2026 „О-Рент“ ЕООД (sowie „Инжконсулт“ ЕООД und „Земекоп“ ЕООД)Construction machinery cartel: fine for O-Rent, compliance programme for all participants BulgariaCartels and collusion €2,403

The Комисия за защита на конкуренцията (Bulgarian Commission for the Protection of Competition, KZK) found a cartel in public tenders for mining and construction machinery (price fixing and market sharing, Art. 15 ZZK – Bulgarian Protection of Competition Act, Art. 101 TFEU). Inzhkonsult and Zemekop, as a single undertaking, were exempted from the fine; O-Rent received a sanction of 2,403.07 EUR. All three companies must introduce a competition law compliance programme within 60 days and report on it.

What organisations can take from it

The authority now expressly requires compliance programmes – anyone bidding in tenders should have one before it is ordered.

Relevance to training and awareness

Competition law in tenders; compliance programme

Authority / court
Комисия за защита на конкуренцията (КЗК, Bulgarische Wettbewerbskommission)
Area of law
Competition law · Cartels and collusion
Legal basis
Art. 15 Abs. 1 Nr. 1 und 2 ZZK; Art. 101 Abs. 1 lit. a und c AEUV
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Mitigating circumstances
Immunity from fines for two participants (leniency programme)
Published
20 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

13 Aug 2026 Apple Inc., Apple GmbHBundeskartellamt: Apple aligns tracking prompts for its own and third-party apps GermanyAbuse of market power Order

The Bundeskartellamt (Federal Cartel Office) declared binding commitments by Apple on its App Tracking Transparency Framework (ATTF), closing its proceedings under Section 19a(2) of the German Competition Act (GWB) and Article 102 TFEU. According to the preliminary assessment, third-party apps had to obtain, for personalised advertising, an additional and more off-putting consent prompt prescribed by Apple, while Apple used a prompt of its own for its own services; in future the prompts will be aligned so that content, wording and design are neutral, and app providers will be able to combine the required prompts more easily.

What organisations can take from it

Platform privacy rules must be equally strict for a company's own and third-party services, otherwise they become a competition problem themselves.

Relevance to training and awareness

Equal treatment of own and third-party services in consent prompts

Authority / court
Bundeskartellamt
Area of law
Competition law · Abuse of market power
Legal basis
§ 19a Abs. 2 GWB, Art. 102 AEUV (Verpflichtungszusagen, Az. B7-54/25)
Action
Order
Status of proceedings
unknown
Sector
Telecoms, IT and software
Employees
10,000 or more
Published
17 Aug 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Aug 2026 Banco Genial S.A.Banco Genial: BRL 21.56m for anti-money laundering failings in FX business BrazilCustomer due diligence €3.62m

The Comitê de Decisão de Processo Administrativo Sancionador (COPAS, sanctions decision committee) of the Banco Central do Brasil (Brazilian central bank) fined Banco Genial S.A. a total of BRL 21,560,000.00: BRL 4,200,000.00 for inadequate anti-money laundering policies, procedures and controls, BRL 8,920,000.00 for failing to verify the credentials of foreign exchange clients and BRL 8,440,000.00 for failing to file suspicious activity reports with the financial intelligence unit Coaf in the proper form and on time. According to the case documents, the reporting charge concerned 1,364 foreign exchange transactions for the acquisition of virtual assets with five clients between November 2020 and October 2021, totalling USD 744,341,982.45.

What organisations can take from it

Foreign exchange transactions for buying crypto-assets require checks on clients' financial capacity and timely suspicious activity reports.

Relevance to training and awareness

Customer due diligence and suspicious activity reporting in FX and crypto business

Authority / court
Banco Central do Brasil (Comitê de Decisão de Processo Administrativo Sancionador – COPAS)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Lei nº 9.613/1998, Art. 10 III, Art. 11 und 12; Lei nº 13.506/2017; Circular BCB nº 3.978/2020; Resolução CMN nº 3.568/2008
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Liability of senior managers
Measures against individuals are not set out here.

Original amount 21,560,000 BRL, converted at the ECB reference rate of 12 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Aug 2026 Lebes Financeira S.A. – Sociedade de Crédito, Financiamento e InvestimentoLebes Financeira: BRL 2.58m over lending to a related party above the limit BrazilOrganisational requirements €432,774

The BCB (central bank) sanctions committee COPAS imposed a fine of BRL 2,576,000.00 on Lebes Financeira S.A. – Sociedade de Crédito, Financiamento e Investimento because from January 2022 to March 2023 it engaged in prohibited credit transactions with a related company: its banking correspondent retained collected loan instalments, and the arrears reached BRL 147m at the end of November 2022, or 207.66% of adjusted equity against a limit of 10%. In addition there was a BRL 20m loan routed through a third company. The decision is not final.

What organisations can take from it

If an affiliated distribution partner retains customer money, this can quickly become a prohibited loan to a related party.

Authority / court
Banco Central do Brasil (Comitê de Decisão de Processo Administrativo Sancionador – COPAS)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Lei 13.506/2017, Art. 3 II; Lei 4.595/1964, Art. 34 § 3 V d und § 4 I; Resolução CMN 4.693/2018, Arts. 5, 6 und 7 II
Action
Fine
Status of proceedings
under appeal
Sector
Financial services and insurance
Liability of senior managers
Measures against individuals are not set out here.

Original amount 2,576,000 BRL, converted at the ECB reference rate of 12 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Aug 2026 Rice Lake Weighing Systems, Inc.Scale manufacturer Rice Lake liable for Italian subsidiary's indirect exports to Iran USABreaches of sanctions and embargoes €52,632

In eight instances in 2019–2021, the Italian subsidiary Dini Argeo supplied weighing equipment worth around 121,500 USD to a trader in the UAE, although it knew that the goods would be passed on to a former direct Iranian customer. The parent company had passed on the Iran ban only by an English-language e-mail without explanation; the US Treasury's Office of Foreign Assets Control (OFAC) considered it a non-egregious, voluntarily self-disclosed case.

What organisations can take from it

Implement sanctions requirements at foreign subsidiaries in an understandable way, in the local language and with training for all relevant employees – indirect supplies via traders are also prohibited.

Relevance to training and awareness

Sanctions training for foreign subsidiaries, indirect supplies via third countries

Missing or inadequate training played a role in the decision.

Authority / court
U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Iranian Transactions and Sanctions Regulations, § 560.215 (Auslandstöchter von US-Personen)
Action
Fine
Status of proceedings
final
Sector
Manufacturing and mechanical engineering
Culpability
negligent
Repeat case
no
Mitigating circumstances
Voluntary self-disclosure, immediate internal investigation, low significance for turnover, no prior violations, cooperation; subsequent training of the subsidiary's employees and screening of traders
Published
12 Aug 2026

Original amount 60,764 USD, converted at the ECB reference rate of 12 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Aug 2026 Lab Pharma ASLab Pharma AS: NOK 205,000 for threatening Datatilsynet staff NorwayData subject rights and transparency €18,745

Datatilsynet (Norwegian Data Protection Authority) fined the online dietary supplement retailer Lab Pharma AS NOK 205,000 for breaching its duty to cooperate with the supervisory authority (Art. 31 GDPR): the company had threatened case handlers with police reports and lawsuits in order to end the investigation of a complaint, and submitted requested documents late. The authority also ordered the company to delete the name and images of a former advertising partner (an influencer) from all its websites and to stop using her data for marketing until it can demonstrate a legal basis, as the underlying contract had already expired in March 2017.

What organisations can take from it

Anyone who considers a supervisory order unlawful must use the available appeal routes – threats against case handlers and missed deadlines become a sanctionable breach in their own right.

Relevance to training and awareness

Dealing with supervisory authorities and the duty to cooperate

Authority / court
Datatilsynet
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 31, Art. 58 Abs. 2 lit. f, g und i, Art. 83 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Culpability
intentional
Liability of senior managers
Datatilsynet attributed the intentional conduct of the company's management to the company.
Published
17 Aug 2026

Original amount 205,000 NOK, converted at the ECB reference rate of 12 Aug 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Aug 2026 Citibank, N.A., London BranchOFSI imposes 4.7 million GBP on Citibank London over Russia payments United KingdomBreaches of sanctions and embargoes €5.54m

Mainly between February and November 2022, the London branch processed 970 payments totalling around 19.7 million GBP that breached Russia and anti-corruption sanctions. The causes were overloaded alert handling after the wave of designations, delayed escalation and human error; the bank voluntarily disclosed most of the breaches and received a 20% reduction from HM Treasury's Office of Financial Sanctions Implementation (OFSI).

What organisations can take from it

During waves of designations, alert handling needs additional trained capacity – backlogs and wrong decisions in screening are themselves sanctions breaches.

Relevance to training and awareness

Handling sanctions alerts, escalation and freezing

Authority / court
HM Treasury, Office of Financial Sanctions Implementation (OFSI)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Russia (Sanctions) (EU Exit) Regulations 2019; Global Anti-Corruption Sanctions Regulations 2021; s. 146 Policing and Crime Act 2017
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Employees
10,000 or more
Mitigating circumstances
Predominantly voluntary disclosure and cooperation (20% reduction); exceptional burden caused by the 2022 sanctions packages taken into account
Published
2 Sep 2026

Original amount 4,732,830.58 GBP, converted at the ECB reference rate of 11 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Aug 2026 Fiducian Investment Management Services LimitedFiducian: 7.3 million AUD for misleading ESG claims about an ethical fund AustraliaMisleading environmental and sustainability claims €4.47m

The Supreme Court of New South Wales, on application by the Australian Securities and Investments Commission (ASIC, Australia's corporate, markets and financial services regulator), imposed penalties totalling 7.3 million AUD on the fund manager: 2.3 million AUD for misleading statements (s 12DF ASIC Act) and 5 million AUD for breaching its duty of care and diligence as responsible entity (s 601FC(1)(b) Corporations Act). Between October 2019 and May 2024 the Diversified Social Aspirations Fund, marketed as socially responsible, held through underlying funds interests in companies that derived revenue from fossil fuels, among others, even though the product documents promised certain exclusions and ongoing monitoring; the company did not respond to investor concerns by amending its statements.

What organisations can take from it

A fund's sustainability promises require ongoing checks of its actual holdings; where they diverge, either the holdings or the statements must be changed.

Relevance to training and awareness

Substantiating ESG and ethical claims in product documents and fund marketing

Missing or inadequate training played a role in the decision.

Authority / court
Supreme Court of New South Wales (auf Antrag der Australian Securities and Investments Commission, ASIC)
Area of law
Environment and sustainability · Misleading environmental and sustainability claims
Legal basis
ASIC Act 2001 (Cth) s 12DF (Geldbuße nach s 12GBB); Corporations Act 2001 (Cth) s 601FC(1)(b) (Geldbuße nach s 1317G)
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Culpability
negligent
Repeat case
no
Mitigating circumstances
Admissions, cooperation throughout the proceedings and contrition; since the proceedings began, an independent review of the product documents; no previous court findings.
Liability of senior managers
According to the agreed facts, senior management was involved (the company's then Executive Chair and Head of Investments).
Published
12 Aug 2026

Original amount 7,300,000 AUD, converted at the ECB reference rate of 11 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Aug 2026 Panzer Norge ASPanzer Norge AS: NOK 100,000 for AML failures at an accounting firm NorwayCustomer due diligence €9,115

Finanstilsynet (Norwegian Financial Supervisory Authority) fined the accounting firm Panzer Norge AS, based in Alta, NOK 100,000 under the Anti-Money Laundering Act. The inspection found shortcomings in the firm-wide risk assessment and in customer due diligence, as well as further breaches in risk and quality management and in engagement agreements; the company, which had five employees, essentially did not dispute the breaches.

What organisations can take from it

Small accounting firms are also subject to anti-money laundering obligations and need a documented risk assessment and demonstrable customer due diligence for every engagement.

Relevance to training and awareness

Anti-money laundering obligations for accounting and advisory firms

Authority / court
Finanstilsynet
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
§§ 7, 8, 9, 12 Abs. 4, 13 Abs. 1, 3 und 4, 14, 24 und 49 hvitvaskingsloven
Action
Fine
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Culpability
negligent
Published
17 Sep 2026

Original amount 100,000 NOK, converted at the ECB reference rate of 11 Aug 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Aug 2026 Volga-Dnepr Airlines LLCFederal Court: cargo airline Volga-Dnepr remains on Canadian sanctions list CanadaBreaches of sanctions and embargoes Order

The Russian cargo airline had been added to the list of the Special Economic Measures (Russia) Regulations in April 2023; the Minister of Foreign Affairs rejected the application for delisting. The Federal Court (2026 FC 1048) dismissed the application for judicial review: the Minister had not exercised her broad discretion unreasonably, and there was no procedural error.

What organisations can take from it

Listed logistics partners often remain listed for years – anyone buying air freight must continuously screen carriers and parent companies against sanctions lists.

Relevance to training and awareness

Listings of transport service providers in partner screening

Authority / court
Federal Court (2026 FC 1048); Minister of Foreign Affairs
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Special Economic Measures Act; Special Economic Measures (Russia) Regulations, SOR/2014-58, ss. 2(a), 8
Action
Order
Status of proceedings
unknown
Sector
Transport, logistics and shipping

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Aug 2026 Your Neighbourhood Credit Union LimitedFINTRAC: CAD 16,500 penalty on Your Neighbourhood Credit Union Limited for one violation of anti-money laundering obligations CanadaInternal controls €10,243

According to FINTRAC, Your Neighbourhood Credit Union Limited is a provincially regulated credit union based in Kitchener, Ontario. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 16,500 on the company on 10 August 2026. According to FINTRAC's findings, made during a compliance examination, the company committed one violation of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violation concerned written compliance policies and procedures. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Your Neighbourhood Credit Union Limited", published 24 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-24-2-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
PCMLTFA s. 9.6(1); PCMLTF Regulations 156(1)(b); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
24 Sep 2026

Original amount 16,500 CAD, converted at the ECB reference rate of 10 Aug 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Aug 2026 Veloxis Pharmaceuticals Inc.Veloxis: over 46 million USD – luxury trips, dinners and gifts for transplant teams USAGifts, hospitality and benefits Other

From 2016 to 2023, Veloxis provided transplant professionals with expensive meals and alcohol, trips and stays at luxury resorts, gifts and consultancy fees without consideration, and paid specialty pharmacies concealed remuneration in order to promote prescriptions and purchases of the immunosuppressant Envarsus XR. The company entered into a Deferred Prosecution Agreement with a criminal payment of more than 10 million USD, is paying 34.45 million USD under civil law (21,211,251 USD to the federal government, 13,238,749 USD to states) and a penalty of 1.55 million USD under the Sunshine Act (Open Payments) – the highest to date – totalling over 46 million USD.

What organisations can take from it

Invitations and gifts to decision-makers must not only be limited but also fully reported to transparency registers.

Relevance to training and awareness

Gifts, travel and hospitality for healthcare professionals; transparency reporting

Authority / court
U.S. Department of Justice / U.S. Attorney's Office, District of Massachusetts
Area of law
Bribery and corruption · Gifts, hospitality and benefits
Legal basis
Anti-Kickback Statute; False Claims Act; Physician Payments Sunshine Act (Open Payments)
Action
Other
Status of proceedings
final
Sector
Chemicals and pharmaceuticals

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

7 Aug 2026 Hair-Line Kft.Hair-Line: 68.5 million HUF for price and territorial restrictions on hairdressing supplies HungaryCartels and collusion €187,929

In 2018–2022, the distributor of professional hairdressing products (Alfaparf, Yellow) determined the prices at which its territorial representatives were allowed to sell to salons and retailers and restricted passive sales outside the territories. Under a settlement and with a commitment to a compliance programme, the Gazdasági Versenyhivatal (Hungarian Competition Authority, GVH) imposed 68.5 million HUF.

What organisations can take from it

Commercial agent systems with territorial protection must not restrict resale prices or passive sales either.

Relevance to training and awareness

Price and territorial restrictions in the distribution system

Missing or inadequate training played a role in the decision.

Authority / court
Gazdasági Versenyhivatal (GVH)
Area of law
Competition law · Cartels and collusion
Legal basis
Ungarisches Wettbewerbsgesetz, Verbot wettbewerbsbeschränkender Vereinbarungen
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Culpability
intentional
Mitigating circumstances
Cooperation, acknowledgement in the settlement and commitment to a comprehensive compliance programme.
Published
7 Aug 2026

Original amount 68,500,000 HUF, converted at the ECB reference rate of 7 Aug 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

7 Aug 2026 ACRO Criminal Records OfficeICO: reprimand for ACRO Criminal Records Office after cyber incident United KingdomData breaches and data security Reprimand or warning

The UK Information Commissioner's Office (ICO) issued a reprimand to ACRO Criminal Records Office. According to the ICO, it followed a cyber incident that may have affected the personal data of around 10,000 people in the UK. The ICO found infringements of the duty to implement appropriate technical and organisational security measures under Article 32 UK GDPR. No fine was imposed.

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 32(1), 32(1)(b) und 32(1)(d) UK GDPR; Verwarnung nach Art. 58(2)(b) UK GDPR
Action
Reprimand or warning
Status of proceedings
unknown
Sector
Public sector

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Aug 2026 AS Asphaltstraßensanierung GmbH, BITUNOVA GmbH, Kutter Spezialstraßenbau GmbH & Co. KG, Possehl Construction GmbH (inkl. VSI), Liesen…alles für den Bau GmbH, OAT GmbH/Otto Alte-Teigeler GmbHBundeskartellamt: 60.3 million EUR against DSK road repair cartel GermanyCartels and collusion €60.3m

From around 2010 to September 2019, six suppliers of thin cold-laid asphalt surface layers (Dünne Asphaltdeckschichten in Kaltbauweise, DSK) allocated customers – primarily public contracting authorities – and contracts among themselves nationwide and coordinated prices. Germany's Federal Cartel Office (Bundeskartellamt) imposed fines of around 60.3 million EUR; all proceedings ended in settlements.

What organisations can take from it

Anyone who "shares out" public contracts regionally risks fines running into millions – calculations and bids must always be prepared independently.

Relevance to training and awareness

Customer allocation and bid rigging in public contracts

Authority / court
Bundeskartellamt
Area of law
Competition law · Cartels and collusion
Legal basis
§ 1 GWB, Art. 101 AEUV
Action
Fine
Status of proceedings
final
Sector
Construction and real estate
Mitigating circumstances
Leniency bonus for Possehl/VSI, Bitunova, Kutter and AS; settlement
Published
6 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Aug 2026 Brand Developers Limited (The TV Shop)The TV Shop: 1,104,000 NZD for manipulated online reviews and misleading claims New ZealandFake reviews €562,720

The company behind The TV Shop had its own staff post positive product reviews without disclosing the connection, and published one- to three-star reviews only if customers responded to a follow-up email. It also gave customers the impression that they had no rights under the Consumer Guarantees Act beyond a 30-day money-back guarantee, and advertised an accessory pack for the Air Roaster Pro as “free” although it was always included. After a guilty verdict on 13 charges, the District Court imposed 1,104,000 NZD on 6 August 2026; the company had already been fined in 2015 (153,000 NZD) and 2022 (123,500 NZD).

What organisations can take from it

Staff reviews without disclosure and filtering out negative reviews are misleading – review processes need clear rules and oversight.

Relevance to training and awareness

Authenticity of online reviews and accurate statements on consumer rights

Authority / court
District Court (Anklage: Commerce Commission)
Area of law
Consumer protection and online retail · Fake reviews
Legal basis
Fair Trading Act 1986, ss 10, 13(e), 13(i), 40(1)
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Culpability
intentional
Repeat case
yes
Liability of senior managers
According to the sentencing decision, managers and executives knew about the review practices and at times directed them themselves.
Published
11 Aug 2026

Original amount 1,104,000 NZD, converted at the ECB reference rate of 6 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Aug 2026 Elderly Aids LimitedICO: £190,000 fine for Elderly Aids over unsolicited marketing calls United KingdomMarketing and consent €221,691

The ICO fined Elderly Aids Limited, a seller of call-blocking devices, £190,000 and also issued an enforcement notice. The ICO found that the company had made 758,053 unsolicited direct marketing calls to numbers registered with the TPS/CTPS whose subscribers had not agreed to such calls, leading to 20 complaints. The legal basis is regulations 21 and 24 of PECR. Under the notice, payment by 7 September 2026 reduces the amount by 20% to £152,000.

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Marketing and consent
Legal basis
Regulations 21 und 24 PECR; section 55A DPA 1998 (Geldbuße), section 40 DPA 1998 (Anordnung)
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce

Original amount 190,000 GBP, converted at the ECB reference rate of 6 Aug 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Aug 2026 AMATO BESTSELLER S.R.L.AMATO BESTSELLER: 45,000 EUR plus 50,000 lei for data access and robocalls RomaniaMarketing and consent €54,316

Following several complaints, the Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (Romanian data protection authority, ANSPDCP) found that current and former employees, untrained and without procedural rules, had access to extensive data (including health, family and income data), that data subjects were not informed under Art. 14 GDPR, that excessive data were collected and that automated advertising calls were made without consent. Fines: 78,465 lei (15,000 EUR, Art. 32(4)), 52,310 lei (10,000 EUR, Art. 14), 104,620 lei (20,000 EUR, Art. 5/9 GDPR) and 50,000 lei (Law 506/2004); in addition, an order to provide regular employee training. Date = publication of the press release; according to the authority, the investigation was concluded in June 2026.

What organisations can take from it

Anyone giving employees access to sensitive customer data must train them and limit access on a need-to-know basis.

Relevance to training and awareness

Training employees in handling customer data; consent for advertising calls

Missing or inadequate training played a role in the decision.

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection · Marketing and consent
Legal basis
Art. 5 Abs. 1 lit. c i. V. m. Art. 9, Art. 14, Art. 32 Abs. 4 DSGVO; Art. 12 Abs. 1 Gesetz 506/2004
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
6 Aug 2026

Original amount 285,395 RON, converted at the ECB reference rate of 6 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Aug 2026 „Чили Хилс Фудс“ ООД (Chili Hills Foods OOD)Chili Hills Foods: 20,022 EUR for false copying allegations against competitor BulgariaCompetition law €20,022

From May 2024, in social media videos (campaign ‘Създавай! Не копирай!’), the company falsely accused a competing family business for hot chillies of having stolen its business, ideas and concept, and promoted the clips partly through paid advertising. The Комисия за защита на конкуренцията (Bulgarian Commission for the Protection of Competition, KZK) regarded this as unfair damage to reputation (Art. 30 ZZK – Bulgarian Protection of Competition Act), imposed 4% of 2025 net turnover (500,555 EUR), i.e. 20,022 EUR, and ordered immediate cessation. Appeals have been lodged against the decision.

What organisations can take from it

Allegations against competitors on social media are only permissible if based on verifiable facts – paid reach aggravates the sanction.

Relevance to training and awareness

Statements about competitors on social media

Authority / court
Комисия за защита на конкуренцията (КЗК, Bulgarische Wettbewerbskommission)
Area of law
Competition law
Legal basis
Art. 30 ZZK (Schädigung des guten Rufs eines Wettbewerbers)
Action
Fine
Status of proceedings
under appeal
Sector
Food and agriculture
Published
19 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Aug 2026 Capwatt Retail Gás PT, S.A.Portugal: 12,000 EUR against Capwatt over gas reserves and dispute resolution notice PortugalOther €12,000

In several months of 2023 and 2024, the gas supplier did not hold the natural gas security reserves and did not name the competent alternative dispute resolution bodies in customer contracts. The Entidade Reguladora dos Serviços Energéticos (Portuguese Energy Services Regulatory Authority, ERSE) accepted the settlement proposal, set a fine of 24,000 EUR and reduced it to 12,000 EUR.

What organisations can take from it

Mandatory information in consumer contracts – for example on dispute resolution – belongs in a regularly reviewed contract template.

Authority / court
Entidade Reguladora dos Serviços Energéticos (ERSE)
Area of law
Other
Legal basis
RSSE, Art. 29; Decreto-Lei n.º 62/2020, Art. 57, 96; Portaria n.º 59/2022; RRC Art. 22
Action
Fine
Status of proceedings
final
Sector
Energy and utilities
Culpability
negligent
Mitigating circumstances
Settlement with admission and remediation

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Aug 2026 Powszechna Kasa Oszczędności Bank Polski S.A. (PKO BP)PKO BP: PLN 47.5m for failings in structured deposits PolandOrganisational requirements €11m

The KNF imposed five fines totalling PLN 47,500,000 on PKO BP in connection with structured deposits: PLN 26m for failing to inform clients of existing conflicts of interest, PLN 8m each for not analysing costs and charges and for an imprecise definition of the risk category and target market, PLN 4m for selling without checking target-market suitability and PLN 1.5m for misleading sales material on two products. The decision is not final.

What organisations can take from it

Firms selling structured products must disclose conflicts of interest, test costs against client benefit and define the target market precisely.

Relevance to training and awareness

Conflicts of interest and product governance for retail investment products

Authority / court
Komisja Nadzoru Finansowego (KNF)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Art. 88c Abs. 1 und 2, Art. 88m Abs. 5 und 9 Prawo bankowe i. V. m. Verordnung des Finanzministers vom 21.01.2019 über Dienstleistungen der Banken bei strukturierten Einlagen
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance

Original amount 47,500,000 PLN, converted at the ECB reference rate of 5 Aug 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Aug 2026 Everlight Electronics Co., Ltd. und Everlight Americas, Inc.Everlight: 5.15 million USD – Chinese LEDs declared as Taiwanese via Taiwan USACustoms €4.46m

The Taiwanese LED manufacturer and its Texas subsidiary allegedly transshipped LEDs made in China via Taiwan from 2018 to 2022 and declared them to US customs as being of Taiwanese origin in order to avoid Section 301 tariffs (US punitive tariffs on Chinese goods); in addition, Chinese and Taiwanese chips were not kept separate in production until 2025. The settlement of 5.15 million USD resolves a whistleblower lawsuit brought by a former employee, who receives around 876,000 USD.

What organisations can take from it

Where goods are routed through third countries, document their origin by manufacturing step – repackaging in Taiwan does not turn Chinese goods into Taiwanese ones.

Relevance to training and awareness

Rules of origin and origin of goods when transshipping via third countries

Authority / court
U.S. Attorney’s Office District of Maryland (Department of Justice) mit U.S. Customs and Border Protection
Area of law
Sanctions and export control · Customs
Legal basis
False Claims Act; Tariff Act of 1930 (Vergleich; Haftung nicht festgestellt)
Action
Other
Status of proceedings
final
Sector
Manufacturing and mechanical engineering
Published
5 Aug 2026

Original amount 5,150,000 USD, converted at the ECB reference rate of 5 Aug 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Aug 2026 GmbH (im Urteil anonymisiert)Illegal dumping of construction waste: company must pay €375,000 forfeiture AustriaWaste and hazardous substances €375,000

The Oberlandesgericht (OLG, Higher Regional Court) Linz added a forfeiture of 375,000 EUR to the conviction of a limited company under the Verbandsverantwortlichkeitsgesetz (VbVG, Austrian Corporate Criminal Liability Act) for intentionally handling and moving waste in a way that endangered the environment; the suspended corporate fine of 30 daily rates of 500 EUR (15,000 EUR) imposed by the Landesgericht (Regional Court) Salzburg remained in place. From May 2021 to May 2024 and again from May 2025 to February 2026, contrary to the AWG 2002 (Waste Management Act) and partly to an official decision, the company had excavated soil, construction waste, asphalt and concrete rubble accepted for payment and deposited on a plot; removal costs were put at around 3.24 million EUR. Only the forfeiture of EUR 375,000 is recorded as the amount; the corporate fine of EUR 15,000 was conditionally suspended.

What organisations can take from it

Anyone accepting and depositing waste without a permit risks not only a corporate fine but also forfeiture of the fees received for it, which can far exceed the fine.

Relevance to training and awareness

Waste law and official conditions for excavated soil and construction waste

Authority / court
Oberlandesgericht Linz (Berufung gegen Urteil des Landesgerichts Salzburg vom 06.03.2026)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
§ 181b Abs. 1 und 2 StGB; §§ 3, 4 Abs. 1 und 3, § 6 Abs. 1, § 14 Abs. 1 VbVG; § 20 Abs. 3 StGB; AWG 2002
Action
Disgorgement of profits
Status of proceedings
final
Sector
Other
Culpability
intentional
Repeat case
no
Mitigating circumstances
No previous convictions of the company; rather low environmental risk. Further circumstances taken into account by the court concern a natural person and are not reported here.
Liability of senior managers
Under the VbVG, the company's liability is linked to the conduct of its managing director.

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Aug 2026 Order Express, Inc.NYDFS: $250,000 against money transmitter Order Express over cyber deficiencies USA, NYSecurity measures and risk management €216,375

The licensed money transmitter had no adequate policies for system updates and insufficient risk assessments under New York's cybersecurity regulation, as found by the New York State Department of Financial Services (NYDFS). The company has already remedied the deficiencies.

What organisations can take from it

Even small financial service providers must keep documented patch policies and regular risk assessments.

Authority / court
New York State Department of Financial Services (NYDFS)
Area of law
Information security and cyber · Security measures and risk management
Legal basis
23 NYCRR Part 500 (Cybersecurity Regulation)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Because of its low turnover, the company was exempt from many Part 500 obligations; deficiencies already remedied.
Published
5 Aug 2026

Original amount 250,000 USD, converted at the ECB reference rate of 5 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Aug 2026 BAE Systems, Inc.DDTC: USD 36 million against BAE Systems for ITAR violations, including a China link USAExport control and dual-use goods €31.3m

The DDTC settled with BAE Systems, Inc. for a civil penalty of USD 36 million. The allegations concerned unauthorised exports and retransfers of defence articles to several countries, in one case to the People's Republic of China, the unauthorised furnishing of defence services and breaches of authorisation provisos. USD 18 million is suspended for approved compliance measures and USD 18 million is payable in three instalments; the agreement requires, among other things, an external compliance audit. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Retransfers by recipients must be controlled contractually and organisationally just as strictly as one's own exports.

Relevance to training and awareness

ITAR compliance: retransfers, defence services and authorisation provisos

Authority / court
U.S. Department of State, Directorate of Defense Trade Controls (DDTC)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Arms Export Control Act § 38 (22 U.S.C. § 2778); ITAR, 22 C.F.R. Parts 120–130, insbesondere Part 127 und § 128.11
Action
Fine
Status of proceedings
final
Sector
Defence and security
Mitigating circumstances
The company reported the matters in voluntary disclosures and in response to a disclosure directed by the DDTC, and cooperated with the review.

Original amount 36,000,000 USD, converted at the ECB reference rate of 4 Aug 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Aug 2026 AS "Latvijas valsts meži"7.86 million EUR against Latvijas valsts meži for breach of competitive neutrality LatviaCompetition law €7.86m

From 2020 to April 2026, on the basis of old long-term logging contracts, the state forestry group supplied six wood processors with guaranteed quantities of roundwood outside public auctions, while all others could only buy through auctions. In its first decision on the competitive neutrality of public undertakings, the Konkurences padome (Latvian Competition Council) imposed 7,859,606.89 EUR and required equal sales conditions for all qualified bidders.

What organisations can take from it

State-owned companies must allocate resources without discrimination – review historical special contracts regularly for competitive neutrality.

Authority / court
Konkurences padome (Lettischer Wettbewerbsrat)
Area of law
Competition law
Legal basis
Art. 14.1 Konkurences likums (Wettbewerbsneutralität)
Action
Fine
Status of proceedings
unknown
Sector
Public sector
Published
13 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Aug 2026 Lime Technology S.r.l., EmTransit S.r.l. (Dott), Bird Rides Italy S.r.l.Rome: 2.675 million EUR against e-scooter and e-bike sharing providers over blocked free rides ItalyInformation duties in online retail €2.68m

The three sharing providers made it difficult for holders of a Metrebus annual pass to access the free-ride passes promised when the concessions were awarded, through inadequate organisation, cumbersome activation and long waiting times, which shortened the usable time; Bird also deactivated accounts without prior notice. The AGCM imposed fines totalling 2.675 million EUR in three proceedings (Lime 1.4 million, Dott 525,000, Bird 750,000 EUR).

What organisations can take from it

Promised benefits must also be redeemable in organisational terms – sluggish processing can itself be unfair.

Relevance to training and awareness

Customer service and redemption of promised services

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Consumer protection and online retail · Information duties in online retail
Legal basis
Codice del Consumo (pratiche commerciali scorrette), Verfahren PS13028, PS13029, PS13030
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Published
6 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Aug 2026 UBS Financial Services Inc.FinCEN: 125 million USD against UBS Financial Services as a repeat offender USAInternal controls €108.4m

The US Financial Crimes Enforcement Network (FinCEN) imposed 125 million USD on the broker-dealer – the highest BSA penalty against a broker-dealer to date. UBSFS admitted wilful infringements: the AML programme was inadequate, more than 50,000 foreign currency transfers totalling more than 10 billion USD were not adequately monitored and suspicious activity reports were not filed; it is already the second enforcement action after 2018.

What organisations can take from it

Monitoring gaps left unremedied after an earlier enforcement action lead, the second time round, to a multiple of the original penalty.

Authority / court
Financial Crimes Enforcement Network (FinCEN)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
Bank Secrecy Act (BSA)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Employees
10,000 or more
Culpability
intentional
Repeat case
yes
Mitigating circumstances
Up to 15 million USD (remaining amount due by 31 May 2028) may be waived to the extent that UBSFS bears the costs of the independent review of its AML programme and implements its recommendations
Published
3 Aug 2026

Original amount 125,000,000 USD, converted at the ECB reference rate of 3 Aug 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Aug 2026 Zhengzhou Synear Food Co., Ltd.UFLPA list: frozen food manufacturer Zhengzhou Synear Food added USAForced and child labour Order

The U.S. Forced Labor Enforcement Task Force (FLETF) added the frozen food manufacturer to the Uyghur Forced Labor Prevention Act (UFLPA) Entity List because it works with the Xinjiang government to take in Uyghurs, Kazakhs, Kyrgyz or members of other persecuted groups under state labour transfer programmes. The company's goods are therefore presumed to have been produced with forced labour on import into the US unless the importer rebuts this.

What organisations can take from it

Food importers should also check suppliers outside Xinjiang for involvement in state labour transfer programmes.

Authority / court
U.S. Department of Homeland Security (Forced Labor Enforcement Task Force)
Area of law
Supply chain and human rights · Forced and child labour
Legal basis
Uyghur Forced Labor Prevention Act, Section 2(d)(2)(B)(ii)
Action
Order
Status of proceedings
unknown
Sector
Food and agriculture
Published
3 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Aug 2026 Guangxi Kelun Pharmaceutical Co., Ltd.UFLPA list: antibiotics manufacturer Guangxi Kelun Pharmaceutical added USAForced and child labour Order

The U.S. Forced Labor Enforcement Task Force (FLETF) listed the manufacturer of cephalosporin antibiotics because it sources antibiotic intermediates from Yili Chuanning Biotechnology in Xinjiang. The company's goods are therefore presumed to have been produced with forced labour on import into the US unless the importer rebuts this.

What organisations can take from it

Pharmaceutical companies must be able to trace their supply chains back to active ingredient intermediates.

Authority / court
U.S. Department of Homeland Security (Forced Labor Enforcement Task Force)
Area of law
Supply chain and human rights · Forced and child labour
Legal basis
Uyghur Forced Labor Prevention Act, Section 2(d)(2)(B)(v)
Action
Order
Status of proceedings
unknown
Sector
Chemicals and pharmaceuticals
Published
3 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Aug 2026 Shandong Weiqiao Pioneering Group Co., Ltd.UFLPA list: textile group Shandong Weiqiao Pioneering Group over Xinjiang cotton USAForced and child labour Order

The U.S. Forced Labor Enforcement Task Force (FLETF) added the cotton and textile producer to the Uyghur Forced Labor Prevention Act (UFLPA) Entity List because it sources cotton from Xinjiang. The company's goods are therefore presumed to have been produced with forced labour on import into the US unless the importer rebuts this.

What organisations can take from it

Textile retailers need proof of origin for cotton down to the fibre, for example through isotope or traceability testing.

Authority / court
U.S. Department of Homeland Security (Forced Labor Enforcement Task Force)
Area of law
Supply chain and human rights · Forced and child labour
Legal basis
Uyghur Forced Labor Prevention Act, Section 2(d)(2)(B)(v)
Action
Order
Status of proceedings
unknown
Sector
Other
Published
3 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

31 Jul 2026 UBS Financial Services Inc.UBS Financial Services: 8 million USD over gaps in anti-money laundering monitoring USAOrganisational requirements €6.97m

The CFTC fined the futures commission merchant 8 million USD for failing to supervise diligently the configuration and operation of its anti-money laundering transaction monitoring. From January 2019 to June 2023, thousands of foreign currency wire transfers through retail customers' commodity accounts were insufficiently monitored or not monitored at all: first because of an incomplete manual report which UBS, contrary to commitments made in earlier proceedings in 2018, replaced only more than two years later, and then because of incorrectly fed data in the new automated system. FinCEN, the SEC and FINRA announced their own settlements with UBS Financial Services at the same time. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Commitments made in earlier supervisory proceedings must be implemented on time, and new monitoring systems must be tested for complete data feeds before going live.

Authority / court
U.S. Commodity Futures Trading Commission (CFTC)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
CFTC Regulation 166.3 (17 C.F.R. § 166.3)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Repeat case
yes
Mitigating circumstances
The CFTC recognised the remediation described; according to the order, the core problems of the automated system had been fixed by the fourth quarter of 2022.
Published
3 Aug 2026

Original amount 8,000,000 USD, converted at the ECB reference rate of 31 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

31 Jul 2026 Whitemountain Quarries Limited€1.2m fine for Whitemountain Quarries after fatal roadworks incident IrelandWorkplace safety and accidents €1.2m

At roadworks on the R238 in Donegal in August 2020, one wheel of a car dropped onto the unfinished hard shoulder; when the driver steered back, the car slid on the freshly laid surface and went into Lough Foyle; three occupants drowned and one was injured, and appropriate temporary traffic management was lacking. The company pleaded guilty to breaching its duties towards non-employees under s. 12 of the Safety, Health and Welfare at Work Act 2005 and was fined €1,200,000.

What organisations can take from it

Employers at roadworks in public spaces are also liable for the safety of third parties; signage and guidance measures must remain adequate until the works are finished.

Authority / court
Letterkenny Circuit Criminal Court (Anklage: Health and Safety Authority)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
s. 12 i. V. m. s. 77(9)(a) Safety, Health and Welfare at Work Act 2005
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Published
31 Jul 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Jul 2026 Access DX Laboratory, LLCAccess DX Laboratory: 36.4 million USD – kickbacks for unnecessary genetic tests USACommercial bribery €31.7m

The Houston laboratory allegedly paid kickbacks and billed Medicare and Medicaid for medically unnecessary genetic tests. The settlements with the laboratory and other parties add up to 36.4 million USD (combined total); the laboratory is subject to a Corporate Integrity Agreement.

What organisations can take from it

Commission models for intermediaries who bring in orders or patients are a classic gateway for bribery.

Relevance to training and awareness

Remuneration of intermediaries and referrers

Authority / court
U.S. Department of Justice
Area of law
Bribery and corruption · Commercial bribery
Legal basis
Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
Action
Other
Status of proceedings
final
Sector
Healthcare
Liability of senior managers
Measures against individuals are not reported here.

Original amount 36,400,000 USD, converted at the ECB reference rate of 30 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Jul 2026 Airbus Operations LimitedAirbus Operations pays 6.4 million GBP for export control breaches in technology transfer United KingdomExport control and dual-use goods €7.48m

Over an extended period before November 2022, Airbus Operations Ltd breached the Export Control Order 2008: transfers of controlled technology under three open general export licences (OGEL) were not correctly documented, required registers were missing, and one individual licence was not complied with. The case came to light through voluntary disclosure and was concluded by HM Revenue & Customs (HMRC) by way of a compound settlement (date of publication).

What organisations can take from it

Technology transfers by e-mail or data room are also exports – conditions, registers and records of general licences must be put into practice day to day.

Relevance to training and awareness

Licence conditions and record-keeping obligations in technology transfer

Authority / court
HM Revenue & Customs (HMRC) / Export Control Joint Unit
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Export Control Order 2008, Art. 29(2) und 29(3) (Auflagen und Register bei OGELs) sowie Auflage einer SIEL; Straftaten nach Art. 38(1)(a) und (b); Compound Settlement durch HMRC
Action
Fine
Status of proceedings
final
Sector
Manufacturing and mechanical engineering
Employees
10,000 or more
Mitigating circumstances
Voluntary disclosure, full cooperation, remedial measures
Published
30 Jul 2026

Original amount 6,409,388 GBP, converted at the ECB reference rate of 30 Jul 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

29 Jul 2026 AvisAvis: maximum fine of 1 million EUR for handling fee on traffic fines SpainInformation duties in online retail €1m

The car rental company charged customers an "administration fee" of 33.88 to 45 EUR when a rental car incurred a traffic offence – even though naming the driver is a statutory obligation of the rental company. Spain's Ministry of Social Rights, Consumer Affairs and 2030 Agenda classified this as a very serious infringement and imposed the maximum fine of 1 million EUR; a court had already declared the clause void in 2020.

What organisations can take from it

No additional fee may be charged for fulfilling statutory obligations – least of all after a court has prohibited the clause.

Authority / court
Ministerio de Derechos Sociales, Consumo y Agenda 2030
Area of law
Consumer protection and online retail · Information duties in online retail
Legal basis
Artt. 82, 87.5 y 87.6 TRLGDCU (Real Decreto Legislativo 1/2007)
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Repeat case
yes
Published
29 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

29 Jul 2026 Österreichischer Rundfunk (ORF)KommAustria finds unlabelled product placement in ORF's ‘Sport aktuell’ AustriaMisleading advertising and pricing Order

In the programme ‘Sport aktuell’ on ORF 1 on 29 July 2025, a logo wall was visible as product placement without being labelled. The Austrian Communications Authority (Kommunikationsbehörde Austria, KommAustria) found, with final effect, a violation of the ORF Act (ORF-Gesetz).

What organisations can take from it

Product placements must be identified and labelled by the editorial team – including logo walls in the background.

Relevance to training and awareness

Labelling of advertising and product placement

Authority / court
Kommunikationsbehörde Austria (KommAustria)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
§ 16 Abs. 5 Z 4 ORF-G
Action
Order
Status of proceedings
final
Sector
Media and online platforms
Published
29 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

28 Jul 2026 Harvey Norman Holdings Ltd; Latitude Finance AustraliaHarvey Norman and Latitude: AUD 55m penalties for misleading interest-free advertising AustraliaMisleading advertising and pricing €33.7m

A national advertising campaign from January 2020 to August 2021 promised purchases at Harvey Norman with 60 months interest free and no deposit, but concealed that a credit card such as the Latitude GO Mastercard was required, with monthly account fees and, until March 2021, establishment fees. After liability was established in 2024 and upheld on appeal in 2025, the Court set penalties of AUD 35 million against Harvey Norman and AUD 20 million against Latitude and ordered corrective notices on the home pages for 90 days. It based the higher penalty for Harvey Norman on its lower level of contrition.

What organisations can take from it

Anyone advertising finance offers must disclose the credit products required and their costs as clearly as the headline offer.

Relevance to training and awareness

Transparent advertising of instalment and credit offers

Authority / court
Federal Court of Australia (auf Antrag der Australian Securities and Investments Commission, ASIC)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
ss 12DB(1)(a), (g), (i), 12DF(1) ASIC Act 2001 (Cth); Haftungsfeststellung auch zu s 12DA(1)
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Mitigating circumstances
In the Court’s view Latitude showed contrition; the advertising complained of had ceased.
Liability of senior managers
The Court regarded public statements by Harvey Norman’s board chair as showing disregard for potential harm to consumers and therefore considered a higher penalty necessary.
Published
28 Jul 2026

Original amount 55,000,000 AUD, converted at the ECB reference rate of 28 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

28 Jul 2026 Ελληνική Εταιρεία Τοπικής Ανάπτυξης και Αυτοδιοίκησης Α.Ε. (EETAA) und Υπουργείο Κοινωνικής Συνοχής και ΟικογένειαςCyber attack on EETAA systems: EUR 350,000 against social affairs ministry and operator GreeceData breaches and data security €350,000

A large-scale breach affected EETAA information systems used to implement programmes of the Ministry of Social Cohesion and Family; identification, contact, financial and health data of a large number of people were affected. The Archi Prostasias Dedomenon (Hellenic Data Protection Authority) attributed the success of the attack to outdated systems and inadequate security measures and criticised the absence of a data processing agreement. In Decision 15/2026 it imposed a total of EUR 350,000 (ministry EUR 150,000 under Art. 5(1)(f)/Art. 32 and EUR 50,000 under Art. 28(3) GDPR; EETAA EUR 100,000 under Art. 32 and EUR 50,000 under Art. 28(3) GDPR) and ordered the agreement to be concluded and the planned security measures implemented within one month.

What organisations can take from it

Running legacy systems despite known risks and leaving controller and processor roles without a contract creates liability on both sides.

Relevance to training and awareness

Outdated IT systems and missing data processing agreements in the public sector

Authority / court
Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 5 Abs. 1 lit. f, Art. 28 Abs. 3, Art. 32 Abs. 1, Art. 58 Abs. 2 lit. d und i DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Public sector
Mitigating circumstances
According to the authority, the ministry met its breach notification and communication obligations.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

28 Jul 2026 Luk Fook Securities (HK) LimitedLuk Fook Securities: HKD 2.1m fine for weak cybersecurity ahead of ransomware attack Hong KongSecurity measures and risk management €235,595

Luk Fook Securities (HK) was publicly reprimanded and fined 2,100,000 HKD because inadequate cybersecurity controls might have contributed to a ransomware attack on 19 September 2022 hitting numerous core servers and to full recovery taking until 7 October 2022; during that time clients could not trade via the app or internet platform. Findings included missing firewall protection, outdated operating systems and antivirus software, weak access and password controls with credentials stored unencrypted, insufficient controls over remote access and external devices, inadequate data backup and a last security training session in 2018.

What organisations can take from it

Basic cyber hygiene – patching, access and password controls, backups and regular staff training – is a regulatory obligation for financial firms.

Relevance to training and awareness

Ransomware defence, password security and security awareness training

Missing or inadequate training played a role in the decision.

Authority / court
Securities and Futures Commission (SFC)
Area of law
Information security and cyber · Security measures and risk management
Legal basis
s. 194 SFO (Cap. 571); Code of Conduct GP 2, GP 3, GP 7, paras. 12.1, 18.5 und Schedule 7; Guidelines for Reducing and Mitigating Hacking Risks Associated with Internet Trading
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Repeat case
no
Mitigating circumstances
Root-cause review with an independent reviewer, strengthened controls, no evidence of client loss, cooperation, clean disciplinary record.
Published
28 Jul 2026

Original amount 2,100,000 HKD, converted at the ECB reference rate of 28 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

28 Jul 2026 TrenitaliaTrenitalia removes hurdles to refunds for delays following AGCM proceedings ItalyInformation duties in online retail Order

For refunds in the event of delays of 60 minutes or more or cancellations, Trenitalia required prior written confirmation from the call centre or ticket office. The AGCM accepted binding commitments: abolition of the confirmation requirement, strengthened refund channels, an information page on disruptions and an implementation report within three months; no infringement was found.

What organisations can take from it

Additional formalities before statutory refunds act as a hurdle and lead to proceedings.

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Consumer protection and online retail · Information duties in online retail
Legal basis
Codice del Consumo (impegni); EU-Fahrgastrechte im Eisenbahnverkehr
Action
Order
Status of proceedings
final
Sector
Transport, logistics and shipping
Mitigating circumstances
Binding commitments, no finding of an infringement.
Published
30 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Jul 2026 Banque Lombard Odier & Cie SAFederal Criminal Court fines Banque Lombard Odier CHF 3 million over money laundering SwitzerlandInternal controls €3.23m

The Bundesstrafgericht (Federal Criminal Court) found Banque Lombard Odier & Cie SA guilty of failing to take adequate organisational measures against aggravated money laundering by a former relationship manager who in 2011 and 2012 handled accounts of a criminal organisation holding proceeds of corruption in the Uzbek telecommunications market; despite warning signs, the bank's anti-money-laundering functions did not sufficiently ensure that the origin and purpose of the funds were investigated and documented. The bank was fined CHF 3,000,000 and bears procedural costs of CHF 24,561.49; it was acquitted on the remaining charges, and proceedings for acts before 27 July 2011 were dismissed as time-barred. The judgment is not final.

What organisations can take from it

Warning signs about the origin of large inflows must be investigated and documented by the anti-money-laundering function itself, not just by the relationship manager.

Relevance to training and awareness

Anti-money-laundering: investigating conspicuous inflows and documentation

Authority / court
Bundesstrafgericht (Strafkammer), Anklage der Bundesanwaltschaft
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
Art. 102 Abs. 2 StGB i.V.m. Art. 305bis Ziff. 1 und 2 StGB (Urteil SK.2023.42)
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Mitigating circumstances
The long time elapsed since the offences (2011/2012) was taken into account as mitigating.
Published
27 Jul 2026

Original amount 3,000,000 CHF, converted at the ECB reference rate of 27 Jul 2026.

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Jul 2026 China Industrial Securities International Asset Management LimitedSFC: HKD 6.8m fine for CISIAM over missed red flags in a private fund Hong KongOrganisational requirements €761,367

The SFC publicly reprimanded China Industrial Securities International Asset Management (CISIAM) and fined it HKD 6.8 million because, between August 2019 and September 2020, the manager of a private fund set up for the insurer Tahoe Life acquired complex structures with notes linked to bonds of a related company at the request of the insurer's chief investment officer, without identifying and properly examining the red flags. CISIAM also failed to observe the fund's investment restrictions and objectives and did not manage its risks effectively. In setting the penalty, the SFC also took into account management fees of around HKD 1.9 million received from the fund.

What organisations can take from it

A fund manager must independently assess an investor's instructions and must not implement unusually complex structures without a clear commercial rationale unchecked.

Relevance to training and awareness

Recognising red flags in investor-driven fund arrangements

Missing or inadequate training played a role in the decision.

Authority / court
Securities and Futures Commission (SFC), Hongkong
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Section 194 Securities and Futures Ordinance (Cap. 571); General Principle 2 Code of Conduct; Paragraphen 1.2(d), 3.1 und 3.11.1 Fund Manager Code of Conduct; Abschnitt VIII Management, Supervision and Internal Control Guidelines
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Repeat case
no
Mitigating circumstances
Remedial measures (new policies on risk management and dubious investment arrangements, compliance training), cooperation with the SFC and an otherwise clean disciplinary record.
Published
27 Jul 2026

Original amount 6,800,000 HKD, converted at the ECB reference rate of 27 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Jul 2026 Dairymaster Unlimited Company€400,000 fine for Dairymaster after fatal incident involving milking parlour gate IrelandWorkplace safety and accidents €400,000

In July 2020 a farmer on a dairy farm in County Limerick was fatally injured by a pneumatically operated milking parlour gate designed and manufactured by Dairymaster. The company pleaded guilty to six counts; the court imposed €200,000 each for breaches of s. 16(3) and s. 16(1)(a) of the Safety, Health and Welfare at Work Act 2005 (duties of designers and manufacturers), totalling €400,000, with the remaining counts taken into consideration.

What organisations can take from it

Manufacturers of work equipment are criminally liable for safe design, testing and adequate safety information.

Authority / court
Limerick Circuit Criminal Court (Anklage: Health and Safety Authority)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
s. 16(1)(a), 16(3) i. V. m. s. 77(2)(a), 77(9)(a) Safety, Health and Welfare at Work Act 2005
Action
Fine
Status of proceedings
unknown
Sector
Manufacturing and mechanical engineering
Published
28 Jul 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Jul 2026 Bright Smart Securities International (H.K.) LimitedBright Smart Securities: HKD 2.8m fine for inadequate wash-trade controls Hong KongMarket abuse and insider dealing €313,504

Bright Smart Securities International (H.K.) was publicly reprimanded and fined 2,800,000 HKD because between November 2023 and September 2025 its controls did not prevent 615 clients from executing 1,021 pairs of wash trades (trades without a change in beneficial ownership) in 736 shares and warrants. Monitoring was mostly after the event and manual, and several wash trades by one client on the same day counted as a single occurrence. Similar deficiencies had been identified and raised repeatedly before but were not fully remedied in any instance.

What organisations can take from it

Trade surveillance must intercept wash trades automatically before execution; after-the-event manual reviews are not enough for recurring patterns.

Relevance to training and awareness

Detecting and preventing wash trades

Authority / court
Securities and Futures Commission (SFC)
Area of law
Capital markets and financial supervision · Market abuse and insider dealing
Legal basis
s. 194 SFO (Cap. 571); Code of Conduct GP 2, para. 4.3
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Enhanced systems and a commitment to an independent effectiveness review, cooperation.
Published
27 Jul 2026

Original amount 2,800,000 HKD, converted at the ECB reference rate of 27 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Jul 2026 Equity for Growth (Securities) Limited (in liquidation)FCA: Public censure for Equity for Growth (Securities) over misleading minibond promotions United KingdomMisleading advertising and pricing Reprimand or warning

The FCA publicly censured the corporate finance firm Equity for Growth (Securities) Limited. The FCA found that between January 2018 and August 2019 the firm approved seven information memoranda for four unregulated minibond issuers as financial promotions. In the FCA's view, these documents omitted key information, such as the level and range of commissions, so investors could not properly assess the risk. Because the firm was wound up by the court in March 2026 on the FCA's petition, no fine was imposed; the FCA stated that it would otherwise have been £386,467 (including disgorgement).

Authority / court
Financial Conduct Authority (FCA)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
COBS 4.2.1(1)R; section 205 FSMA 2000 (Public Censure)
Action
Reprimand or warning
Status of proceedings
final
Sector
Financial services and insurance

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Jul 2026 Metropolitan Police ServiceICO: order and reprimand against London's Met Police after disclosure of sensitive data United KingdomData breaches and data security Order

The Metropolitan Police handed a defendant unredacted documents containing the new address and telephone number of a stalking victim, and in a circular e-mail disclosed 18 people with a parliamentary connection in an open recipient list. The UK Information Commissioner's Office (ICO) ordered improvements within 3 and 12 months, including in data protection training completion rates.

What organisations can take from it

Policies are not enough if mandatory training goes uncompleted for years – monitor and enforce training completion rates.

Relevance to training and awareness

Redacting documents, e-mail distribution lists (BCC), data protection training

Missing or inadequate training played a role in the decision.

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Data breaches and data security
Legal basis
Data Protection Act 2018, Section 40
Action
Order
Status of proceedings
unknown
Sector
Public sector
Employees
10,000 or more
Culpability
negligent
Published
5 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jul 2026 The New Brunswick Lotteries and Gaming CorporationFINTRAC: CAD 399,712.50 penalty on The New Brunswick Lotteries and Gaming Corporation for one violation of anti-money laundering obligations CanadaSuspicious activity reports €249,415

According to FINTRAC, The New Brunswick Lotteries and Gaming Corporation is a reporting entity in the casino sector based in Fredericton, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 399,712.50 on the company on 24 July 2026. According to FINTRAC's findings, made during a compliance examination, the company committed one violation of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violation concerned suspicious transaction reporting. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on the New Brunswick Lotteries and Gaming Corporation", published 3 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-03-2-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
PCMLTFA s. 7; Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Other
Published
3 Sep 2026

Original amount 399,712.5 CAD, converted at the ECB reference rate of 24 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jul 2026 Société d'exploitation d'un service d'information (SESI)Arcom: EUR 200,000 fine on CNews operator SESI over programme breaches FranceOther €200,000

On 24 July 2026 Arcom imposed a fine of EUR 200,000 on Société d'exploitation d'un service d'information (SESI), the operator of the news channel CNews. In Arcom's view, two programmes broadcast in June and September 2025 contained statements about people of (presumed) immigrant background and Muslims, without sufficient context or challenge, that were capable of inciting hatred and discrimination; Arcom considered this a breach of Article 15 of Law No 86-1067 and of the channel's contractual obligations on non-discrimination and control of its programming. In setting the amount, Arcom took into account earlier sanctions against SESI for breaches of the same obligations in 2021 and 2024. Arcom did not sanction a third programme it examined. Whether the decision has been appealed is not known here.

What organisations can take from it

Broadcasters of opinion formats must put polarising statements into editorial context; a lack of challenge in the studio reflects on the broadcaster.

Relevance to training and awareness

Editorial framing of polarising statements

Authority / court
Autorité de régulation de la communication audiovisuelle et numérique (Arcom)
Area of law
Other
Legal basis
Art. 15, 42-1 und 42-2 Loi n° 86-1067 du 30 septembre 1986 (liberté de communication); Art. 2-2-1 und 2-3-2 der Vereinbarungen vom 27. November 2019 und 10. Dezember 2024
Action
Fine
Status of proceedings
unknown
Sector
Media and online platforms
Repeat case
yes
Published
29 Jul 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jul 2026 Callcenter (anonymisiert)BNetzA: €34,327 fine on call centre, including for incomplete records of consent GermanyMarketing and consent €34,327

The Bundesnetzagentur (Federal Network Agency) imposed fines totalling 34,327 EUR on a call centre that mainly marketed telecoms products: 32,000 EUR for unlawful telephone advertising and 2,327 EUR because consents to sales calls had not been fully documented. The campaign continued despite the gaps and requests to stop calling were sometimes ignored; the company has appealed.

What organisations can take from it

Consents to telephone marketing must be fully documented – if the proof is missing, the campaign must not continue.

Relevance to training and awareness

Consent and proof of consent for telephone marketing

Authority / court
Bundesnetzagentur (BNetzA)
Area of law
Data protection · Marketing and consent
Legal basis
UWG – Verbot unerlaubter Telefonwerbung gegenüber Verbraucherinnen und Verbrauchern; § 7a UWG (Dokumentation und Aufbewahrung von Einwilligungen)
Action
Fine
Status of proceedings
under appeal
Sector
Other

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jul 2026 Shelbit General Trading L.L.CVARA sanctions Shelbit again for unlicensed crypto services, missing KYC and promotion United Arab EmiratesCustomer due diligence Fine

Despite a cease-and-desist notice and enforcement action of 2 January 2025, the Virtual Assets Regulatory Authority (VARA, Dubai's virtual assets regulator) found that Shelbit General Trading L.L.C (Shelbit Exchange) continued to provide virtual asset services in and from Dubai without a licence, onboarded users without the mandatory KYC checks and promoted its services without authorisation. VARA again imposed fines of an undisclosed amount and ordered it to cease immediately; according to the regulator, the risk identified also concerned cross-border transactions with possible consequences for the integrity of the UAE financial system.

What organisations can take from it

Disregarding a cease-and-desist order leads to further sanctions – the regulator keeps monitoring the market after the first action.

Relevance to training and awareness

Compliance with cease-and-desist orders and KYC obligations

Authority / court
Virtual Assets Regulatory Authority (VARA), Dubai
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Federal Decree-Law No. (10) of 2025 (AML/CFT/PF); Cabinet Resolution No. (111) of 2022; Dubai Law No. (4) of 2022 Regulating Virtual Assets in the Emirate of Dubai; VARA Regulations and Rulebooks
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Repeat case
yes
Published
24 Jul 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 GoogleDMA: 890 million EUR against Google over self-preferencing and Play steering EU levelPlatform obligations €890m

In two decisions, the European Commission found that Google favours its own services in search (460 million EUR) and prevents app developers on Google Play from steering customers to alternative offers (430 million EUR). Google was ordered to bring the infringements to an end.

What organisations can take from it

Platforms' ranking rules and fee models must be demonstrably non-discriminatory and designed in compliance with the Digital Markets Act (DMA).

Authority / court
Europäische Kommission
Area of law
AI and digital regulation · Platform obligations
Legal basis
Verordnung (EU) 2022/1925 (DMA), Selbstbevorzugungsverbot und Anti-Steering-Pflicht
Action
Fine
Status of proceedings
unknown
Sector
Telecoms, IT and software
Employees
10,000 or more
Published
23 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 TIM S.p.A.Garante: €9.5m fine for TIM over unlawful telemarketing through partner call centres ItalyMarketing and consent €9.52m

The Garante (Italian data protection authority) fined TIM 9,516,000 EUR because call centres outside the official sales network made promotional calls on the company's behalf using numbers not recorded in the operators' register ROC or falsified numbers (spoofing), often to lines entered in the do-not-call register, and the contacts obtained in this way reached its systems as apparently lawful leads via fictitious call-back requests on sales partners' web forms. The authority found that TIM had selected and supervised its sales partners inadequately and had systematically failed to answer, or answered late, requests for access, erasure and objection. In addition, TIM must secure its lead process, strengthen oversight of the sales chain and adapt its procedures for data subject rights.

What organisations can take from it

Anyone acquiring customers through agencies and call centres must actively monitor the entire lead chain – a code of conduct does not replace that oversight.

Relevance to training and awareness

Oversight of sales partners and call centres in telemarketing

Authority / court
Garante per la protezione dei dati personali
Area of law
Data protection · Marketing and consent
Legal basis
Art. 5, 6, 7, 12, 15–22, 24, 25, 28 und 32 DSGVO; Art. 130 Codice in materia di protezione dei dati personali (D.Lgs. 196/2003)
Action
Fine
Status of proceedings
unknown
Sector
Telecoms, IT and software
Employees
10,000 or more
Culpability
negligent
Repeat case
yes
Mitigating circumstances
Taken into account as mitigating: short period and limited number of data subjects, measures taken during the proceedings (including checks on and termination of contracts with partners), a high level of cooperation, no special categories of personal data, adherence to the telemarketing code of conduct and substantial investment in controlling the sales chain.
Published
31 Jul 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 Evolution Malta Holding LimitedEvolution: £4.75m because its own games ran on unlicensed sites accessible in GB United KingdomInternal controls €5.57m

The games supplier will pay £4,750,000 in lieu of a financial penalty under a regulatory settlement, contribute to the Commission's investigation costs and accept an additional licence condition requiring an independent audit within twelve months. Five genuine Evolution games were accessible at scale to consumers in Great Britain via six websites of two operators not licensed by the Gambling Commission; between April 2024 and January 2025, its risk assessment and its anti-money laundering policies and controls did not adequately address risks arising from business partners in particular (LC 12.1.1, LC 12.1.2). After the Commission notified it in December 2024, Evolution immediately and permanently blocked the games for users in Great Britain.

What organisations can take from it

B2B suppliers must monitor where their products are actually offered and stop their use by unlicensed operators.

Relevance to training and awareness

Control over the distribution of own products to unlicensed operators

Authority / court
Gambling Commission
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
s. 116 Gambling Act 2005; LC 12.1.1 Abs. 1–3 und LC 12.1.2 der Licence Conditions and Codes of Practice (LCCP); Reg. 18, 19(1)(a) und 28(1) Money Laundering, Terrorist Financing and Transfer of Funds (Information on the Payer) Regulations 2017
Action
Fine
Status of proceedings
final
Sector
Other
Mitigating circumstances
A swift action plan with progress updates, full cooperation with the investigation and early acceptance of the failings.
Published
23 Jul 2026

Original amount 4,750,000 GBP, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 Caisse populaire acadienne ltéeFINTRAC: CAD 676,500 penalty on Caisse populaire acadienne ltée for 3 violations of anti-money laundering obligations CanadaSuspicious activity reports €421,916

According to FINTRAC, Caisse populaire acadienne ltée is a federally regulated credit union based in Caraquet, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 676,500 on the company on 23 July 2026. According to FINTRAC's findings, made during a compliance examination, the company committed 3 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned suspicious transaction reporting, written compliance policies and procedures and assessing and documenting money laundering and terrorist financing risks. Specifically, according to FINTRAC, the credit union failed in four instances to report multiple transactions that showed indicators of suspicion. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Caisse populaire acadienne ltée", published 24 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-24-4-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
PCMLTFA s. 7, 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c), 156(2); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
24 Sep 2026

Original amount 676,500 CAD, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 Orchids Builders LLCFlorida roofer: OSHA proposes $349,754 over allegedly repeated lack of fall protection USAWorkplace safety and accidents €307,017

According to the U.S. Occupational Safety and Health Administration (OSHA), inspectors found on 21 January and 10 March 2026 at two residential construction sites in Rockledge that employees of the roofing contractor were working on roofs without fall protection; training records, eye protection when using nail guns and ladders extending sufficiently above the roof edge were also missing. The company had been inspected seven times since 2023, each time with citations for fall protection. OSHA proposed penalties of $349,754 (2 violations classified as wilful, 4 as repeat); the violations are alleged and may be contested.

What organisations can take from it

Companies that allow the same fall hazards to recur after earlier inspections risk classification as a repeat or wilful violation with substantially higher penalties.

Relevance to training and awareness

Fall protection during roofing work

Missing or inadequate training played a role in the decision.

Authority / court
U.S. Department of Labor – Occupational Safety and Health Administration (OSHA)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
29 CFR 1926 Subpart M (Fall Protection), Subpart X (Ladders)
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Culpability
intentional
Repeat case
yes
Published
23 Jul 2026

Original amount 349,754 USD, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 Nova Scotia Gaming CorporationFINTRAC: 231,826 CAD against Nova Scotia Gaming over missing suspicious transaction reports CanadaSuspicious activity reports €144,584

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) imposed 231,826 CAD on the Halifax gaming corporation (casino sector) because it failed to file suspicious transaction reports on attempted transactions despite reasonable grounds for suspicion, did not keep its compliance policies up to date and approved by a senior officer, and did not assess the money laundering risk as required. The penalty was paid in full.

What organisations can take from it

Even aborted or merely attempted transactions can be reportable – cashier staff must know this.

Relevance to training and awareness

Suspicious transaction reports even for merely attempted transactions

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
Proceeds of Crime (Money Laundering) and Terrorist Financing Act, Part 1, und zugehörige Verordnungen
Action
Fine
Status of proceedings
final
Sector
Other
Published
3 Sep 2026

Original amount 231,826 CAD, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jul 2026 Arla Foods Ingredientes Comércio de Produtos Alimentícios Unipessoal Ltda.Arla Foods Ingredientes: leniency agreement after self-report for BRL 31,056.36 BrazilBribery and corruption €5,375

Arla Foods Ingredientes Comércio de Produtos Alimentícios Unipessoal Ltda. entered into a leniency agreement with the Controladoria-Geral da União (CGU, Office of the Comptroller General) and the Advocacia-Geral da União (AGU, Office of the Attorney General) concerning violations of the Anti-Corruption Law described in an unpublished annex; it had been the first to come forward, in October 2022. The alleged fine of BRL 31,056.36 derives from a preliminary fine of BRL 93,150.45, based on 2021 gross revenue of BRL 6,210,029.68, reduced by 66.66% for self-reporting, degree of cooperation and payment terms.

What organisations can take from it

Self-reporting, full cooperation and the payment terms can together cut a fine under Brazil's Anti-Corruption Law by two thirds in a leniency agreement.

Relevance to training and awareness

Self-reporting and cooperation where corruption is suspected

Authority / court
Controladoria-Geral da União (CGU) und Advocacia-Geral da União (AGU)
Area of law
Bribery and corruption
Legal basis
Lei nº 12.846/2013, Art. 16 und 17; Decreto nº 11.129/2022, Art. 22, 23 und 47; Lei nº 8.429/1992
Action
Fine
Status of proceedings
final
Sector
Food and agriculture
Mitigating circumstances
Total reduction of 66.66% (22.22% each for self-reporting, degree of cooperation and payment terms); compensation for losses, cooperation and voluntary admission also counted as mitigating factors in the calculation.
Liability of senior managers
As an aggravating factor, the CGU found that management tolerated or was aware of the acts (3% uplift).

Original amount 31,056.36 BRL, converted at the ECB reference rate of 23 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

21 Jul 2026 Dragon Alfa Cement LimitedCement plant with 12 employees: 1 million GBP after fatal accident at unguarded machinery United KingdomWorkplace safety and accidents €1.17m

In 2021 a 35-year-old employee was crushed by a 1.6-tonne concrete weight at the cement bagging plant in Sharpness. A large section of the perimeter fencing had routinely been removed over a prolonged period, leaving dangerous moving parts freely accessible. The company – with 12 employees according to its 2024 annual accounts – was fined 1 million GBP plus 9,621 GBP in costs.

What organisations can take from it

Treat removed guard fencing as a management failure and stop it – tolerating permanently open danger zones can lead to fines in the millions, even for a small business.

Authority / court
Bristol Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2(1) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Employees
Under 50
Published
21 Jul 2026

Original amount 1,000,000 GBP, converted at the ECB reference rate of 21 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

21 Jul 2026 Hôpital Privé de la LoireHôpital Privé de la Loire: 500,000 EUR after data exfiltration affecting over 520,000 patients FranceData breaches and data security €500,000

In summer 2025, an attacker gained access to the private hospital's electronic patient record system and obtained data on 524,867 patients and 202,246 trusted persons. There was no VPN or multi-factor authentication for external users, no appropriate access control and no detection of suspicious activity; the trusted persons were not notified. France's data protection authority (Commission nationale de l'informatique et des libertés, CNIL) imposed a fine of 500,000 EUR (SAN-2026-009).

What organisations can take from it

External access to patient records belongs behind multi-factor authentication and continuous monitoring for unusual access.

Relevance to training and awareness

Access security and attack detection in hospitals

Authority / court
Commission nationale de l'informatique et des libertés (CNIL)
Area of law
Data protection · Data breaches and data security
Legal basis
DSGVO Art. 32, Art. 34
Action
Fine
Status of proceedings
final
Sector
Healthcare
Published
3 Sep 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

21 Jul 2026 1-800-Flowers.com, Inc.New York: 1-800-Flowers pays 375,000 USD over concealed subscription renewals USA, NYInformation duties in online retail €328,429

According to the Attorney General's office, the company sold an annual shipping subscription ("Celebrations Passport") whose terms between February 2021 and June 2022 appeared only in small print, in linked terms or in pop-up boxes; a post-purchase acknowledgement and a notice before automatic renewal were missing. In the Assurance of Discontinuance it undertakes to pay 375,000 USD in penalties, fees and costs, to refund subscribers and to change its subscription processes. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Automatically renewing subscriptions need clear terms before purchase, a purchase acknowledgement and a reminder before renewal.

Relevance to training and awareness

Transparent subscription models with automatic renewal

Authority / court
Office of the New York State Attorney General
Area of law
Consumer protection and online retail · Information duties in online retail
Legal basis
New York General Business Law §§ 349, 527-a; Executive Law § 63(12); Restore Online Shoppers' Confidence Act (15 U.S.C. § 8403)
Action
Fine
Status of proceedings
final
Sector
Retail and e-commerce
Published
22 Jul 2026

Original amount 375,000 USD, converted at the ECB reference rate of 21 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

21 Jul 2026 EXTIACNIL: €300,000 fine for EXTIA over unprocessed erasure requests FranceData subject rights and transparency €300,000

The CNIL (French data protection authority) fined the IT and engineering consultancy EXTIA EUR 300,000 because, of 265 erasure requests received in 2024 – mostly from job applicants, occasionally from former employees – 12 were not processed at all and 166 applicants were not told of the outcome; 27 received their reply only after the one-month deadline. The CNIL regarded this as particularly negligent, especially as the company had already been reminded of its obligations by the CNIL twice in 2024 (Art. 12 and 17 GDPR).

What organisations can take from it

Automatic deletion routines do not replace a timely reply to the person who requested erasure.

Relevance to training and awareness

Handling erasure requests

Authority / court
Commission nationale de l'informatique et des libertés (CNIL), formation restreinte
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 12 und 17 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Telecoms, IT and software
Employees
1,000 to 9,999
Culpability
negligent
Repeat case
yes
Mitigating circumstances
During the proceedings the company deleted the data concerned and informed the applicants retrospectively.
Published
9 Sep 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

21 Jul 2026 Maxxis International GmbH, Best4Tires Berlin GmbH, Reifen Müller GmbH & Co. KGBundeskartellamt: fines over resale price maintenance in tyre distribution (Maxxis/CST) GermanyCartels and collusion Fine

Maxxis guaranteed wholesalers fixed margins per tyre sold of the Maxxis and CST brands, monitored prices in particular on the Tyre24 platform and intervened when prices were too low. Germany's Federal Cartel Office (Bundeskartellamt) imposed fines on Maxxis and two tyre wholesalers that had pushed for the margin guarantees; at the time of publication the decisions were not final (an objection to the Higher Regional Court of Düsseldorf was possible).

What organisations can take from it

Margin guarantees and price controls vis-à-vis dealers constitute prohibited resale price maintenance – sales teams need clear rules for price discussions.

Relevance to training and awareness

Influencing resale prices and price monitoring on platforms

Authority / court
Bundeskartellamt
Area of law
Competition law · Cartels and collusion
Legal basis
§ 1 GWB (vertikale Preisbindung)
Action
Fine
Status of proceedings
unknown
Sector
Automotive
Mitigating circumstances
Settlement with Maxxis and Reifen Müller
Published
21 Jul 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Jul 2026 AliExpressDSA: 550 million EUR against AliExpress over illegal and unsafe products EU levelPlatform obligations €550m

AliExpress did not diligently assess the risks posed by illegal, unsafe and counterfeit products (including insufficient moderation capacity, recommender and advertising systems) and did not take effective countermeasures (including deficient enforcement of sanctions against traders, product checks that could be circumvented). The European Commission imposed 550 million EUR under the Digital Services Act (DSA) and required an action plan by 20 October 2026.

What organisations can take from it

The size of a marketplace does not justify gaps: moderation capacity and sanctions against traders must match the actual risk.

Authority / court
Europäische Kommission
Area of law
AI and digital regulation · Platform obligations
Legal basis
Verordnung (EU) 2022/2065 (DSA), Risikobewertung und Risikominderung
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Mitigating circumstances
Novelty of the Digital Services Act (taken into account by the Commission when setting the fine)
Published
20 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Jul 2026 NeoGenomics Laboratories Inc.NeoGenomics: 9.8 million USD after self-disclosure – discounted consulting for referring physicians USACommercial bribery €8.59m

The Florida laboratory provided referring physicians with consulting services below market value and paid independent consultants referral-based remuneration for recruiting physicians. Following a self-disclosure, NeoGenomics paid 9,813,260 USD.

What organisations can take from it

Free or discounted services are also benefits – like cash payments, they belong in the anti-corruption review.

Relevance to training and awareness

Services with monetary value provided to customers below market value

Authority / court
U.S. Department of Justice
Area of law
Bribery and corruption · Commercial bribery
Legal basis
Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
Action
Other
Status of proceedings
final
Sector
Healthcare
Mitigating circumstances
Self-disclosure of the remuneration arrangements.

Original amount 9,813,260 USD, converted at the ECB reference rate of 20 Jul 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Jul 2026 EyePoint Pharmaceuticals, Inc.EyePoint: 4.66 million USD – kickbacks to surgery centres for purchasing an eye medicine USACommercial bribery €4.08m

Between January 2019 and March 2023, the pharmaceutical manufacturer allegedly paid kickbacks to ambulatory surgery centres to induce them to purchase and use the injectable drug DEXYCU for cataract surgery. To resolve the False Claims Act allegations, EyePoint paid 4,657,463.18 USD and entered into a Corporate Integrity Agreement with HHS-OIG.

What organisations can take from it

Discounts, payments or services to institutions that make purchasing decisions require a documented consideration at market value.

Relevance to training and awareness

Granting benefits to customers and purchasing decision-makers

Authority / court
U.S. Department of Justice
Area of law
Bribery and corruption · Commercial bribery
Legal basis
Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
Action
Other
Status of proceedings
final
Sector
Chemicals and pharmaceuticals

Original amount 4,657,463.18 USD, converted at the ECB reference rate of 20 Jul 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Jul 2026 Enforcesco, S.A.Portugal: €107,920 for Enforcesco over switches without consent and gas reserves PortugalConsumer protection and online retail €107,920

In a settlement procedure the energy regulator ordered electricity and gas supplier Enforcesco to pay 107,920 EUR in total: 90,000 EUR (halved from 180,000 EUR) under the energy-sector sanctions regime and 17,920 EUR in voluntarily paid fines for economic administrative offences. The breaches included taking over 6,853 customers without explicit consent, failing to hold the required natural gas security reserves from January 2023 to February 2025, incorrect invoices, an unlawful disconnection and a call-centre answer rate of only 57.8% in 2023.

What organisations can take from it

Mass customer acquisitions without documented consent and neglected mandatory reserves reveal a lack of compliance oversight during growth.

Relevance to training and awareness

Consent for supplier switching and the duty to hold security-of-supply reserves

Authority / court
Entidade Reguladora dos Serviços Energéticos (ERSE)
Area of law
Consumer protection and online retail
Legal basis
Lei n.º 9/2013 (RSSE), Art. 28 und 29, i. V. m. RRC 2020 und geltendem RRC, RQS, Diretivas ERSE n.º 1/2018 und 22/2022, Portaria n.º 59/2022; RJCE
Action
Fine
Status of proceedings
final
Sector
Energy and utilities
Culpability
negligent
Mitigating circumstances
Full admission, cooperation, remedying of all breaches, the company's financial situation and compensation of three customers (150 EUR in total) were taken into account in the settlement procedure.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Jul 2026 The Scoular CompanyAgricultural trader Scoular pays 10 million USD over bribes to Mexican border officials USABribery of public officials €8.91m

From 2013 to 2019, Scoular had customs brokers pay around 400,000 USD to Mexican border and inspection officials so that trains carrying contaminated maize and grain would pass inspections; some of the money went to individuals close to cartels. Three-year DPA with a criminal penalty of 9,769,521 USD and forfeiture of 414,351 USD.

What organisations can take from it

Customs agents and freight forwarders are high-risk third parties: question conspicuous flat fees per shipment, even if they appear to be customary charges.

Relevance to training and awareness

Facilitation payments via customs agents and logistics service providers

Missing or inadequate training played a role in the decision.

Authority / court
U.S. Department of Justice (Criminal Division, Fraud Section; USAO Western District of Texas)
Area of law
Bribery and corruption · Bribery of public officials
Legal basis
FCPA (Verschwörung zur Verletzung der Anti-Bestechungsvorschriften); Deferred Prosecution Agreement
Action
Fine
Status of proceedings
final
Sector
Food and agriculture
Culpability
intentional
Mitigating circumstances
Cooperation and remediation (including an overhaul of compliance, third-party management, financial controls and anti-corruption training); 25 % reduction off the low end of the sentencing guidelines range.
Liability of senior managers
Measures against individuals are not reported here.
Published
17 Jul 2026

Original amount 10,183,872 USD, converted at the ECB reference rate of 17 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Jul 2026 Southern WaterSouthern Water: £7.1m fine for repeated sewage discharges in Kent United KingdomEmissions and permits €8.38m

Canterbury Crown Court fined Southern Water £7,127,083 for 13 breaches of the Environmental Permitting Regulations 2016, plus £149,000 in prosecution costs and a £181 victim surcharge. Between 2019 and 2021, failed pumps and poorly maintained equipment at the Margate and Broadstairs pumping stations led to several discharges of untreated sewage into the sea, some of which were reported only the next day or weeks later; beaches had to be closed. The company also admitted 35 further unlawful discharges from the same period.

What organisations can take from it

Maintaining critical pumping equipment and reporting every discharge to the regulator immediately are core duties of any permit holder.

Relevance to training and awareness

Plant maintenance and prompt reporting of environmental incidents

Authority / court
Canterbury Crown Court (Anklage: Environment Agency)
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Reg. 12(1)(b) und 38(1)(a) Environmental Permitting (England and Wales) Regulations 2016
Action
Fine
Status of proceedings
unknown
Sector
Energy and utilities
Repeat case
yes
Published
17 Jul 2026

Original amount 7,127,083 GBP, converted at the ECB reference rate of 17 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Jul 2026 Puratos LimitedPuratos: 120,000 GBP for flour dust above exposure limits and heavy sack handling United KingdomWorkplace safety and accidents €141,014

During an inspection in December 2024, the Health and Safety Executive (HSE) found dust escaping from machinery, blowing down with compressed air and dry sweeping at the bakery ingredients factory; measurements confirmed that workplace exposure limits had been exceeded, with a risk of asthma. In addition, employees lifted 25 kg sacks by hand every day. The site had already been cited in 2021 for the same deficiencies; fine of 120,000 GBP plus 6,270 GBP in costs. According to the annual accounts filed with the UK companies register for financial year 2024, the company had around 116 employees.

What organisations can take from it

Companies that do not permanently remedy deficiencies after a citation pay significantly more the next time – flour dust is a recognised cause of asthma.

Relevance to training and awareness

Dust exposure and lifting heavy loads

Authority / court
Health and Safety Executive (Milton Keynes Magistrates' Court)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Health and Safety at Work etc. Act 1974, s. 2(1)
Action
Fine
Status of proceedings
final
Sector
Food and agriculture
Employees
50 to 249
Repeat case
yes
Published
20 Jul 2026

Original amount 120,000 GBP, converted at the ECB reference rate of 17 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Jul 2026 Orange România SAOrange România pays 100,000 EUR after app errors and hacked ticketing system RomaniaData breaches and data security €99,969

A synchronisation error between two applications allowed a customer to retrieve other customers’ invoices in the mobile app; in addition, the ticketing platform, which was publicly accessible without VPN, MFA or IP restriction, was attacked and a very large data set (including copies of identity documents, card data, IBANs) was exfiltrated. The Romanian data protection authority (ANSPDCP) imposed fines of 104,780 lei (20,000 EUR, Art. 25) and 419,120 lei (80,000 EUR, Art. 32), a total of 523,900 lei, and ordered test and change management. Date = publication of the press release; according to the authority, the investigation was concluded in the previous month.

What organisations can take from it

Never expose internal platforms to the internet without VPN/MFA; software changes to linked systems need testing before go-live.

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 25 Abs. 1, Art. 32 Abs. 1 lit. b und d, Abs. 2 und 4 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Telecoms, IT and software
Published
17 Jul 2026

Original amount 523,900 RON, converted at the ECB reference rate of 17 Jul 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jul 2026 Swedbank AB (publ) (mit New York Branch)NYDFS: USD 50 million against Swedbank for withholding information USA, New YorkDisclosure and reporting obligations €43.6m

The NYDFS imposed a penalty of USD 50 million on Swedbank AB (publ) and its New York branch. In response to several requests by the regulator under section 37 of the New York Banking Law concerning links between its Baltic subsidiaries and the law firm Mossack Fonseca (Panama Papers) and the status of European investigations, the bank did not provide the requested information, in breach of section 125(3) of the New York Banking Law. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Information requests from the regulator must be answered in full; withholding information is sanctioned in its own right.

Relevance to training and awareness

Complete and truthful disclosures to the regulator

Authority / court
New York State Department of Financial Services (NYDFS)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
New York Banking Law § 125(3) i. V. m. § 37; Sanktion nach Banking Law §§ 39, 44
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Employees
10,000 or more
Liability of senior managers
According to the order, the bank has since, among other things, dismissed its then Chief Compliance Officer and its former CEO and parted ways with numerous other employees; the majority of the board has been replaced.
Published
16 Jul 2026

Original amount 50,000,000 USD, converted at the ECB reference rate of 16 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jul 2026 HDI Global SEPRA: £4.165m fine on HDI Global SE for inaccurate data on the FSCS compensation scheme United KingdomDisclosure and reporting obligations €4.91m

The PRA fined HDI Global SE, an insurer headquartered in Hanover that operates in the UK through a branch, 4,165,000 GBP. Between August 2021 and August 2024 the firm repeatedly submitted incorrect data on liabilities protected by the FSCS and on the FSCS levy tariff, including in supposedly corrected submissions; it lacked written procedures, clear accountability and internal oversight, and before summer 2023 it did not consult the PRA's rules and guidance.

What organisations can take from it

Returns used to calculate levies need documented calculation procedures and independent review – especially where corrections are submitted.

Authority / court
Prudential Regulation Authority (PRA), Bank of England
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
PRA Fundamental Rules 2 und 6; s. 206 FSMA 2000
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Culpability
negligent
Mitigating circumstances
Detailed account under the Early Account Scheme, settlement with a 30% discount (otherwise 5,950,000 GBP), corrected historical data and additional FSCS levies paid; in the PRA's view the breaches were neither deliberate nor reckless.
Published
20 Jul 2026

Original amount 4,165,000 GBP, converted at the ECB reference rate of 16 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jul 2026 TeamViewer SETeamViewer: cyberattack not disclosed as inside information without delay GermanyDisclosure and reporting obligations €240,000

Germany's Federal Financial Supervisory Authority (Bundesanstalt für Finanzdienstleistungsaufsicht, BaFin) imposed a fine of 240,000 EUR on the software company because it had not disclosed the information about a cyberattack it had suffered as inside information without delay. The fine notice is final.

What organisations can take from it

Put serious IT security incidents immediately before the ad hoc disclosure committee as well – the incident response process must take capital market disclosure into account.

Relevance to training and awareness

Recognising security incidents as potential inside information and reporting them to the ad hoc disclosure committee

Authority / court
Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 17 Abs. 1 UAbs. 1 MAR (EU) Nr. 596/2014
Action
Fine
Status of proceedings
final
Sector
Telecoms, IT and software
Published
20 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jul 2026 Royal Mail Group LtdTribunal: Royal Mail subjected whistleblower to detriment – £6,978 compensation United KingdomRetaliation against whistleblowers €8,222

The Employment Tribunal in Manchester found that the claimant had been subjected to detriment because of a protected disclosure and awarded her the agreed amount of £6,978.20. The claims for disability discrimination and constructive dismissal were dismissed.

What organisations can take from it

Large organisations, too, must ensure that whistleblowers do not suffer disadvantages in their day-to-day work.

Relevance to training and awareness

How managers handle internal reports

Authority / court
Employment Tribunal
Area of law
Whistleblower protection · Retaliation against whistleblowers
Legal basis
Employment Rights Act 1996, s. 47B (Benachteiligung wegen geschützter Offenlegung)
Action
Other
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Employees
10,000 or more
Published
7 Sep 2026

Original amount 6,978.2 GBP, converted at the ECB reference rate of 16 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jul 2026 BGH: online cancellation page must not offer a "pause contract" alternative GermanyInformation duties in online retail Order

On the confirmation page of its online cancellation process, a gym operator displayed a highlighted notice with the button "Pause contract via self-service"; in addition, the confirmation button was labelled "Find contract", which the defendant had already acknowledged. In an action brought by the Federation of German Consumer Organisations (Verbraucherzentrale Bundesverband), the BGH ruled that the confirmation page may only contain the information required for the cancellation and the confirmation button, set aside the judgment of the Higher Regional Court of Düsseldorf (OLG Düsseldorf) dismissing the action to that extent and ordered the operator to cease and desist.

What organisations can take from it

Keep retention or pause offers off the confirmation page of the online cancellation process.

Relevance to training and awareness

Design of the cancellation process (cancellation button, retention offers)

Authority / court
Bundesgerichtshof (I. Zivilsenat), Az. I ZR 200/25
Area of law
Consumer protection and online retail · Information duties in online retail
Legal basis
§ 312k Abs. 1 Satz 1, Abs. 2 BGB (Kündigungsbutton)
Action
Order
Status of proceedings
final
Sector
Other
Published
16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Jul 2026 New York Packaging II LLC (Redi-Bag USA)Redi-Bag USA: 7.3 million USD – “Made in China” marking on carrier bags concealed USACustoms €6.4m

The packaging supplier allegedly imported plastic carrier bags made in China via Hong Kong and declared them as goods from Hong Kong in order to evade anti-dumping duties of up to 77.57%. According to the US Department of Justice (DOJ), the company had employees cover up “Made in China” markings, concealed the origin from its customs broker and cancelled orders that were due to be inspected; the settlement of 7.3 million USD (a joint payment with a further settling party) resolves a whistleblower lawsuit.

What organisations can take from it

Never instruct staff to conceal origin markings – doing so turns a tariff issue into deliberate customs fraud; give employees a reporting channel for such instructions.

Relevance to training and awareness

Origin declarations and handling of origin markings in goods receipt

Authority / court
U.S. Department of Justice, Civil Division, und U.S. Attorney’s Office District of New Jersey
Area of law
Sanctions and export control · Customs
Legal basis
False Claims Act, 31 U.S.C. §§ 3729 ff. (Vergleich; Haftung nicht festgestellt)
Action
Other
Status of proceedings
final
Sector
Retail and e-commerce
Liability of senior managers
Measures against individuals are not reported here.
Published
15 Jul 2026

Original amount 7,300,000 USD, converted at the ECB reference rate of 15 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Jul 2026 Vanilla Chip LLC (TruHeight)TruHeight: FTC settlement over allegedly fake reviews for growth supplement USAFake reviews €657,549

According to the FTC, employees of the dietary supplement provider wrote thousands of five-star reviews, customers received free products or discounts in return for five-star reviews, and bot profiles posed as real users; in addition, there were unsubstantiated growth claims for children and adolescents. The final settlement order provides for a judgment of 4 million USD, which is partially suspended on account of limited ability to pay after a joint payment of 750,000 USD by the liable parties.

What organisations can take from it

Reviews by employees or reviews rewarded for positive star ratings are prohibited and, since 2024, subject to civil penalties.

Relevance to training and awareness

Fake and purchased customer reviews

Authority / court
Federal Trade Commission (FTC)
Area of law
Consumer protection and online retail · Fake reviews
Legal basis
Section 5 FTC Act; FTC Rule on the Use of Consumer Reviews and Testimonials
Action
Disgorgement of profits
Status of proceedings
final
Sector
Food and agriculture
Mitigating circumstances
Partial suspension of the judgment on account of limited ability to pay.
Liability of senior managers
Measures against individuals are not reported here.
Published
15 Jul 2026

Original amount 750,000 USD, converted at the ECB reference rate of 15 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Jul 2026 CalPlus GmbH, Elektronik-Kontor Messtechnik GmbH, TVW Meßtechnik GmbHBundeskartellamt: 453,000 EUR against distributors of test and measuring equipment GermanyCartels and collusion €453,000

From 2016 to 2022, three distributors of test and measuring equipment coordinated discounts as essential price components and informed each other of customer contacts, usually with a request for "restraint". This was evidenced by more than 400 emails; the proceedings ended in settlements.

What organisations can take from it

Small distributors are liable too: merely asking a competitor to "hold back" with a customer is a prohibited customer allocation agreement.

Relevance to training and awareness

Email contacts with competitors about customers and discounts

Authority / court
Bundeskartellamt
Area of law
Competition law · Cartels and collusion
Legal basis
§ 1 GWB
Action
Fine
Status of proceedings
final
Sector
Manufacturing and mechanical engineering
Mitigating circumstances
Settlement; cooperation by Elektronik-Kontor Messtechnik taken into account
Published
15 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Jul 2026 FleetPride Inc.FleetPride: $264,380 after asphyxiation death during tank trailer inspection USAWorkplace safety and accidents €231,790

At the truck parts distributor's Corpus Christi (Texas) site, an employee was asphyxiated while inspecting a tank trailer. The U.S. Occupational Safety and Health Administration (OSHA) found no confined space programme, deficiencies in the respiratory protection programme and electrical hazards, and proposed $264,380 (16 serious, 3 other violations).

What organisations can take from it

Tanks and vessels are confined spaces with a risk of asphyxiation – no one may enter without a permit, atmospheric testing and an attendant.

Relevance to training and awareness

Working in confined spaces and vessels

Authority / court
U.S. Department of Labor – Occupational Safety and Health Administration (OSHA)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
29 CFR 1910.146 (Permit-required confined spaces); 29 CFR 1910.134 (Respiratory protection)
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Published
15 Jul 2026

Original amount 264,380 USD, converted at the ECB reference rate of 15 Jul 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Jul 2026 Colonial Farms Ltd.Colonial Farms: CFIA administrative monetary penalty of 11,000 CAD under SFCR s. 88 CanadaOther €6,852

On 15 July 2026, the Canadian Food Inspection Agency (CFIA) imposed an administrative monetary penalty of 11,000 CAD on the company in Western Canada for a violation of s. 88 of the Safe Food for Canadians Regulations. An earlier penalty under the same provision from May 2025 was set aside in review proceedings.

What organisations can take from it

Companies that do not eliminate the cause after a first penalty risk repeat penalties and stricter supervision.

Authority / court
Canadian Food Inspection Agency (CFIA)
Area of law
Other
Legal basis
Safe Food for Canadians Regulations, s. 88
Action
Fine
Status of proceedings
final
Sector
Food and agriculture

Original amount 11,000 CAD, converted at the ECB reference rate of 15 Jul 2026.

Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

14 Jul 2026 Goldwin LtdMalta: 80,907 EUR against online casino Goldwin for missing customer risk assessment MaltaCustomer due diligence €80,907

The 2022 examination revealed that for more than two years the remote gaming operator had had no proper customer risk assessment for almost its entire player base; the assessments submitted had been prepared specifically for the examination. In addition, once players reached the deposit threshold of 2,000 EUR, it did not check in good time whether they were politically exposed persons. The Financial Intelligence Analysis Unit (FIAU) imposed 80,907 EUR; the fine was still open to appeal at the time of publication.

What organisations can take from it

Supervisory authorities see through risk assessments prepared only for the examination – they must be applied in day-to-day business.

Relevance to training and awareness

Risk-based customer assessment in gambling

Authority / court
Financial Intelligence Analysis Unit (FIAU)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Reg. 5(5)(a)(ii), 11(5), 21 PMLFTR; FIAU Implementing Procedures Part I und II (Remote Gaming)
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Jul 2026 Volksbank Düsseldorf Neuss eGBaFin: 210,000 EUR against Volksbank Düsseldorf Neuss over monitoring and reporting gaps GermanyCustomer due diligence €210,000

Germany's Federal Financial Supervisory Authority (BaFin) imposed fines totalling 210,000 EUR on the cooperative bank: business relationships were not monitored on an ongoing basis or with enhanced scrutiny, additional information was not obtained and suspicious activity reports were not filed or were filed late. The function of the money laundering reporting officer had been outsourced to an external service provider with several clients.

What organisations can take from it

Institutions that outsource the anti-money laundering function remain responsible themselves for ongoing monitoring and timely suspicious activity reports.

Relevance to training and awareness

Ongoing monitoring of business relationships and suspicious activity reporting

Authority / court
Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
§ 56 Abs. 1 S. 1 Nr. 20, 36, 38 und 69 GwG; Bekanntmachung nach § 57 GwG
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
17 Sep 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Jul 2026 Brown Capital Management LLCBrown Capital Management: voting rights notifications not submitted on time GermanyDisclosure and reporting obligations €187,500

The Baltimore-based US asset manager had not submitted voting rights notifications to the issuer and BaFin in time; the deadline is four trading days after reaching a notifiable threshold. BaFin imposed a fine of 187,500 EUR; the notice is final.

What organisations can take from it

Anyone investing in German issuers needs automated threshold monitoring with clear responsibility for the four-day deadline.

Relevance to training and awareness

Threshold monitoring and notification deadlines for shareholdings

Authority / court
Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
§ 33 Abs. 1 Satz 1 WpHG
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
22 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Jul 2026 RSX Informática Ltda.RSX Informática: BRL 8.8m and three-year debarment for procurement fraud BrazilBribery and corruption €1.49m

The Controladoria-Geral da União (CGU, Office of the Comptroller General) imposed on RSX Informática Ltda. a fine of BRL 8,794,574.67, extraordinary publication of the decision and a three-year ban on tendering for and contracting with the Federal Union, including removal from the supplier register SICAF. The case concerned fraud in a tender (pregão nº 5/2017) of the former Ministry of National Integration and in the resulting contracts; through the price registration agreement, other federal bodies, including the social security institute INSS with a software contract, contracted with the company without holding their own tender.

What organisations can take from it

Price registration agreements carry the effects of a rigged tender into many public bodies, so the award must be clean from the outset.

Relevance to training and awareness

Integrity in tenders and framework agreements

Authority / court
Controladoria-Geral da União (CGU)
Area of law
Bribery and corruption
Legal basis
Lei nº 12.846/2013, Art. 5 IV d, Art. 6 I und II; Lei nº 10.520/2002, Art. 7
Action
Fine
Status of proceedings
unknown
Sector
Telecoms, IT and software
Published
10 Jul 2026

Original amount 8,794,574.67 BRL, converted at the ECB reference rate of 9 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 Jul 2026 Hutchison Technologies LtdTribunal: Hutchison Technologies dismissed employee after she raised holiday pay concerns United KingdomRetaliation against whistleblowers Other

An employee of the Dundee-based electrical services provider for gyms (around 140 employees) had pointed out that the technicians' holiday pay was being calculated incorrectly; a few days later her home working arrangement was withdrawn, and on 11 June 2025 she was dismissed. The Employment Tribunal upheld her claims for automatically unfair dismissal (s. 103A) and detriment (s. 47B); compensation will be decided separately.

What organisations can take from it

Employers who worsen working conditions shortly after a disclosure must be able to prove a documented reason unrelated to the disclosure.

Relevance to training and awareness

How managers handle internal reports

Authority / court
Employment Tribunal
Area of law
Whistleblower protection · Retaliation against whistleblowers
Legal basis
Employment Rights Act 1996, ss. 43B, 47B, 103A
Action
Other
Status of proceedings
unknown
Sector
Other
Employees
50 to 249
Published
23 Jul 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 Jul 2026 Meta Platforms Inc.; Meta Platforms Ireland LimitedMeta: interim orders on remuneration for press content (neighbouring rights) FranceAbuse of market power Order

At the request of the press association Alliance de la Presse d’Information Générale (APIG), the Autorité de la concurrence (French Competition Authority) imposed interim measures on Meta because its conduct in negotiations on remuneration for press publishers’ neighbouring rights could amount to an abuse of a dominant position. Meta must negotiate in good faith on remuneration for all Meta services from 1 February 2025, provide the information needed for the assessment within 15 days, must not degrade the display of press content during the negotiations and must report to the authority monthly. On the same day a similar decision (26-MC-02) was issued at the request of the collective management organisation DVP.

What organisations can take from it

Dominant platforms must conduct remuneration negotiations transparently and give their negotiating partners the data that makes an objective assessment possible in the first place.

Relevance to training and awareness

Abuse of market power in remuneration negotiations with content providers

Authority / court
Autorité de la concurrence
Area of law
Competition law · Abuse of market power
Legal basis
Art. L. 464-1 Code de commerce (mesures conservatoires); vorläufige Würdigung nach Art. L. 420-2 Code de commerce und Art. 102 AEUV; Art. L. 218-4 Code de la propriété intellectuelle
Action
Order
Status of proceedings
under appeal
Sector
Media and online platforms
Employees
10,000 or more
Published
8 Jul 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

7 Jul 2026 Γενικό Νοσοκομείο Θεσσαλονίκης Γ. Γεννηματάς «Ο Άγιος Δημήτριος» (Allgemeines Krankenhaus Thessaloniki G. Gennimatas – Agios Dimitrios)Thessaloniki hospital: 25,000 EUR because surgery lists with diagnoses were online GreeceData breaches and data security €25,000

From May to the end of August 2024, the public hospital accidentally published on its website a surgery list containing patients' telephone numbers, illnesses and planned procedures; a member of the public found the document via Google. The Hellenic Data Protection Authority imposed a total of 25,000 EUR: 10,000 EUR for inadequate security, 2,000 EUR for the late notification, 10,000 EUR for failing to notify the data subjects and 3,000 EUR for missing contact details of the data protection officer (DPO).

What organisations can take from it

Every publication on the website needs an approval step that reliably intercepts documents containing health data – and after a data breach, data subjects must be informed.

Relevance to training and awareness

Publication of documents containing health data

Authority / court
Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority)
Area of law
Data protection · Data breaches and data security
Legal basis
DSGVO Art. 5 Abs. 1 lit. f, 32 Abs. 1, 33 Abs. 1, 34 Abs. 1, 12, 13 i. V. m. 37 (Entscheidung 13/2026)
Action
Fine
Status of proceedings
final
Sector
Healthcare

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

7 Jul 2026 Unternehmen mit drei Dienstfahrzeugen (in der Mitteilung nicht namentlich genannt)Administrative Court upholds ban on continuous GPS tracking of three company vehicles SloveniaEmployee data Order

The data protection authority had prohibited a company from tracking its three company vehicles continuously by GPS and ordered the data to be erased; narrow purposes such as theft protection while parked remained permitted. The Upravno sodišče Republike Slovenije (Administrative Court of the Republic of Slovenia) upheld this and clarified that employee consent bundled with other declarations is invalid.

What organisations can take from it

Employee consent rarely supports monitoring – and never when it is bundled with other declarations in the form.

Relevance to training and awareness

Consent and proportionality in employee monitoring

Authority / court
Upravno sodišče Republike Slovenije (bekanntgemacht durch den Informacijski pooblaščenec)
Area of law
Data protection · Employee data
Legal basis
Art. 6 Abs. 1 lit. f, Art. 7 Abs. 2 DSGVO
Action
Order
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Published
7 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Jul 2026 Emma Bridgewater LimitedEmma Bridgewater: snow machine falls during Christmas lights event – 266,666 GBP United KingdomWorkplace safety and accidents €311,752

During a Christmas lights event at the factory shop in Hanley in November 2024, an unsecured artificial snow machine fell from a window; shards of glass injured a twelve-year-old girl on the head. The ceramics manufacturer had not assessed the risks and, contrary to the manufacturer's instructions, had not secured the machine; fine of 266,666 GBP plus 4,931 GBP in costs. According to its annual accounts (financial year to April 2025), the company had an average of 345 employees.

What organisations can take from it

Treat marketing events as a health and safety matter: when installing equipment above the public, prevent objects from falling and follow the manufacturer's instructions.

Authority / court
Birmingham Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Regulation 10(1) Work at Height Regulations 2005; Section 3(1) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Manufacturing and mechanical engineering
Employees
250 to 999
Published
7 Jul 2026

Original amount 266,666 GBP, converted at the ECB reference rate of 6 Jul 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Jul 2026 ASX LimitedASX: 20.5 million AUD for misleading announcement on CHESS replacement project AustraliaDisclosure and reporting obligations €12.4m

The Federal Court of Australia, on application by the Australian Securities and Investments Commission (ASIC, Australia's corporate, markets and financial services regulator), imposed a penalty of 20.5 million AUD on the exchange operator because a market announcement of 10 February 2022 stated that the project to replace its CHESS clearing and settlement system was progressing well. About six weeks later ASX announced a likely delay and paused the project in November 2022; in June 2026 it admitted contraventions of ss 12DA and 12DB of the ASIC Act.

What organisations can take from it

Progress updates on major projects must reflect the actual status, including known risks – and operators of critical market infrastructure are held to a particularly high standard.

Relevance to training and awareness

Accuracy and balance of market announcements about ongoing major projects

Authority / court
Federal Court of Australia (auf Antrag der Australian Securities and Investments Commission, ASIC)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Australian Securities and Investments Commission Act 2001 (Cth) ss 12DA, 12DB(1)(a) und (e)
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Published
3 Jul 2026

Original amount 20,500,000 AUD, converted at the ECB reference rate of 3 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Jul 2026 Character Technologies, Inc. (Character.AI)Garante: €158,000 fine for Character.AI over transparency and age-verification failings ItalyData subject rights and transparency €158,000

The Garante (Italian data protection authority) fined the US operator of the generative AI service Character.AI, on which users – including minors – chat with virtual characters, 158,000 EUR, among other things for deficient privacy information, a data protection impact assessment prepared late and the late appointment of a representative in the EU. It also criticised weaknesses in the protection of minors and in age verification; within 120 days the company must ensure working age verification, an effective cooling-off period preventing blocked minors from re-registering and private-by-default profiles for minors.

What organisations can take from it

Anyone offering generative AI services in the EU needs complete privacy notices, an impact assessment, an EU representative and effective age verification before launch.

Relevance to training and awareness

Data protection by design and age verification for AI services

Authority / court
Garante per la protezione dei dati personali
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 5 Abs. 2, 12 Abs. 1, 13 Abs. 1 und 2, 14 Abs. 1 und 2, 24 Abs. 1, 25 Abs. 2, 27 Abs. 1 und 35 Abs. 1 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Telecoms, IT and software
Culpability
negligent
Repeat case
no
Mitigating circumstances
Mitigating: progressively strengthened age checks (a dedicated service for minors, age verification by a third-party provider), no previous relevant infringements, cooperation and amendments to the privacy policy during the proceedings.
Published
9 Jul 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Jul 2026 TMA Haulage LtdTMA Haulage: operator licence curtailed from five to four vehicles, revocation from 6 October 2026 United KingdomWorking time Other

Following an investigation by the Driver and Vehicle Standards Agency (DVSA), the Traffic Commissioner (regulator of commercial vehicle operators) found that the sole director of TMA Haulage Ltd had driven using the driver card of a former employee, thereby falsifying the records, three times in June and July 2025 and – after being interviewed by the DVSA – twice in April 2026; on one of those days he continued driving in this way without taking the break that was due. The operator's licence was curtailed immediately from five to four vehicles and revoked with effect from 6 October 2026. Measures against individuals are not set out here.

What organisations can take from it

Driver cards are strictly personal – regularly comparing vehicle unit data with the cards of the drivers deployed uncovers misuse before the authority does.

Relevance to training and awareness

Drivers' hours and misuse of driver cards

Authority / court
Traffic Commissioner (Western Traffic Area); Ermittlung: Driver and Vehicle Standards Agency (DVSA)
Area of law
Health and safety and employment law · Working time
Legal basis
Goods Vehicles (Licensing of Operators) Act 1995, ss. 26(1)(f), 27(1)(a) und (b); Road Traffic Act 1988, ss. 115, 117; Tachografen- und Lenkzeitvorschriften
Action
Other
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Culpability
intentional
Mitigating circumstances
According to the decision, points in the company's favour were: most compliance systems in place, drivers properly employed, an MOT pass rate in line with the national average, and the re-engagement of a consultant and legal representation.
Liability of senior managers
Measures against individuals are not set out here.
Published
22 Jul 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Jul 2026 IRB-Brasil Resseguros S.A.IRB-Brasil Resseguros: BRL 6.32m settlement over obstructing SUSEP supervision BrazilBribery and corruption €1.07m

IRB-Brasil Resseguros S.A. concluded a Termo de Compromisso (settlement in sanction proceedings) with the CGU and allegedly pays a fine of BRL 6,317,473.41 because the company had hindered the investigative and supervisory activity of the insurance supervisor SUSEP (Art. 5 V Lei 12.846/2013). The fine equals the statutory minimum of 0.1% of gross revenue (BRL 6,509,921.81) less BRL 192,448.40 already paid in SUSEP proceedings over inconsistent reporting. Extraordinary publication was waived, and the proceedings are thereby closed.

What organisations can take from it

Incomplete or inconsistent information given to a supervisory authority can, as obstruction of supervision, trigger an anti-corruption fine.

Relevance to training and awareness

Obstructing supervisory authorities through inaccurate information

Authority / court
Controladoria-Geral da União (CGU)
Area of law
Bribery and corruption
Legal basis
Lei 12.846/2013, Art. 5 V, Art. 6 I; Decreto 11.129/2022, Art. 25 § 2; Portaria Normativa CGU 155/2024
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Repeat case
no
Mitigating circumstances
Credit was given for a compliance programme (3.6%), the absence of proof of advantage or damage (1%) and settlement-related reductions for cooperation and admission; fines already paid to SUSEP were deducted.
Published
3 Jul 2026

Original amount 6,317,473.41 BRL, converted at the ECB reference rate of 2 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Jul 2026 Banca Transilvania S.A.Employee retrieves account statements for a third party – Banca Transilvania pays 5,000 EUR RomaniaData breaches and data security €5,002

At the request of a third party and outside the scope of his duties, a bank employee retrieved account statements of a data subject (name, IBAN, transactions, balances). The Romanian data protection authority (ANSPDCP) found insufficient technical and organisational measures and imposed 26,172 lei (5,000 EUR); the bank has paid the fine. Date = publication of the press release; according to the authority, the investigation was concluded in the previous month.

What organisations can take from it

Access logs and clear rules against ‘favour queries’ are a duty for every bank.

Relevance to training and awareness

Access to customer data for business purposes only; handling requests from third parties

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 32 Abs. 1, 2 und 4 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Published
2 Jul 2026

Original amount 26,172 RON, converted at the ECB reference rate of 2 Jul 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Jul 2026 SIA 4YOU MEBELESFurniture retailer 4YOU MEBELES ignores cookie inspection – first a reprimand, then 1,000 EUR LatviaCookies and tracking €1,000

In a targeted inspection of cookies on company websites, the Datu valsts inspekcija (Latvian Data State Inspectorate, DVI) found fault with the site 4mebeles.lv. After a reprimand in February 2026, the company claimed that the deficiencies had been remedied, which a further inspection disproved; further requests for information went unanswered. The DVI imposed 1,000 EUR for failure to cooperate and requested the missing information by 3 August 2026.

What organisations can take from it

Assurances given to the supervisory authority are checked – false statements and silence aggravate the sanction.

Relevance to training and awareness

Cookie banners and cooperation with the supervisory authority

Authority / court
Datu valsts inspekcija (DVI)
Area of law
Data protection · Cookies and tracking
Legal basis
Art. 58 Abs. 1, Art. 83 Abs. 5 lit. e DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Culpability
intentional
Repeat case
yes

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 Jul 2026 Datasonic Indústria e Distribuição de Eletrônicos Ltda., D.T.I. Comércio de Artigos de Informática Ltda., Pares Eletrônica Comercial e Industrial Eireli u. a. (10 Unternehmen)CADE: cartel fines on ten electronics suppliers, two later reduced BrazilCartels and collusion €699,960

In cartel proceedings, the CADE Tribunal fined ten suppliers of electronic products, while the signatories of a 2014 leniency agreement (Agilent and Keysight) and one company that had fulfilled a settlement were not sanctioned. The fines on the companies initially totalled 8,362,138.05 BRL; in the virtual deliberation procedure the plenary, deciding on motions for clarification (embargos) on 17 August 2026, reduced of its own motion the fines on Datasonic (from 4,329,605.69 to 856,937.12 BRL) and D.T.I. (from 1,021,750.18 to 265,406.99 BRL), leaving 4,133,126.29 BRL. The session minutes do not identify the market concerned. The amount and the facts have not been confirmed against the primary source.

What organisations can take from it

The first party to cooperate with the competition authority can escape sanctions, while the other participants pay.

Relevance to training and awareness

Cartel risks in distribution and the benefits of leniency

Authority / court
Conselho Administrativo de Defesa Econômica (CADE), Tribunal Administrativo
Area of law
Competition law · Cartels and collusion
Legal basis
Lei nº 12.529/2011
Action
Fine
Status of proceedings
reduced
Sector
Manufacturing and mechanical engineering
Liability of senior managers
Measures against individuals are not set out here.
Published
8 Jul 2026

Original amount 4,133,126.29 BRL, converted at the ECB reference rate of 1 Jul 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Jun 2026 Moody's Deutschland GmbHESMA fines Moody's Deutschland 2.1 million EUR EU levelOrganisational requirements €2.15m

The credit rating agency did not submit up-to-date rating information to the European Securities and Markets Authority (ESMA), did not provide complete historical performance data to the central repository and lacked adequate procedures and internal control mechanisms. ESMA found negligent infringements and imposed fines totalling 2,145,000 EUR.

What organisations can take from it

Reporting obligations to the supervisory authority are data quality issues – without functioning internal controls, they become a risk of fines.

Authority / court
Europäische Wertpapier- und Marktaufsichtsbehörde (ESMA)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Verordnung (EG) Nr. 1060/2009 (CRA-Verordnung), Art. 24, 36a, Anhang III
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Culpability
negligent
Repeat case
yes

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Jun 2026 Petfre (Gibraltar) LimitedPetfre (Gibraltar): £900,000 over inadequate customer interaction in online gambling United KingdomConsumer protection and online retail €1.04m

Following a compliance assessment in May and June 2024, the operator of betfred.com will pay £900,000 in lieu of a financial penalty to the Consolidated Fund (the UK Government's general account) under a settlement and contribute to the Commission's investigation costs. The Commission found breaches of the remote customer interaction requirements under SRCP 3.4.3: automated processes to identify signs of harm and to act immediately on strong indicators were lacking, so that one customer lost a further £17,900 within 24 hours of a review without being contacted again. The Commission had already announced sanctions against Petfre in 2022 and 2025.

What organisations can take from it

After a sanction, customer interaction must be improved lastingly and demonstrably, or the next case follows.

Relevance to training and awareness

Lasting improvement of customer interaction after earlier sanctions

Authority / court
Gambling Commission
Area of law
Consumer protection and online retail
Legal basis
s. 116 Gambling Act 2005; SRCP 3.4.3 Abs. 1, 2, 4, 7 und 11 der Licence Conditions and Codes of Practice (LCCP)
Action
Fine
Status of proceedings
final
Sector
Other
Repeat case
yes
Mitigating circumstances
A swift action plan with progress updates and full cooperation with the investigation.
Published
30 Jun 2026

Original amount 900,000 GBP, converted at the ECB reference rate of 30 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Jun 2026 „Paysera LT“, UABPaysera: daily fine for missing annual accounts adds up to 362,000 EUR LithuaniaDisclosure and reporting obligations €362,000

Because Paysera did not comply with the order to submit its 2024 annual financial statements by 30 September 2025, the Lietuvos bankas (Bank of Lithuania, financial supervisor) first imposed 20,000 EUR in November 2025 and then a daily fine of 1,000 EUR (rising to 2,000 and 3,000 EUR respectively). As the infringement was only remedied after 6 May 2026, the daily fine added up to 362,000 EUR. Source: archived copy of the press release.

What organisations can take from it

Running daily fines make every delay expensive – supervisory orders need top-management priority.

Authority / court
Lietuvos bankas (Litauische Zentralbank, Finanzaufsicht)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Aufsichtsrechtliche Anordnung und Berichtspflichten nach litauischem E-Geld-Recht
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Repeat case
yes
Published
30 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Jun 2026 Curtis Faraday LimitedFCA bars debt adviser Curtis Faraday from taking new customers over consumer risks United KingdomOrganisational requirements Order

The FCA barred the debt advice firm Curtis Faraday Limited with immediate effect from accepting new customers or referrals for debt, insolvency and IVA-related activities and required it to refer existing customers to other advice providers. Based on file reviews and call recordings, the FCA saw indications that customers' financial information was distorted during the advice process, that the business model, with close links to insolvency service providers, created conflicts of interest and a bias towards commission-generating solutions, that staff circumvented controls and that the firm repeatedly gave the FCA incomplete or inconsistent information.

What organisations can take from it

Debt advice must be impartial: commission incentives and close links to debt solution providers require effective controls against product bias.

Relevance to training and awareness

Impartial advice and handling conflicts of interest

Authority / court
Financial Conduct Authority (FCA)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
s. 55L(3)(a) FSMA 2000; Threshold Conditions nach Schedule 6 FSMA (paras. 2C, 2D, 2E und 2F)
Action
Order
Status of proceedings
unknown
Sector
Financial services and insurance

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

29 Jun 2026 Petrofac Facilities Management LimitedPetrofac Facilities Management: £569,157 settlement over Russia sanctions breaches United KingdomBreaches of sanctions and embargoes €660,160

The company paid HMRC a compound settlement of £569,157.07 for alleged breaches of the Russia sanctions. According to HMRC, while withdrawing from Russia in 2022/2023 it allegedly made sanctioned industrial goods available on two occasions to a person connected with Russia or for use in Russia, and provided related technical assistance. According to HMRC, this is the first time it has publicly named the company behind such a settlement.

What organisations can take from it

Even when withdrawing from a sanctioned market, the prohibitions on making goods available and on technical assistance apply in full.

Relevance to training and awareness

Sanctions screening of goods supplied and technical assistance when exiting a market

Authority / court
HM Revenue & Customs (HMRC)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Reg. 46Y(2)(c) und Reg. 46Z(1)(b) Russia (Sanctions) (EU Exit) Regulations 2019
Action
Fine
Status of proceedings
final
Sector
Energy and utilities
Mitigating circumstances
Voluntary disclosure and full cooperation with HMRC.
Published
29 Jun 2026

Original amount 569,157.07 GBP, converted at the ECB reference rate of 29 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Jun 2026 One Way Environmental Services LLC; Coastal Environmental Solutions Inc.; BWC Terminals LLCSulphuric acid spill in Channelview: USD 3.52m in OSHA penalties against three employers USAWorkplace safety and accidents €3.09m

After around one million gallons of sulphuric acid were released at the BWC Terminals site in Channelview (Texas) in December 2025, OSHA proposed penalties totalling 3,520,703 USD against three employers. Staffing contractor One Way Environmental Services accounts for 3,045,452 USD for 18 violations classed as wilful and egregious and five as serious, because it sent workers to the clean-up without adequate training, respirator fit tests and safety measures; the hazardous waste contractor Coastal Environmental Solutions faces 392,501 USD and BWC Terminals, which had mixed fresh and spent acid despite warnings, 82,750 USD. The authority allegedly made the findings set out here; this account is not based on a final judgment. The decision is not final.

What organisations can take from it

Companies that outsource clean-up after a chemical incident must check their contractors' training, respiratory protection and emergency planning.

Relevance to training and awareness

Health and safety during clean-up after chemical incidents

Missing or inadequate training played a role in the decision.

Authority / court
U.S. Department of Labor – Occupational Safety and Health Administration (OSHA)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Occupational Safety and Health Act (u. a. Vorschriften zu Gefahrstoffeinsätzen und Notfallmaßnahmen sowie Atemschutz)
Action
Fine
Status of proceedings
not yet final
Sector
Other
Published
26 Jun 2026

Original amount 3,520,703 USD, converted at the ECB reference rate of 26 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Jun 2026 Netrios LP Ltd.; Red Acre Ltd.Netrios and Red Acre: 2.5 million USD for white-label leveraged trading with US retail customers USAOrganisational requirements €2.19m

The CFTC fined Netrios LP Ltd., incorporated in Saint Lucia, 1,750,000 USD and Maltese Red Acre Ltd. 750,000 USD, totalling 2,500,000 USD. From 2019 to September 2025, Netrios sold a white-label service (website, trading software, margin accounts, execution, back office) through which offshore platforms offered US retail customers who were not eligible contract participants leveraged forex, precious metals, crypto and equity transactions outside a registered exchange; Red Acre assisted with customer support and marketing. The SEC took parallel action over the same conduct. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Technology and service providers share liability if their platform solution enables US retail customers to trade on leverage unlawfully outside registered exchanges.

Authority / court
U.S. Commodity Futures Trading Commission (CFTC)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Section 4(a) Commodity Exchange Act (7 U.S.C. § 6(a)); Beihilfe nach Section 13(a) (7 U.S.C. § 13c(a))
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
29 Jun 2026

Original amount 2,500,000 USD, converted at the ECB reference rate of 26 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Jun 2026 Banque Degroof Petercam SABanque Degroof Petercam: 1 million EUR settlement over hidden costs in employee stock options BelgiumOrganisational requirements €1m

In stock option plans for employees of client companies (2018–2023), the bank did not fully inform the beneficiaries about costs, had initially not recorded the conflicts of interest in this business and assessed clients’ knowledge only with a yes/no question. The Autorité des services et marchés financiers (Belgian Financial Services and Markets Authority, FSMA) accepted a settlement of 1 million EUR with publication by name and commitments on cost information.

What organisations can take from it

Full cost transparency and a dedicated conflicts register also apply to ancillary business such as employee stock option plans.

Authority / court
Autorité des services et marchés financiers (FSMA)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Loi du 2 août 2002; Wohlverhaltensregeln (Loyalität, Kostentransparenz, bestmögliche Ausführung, Interessenkonflikte, Kundenkenntnis)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Repeat case
yes
Mitigating circumstances
Remediation of all deficiencies (appropriateness test, conflicts policy, cost disclosure, waiver of CVA/KVA discounts).
Published
26 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Jun 2026 Neonet S.A.Neonet: 3 million PLN over false delivery and availability information on Allegro PolandInformation duties in online retail €709,854

On its Allegro account, the electronics retailer promised dispatch within 24 hours even for goods not in stock and did not inform customers in good time of delays or unavailability. UOKiK imposed a fine of 3,043,000 PLN; the decision is not final.

What organisations can take from it

Link delivery and availability information to stock levels; in the event of delays, inform customers immediately.

Relevance to training and awareness

Availability and delivery information on marketplaces

Authority / court
Urząd Ochrony Konkurencji i Konsumentów (UOKiK)
Area of law
Consumer protection and online retail · Information duties in online retail
Legal basis
Verletzung kollektiver Verbraucherinteressen
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Published
26 Jun 2026

Original amount 3,043,000 PLN, converted at the ECB reference rate of 26 Jun 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

25 Jun 2026 Risham Nominees Pty Ltd (Centenary Bakehouse)Centenary Bakehouse: record 3.4 million AUD fine for workplace manslaughter AustraliaWorkplace safety and accidents €2.07m

The Supreme Court of Victoria sentenced Risham Nominees Pty Ltd, operator of Centenary Bakehouse, after a guilty plea for workplace manslaughter to a fine of 3.4 million AUD, the highest penalty to date for a single offence under the workplace safety laws of the state of Victoria. During ceiling works at the bakery in Reservoir in August 2021, a worker fell around four metres and suffered fatal head injuries. The company had taken no measures against falls and did not require the use of harnesses that were available, although an independent scaffold would have been reasonably practicable.

What organisations can take from it

For work at height, engineered fall protection such as scaffolding must be planned before work starts; harnesses lying ready without a duty to wear them are not enough.

Relevance to training and awareness

Fall risks when working at height

Authority / court
WorkSafe Victoria
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Workplace-Manslaughter-Bestimmungen des Arbeitsschutzrechts von Victoria (fahrlässiges Verhalten unter Verletzung einer geschuldeten Pflicht mit Todesfolge)
Action
Fine
Status of proceedings
unknown
Sector
Food and agriculture
Culpability
negligent
Mitigating circumstances
Guilty plea.
Published
25 Jun 2026

Original amount 3,400,000 AUD, converted at the ECB reference rate of 25 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

25 Jun 2026 Самостоятелна медико-диагностична лаборатория „Лина“ ЕООДLaboratory Lina lures customers with free blood tests – 52,097 EUR for unfair competition BulgariaCompetition law €52,097

On application by a competitor, the Комисия за защита на конкуренцията (Bulgarian Commission for the Protection of Competition, KZK) established that the laboratory had offered packages of medical laboratory tests free of charge nationwide over extended periods (only against a fee of 2 leva for taking blood) – conduct shown by no other market participant outside joint campaigns. It found an infringement of the general clause of unfair competition law (Art. 29 ZZK – Bulgarian Protection of Competition Act) and imposed 0.3% of 2024 turnover, i.e. 52,096.55 EUR. Appeals have been lodged against the decision.

What organisations can take from it

Permanent free offers to win customers can be unfair if they deviate significantly from market practice and drive out competitors.

Authority / court
Комисия за защита на конкуренцията (КЗК, Bulgarische Wettbewerbskommission)
Area of law
Competition law
Legal basis
Art. 29 ZZK (Generalklausel unlauterer Wettbewerb)
Action
Fine
Status of proceedings
under appeal
Sector
Healthcare
Published
2 Jul 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

25 Jun 2026 TotalEnergiesParis Judicial Court: TotalEnergies must include Scope 3 emissions in vigilance plan FranceSupply chain due diligence Order

In an action brought by Notre Affaire à Tous, Sherpa, ZEA, France Nature Environnement and the City of Paris, the Paris Judicial Court (Tribunal judiciaire de Paris, 34th chamber) ruled that climate risks fall under the French duty of vigilance law and that Scope 3 emissions are part of the oil and gas group's activities. The vigilance plan without Scope 3 is incomplete, the court held; TotalEnergies must supplement it within six months, with provisional enforceability, and implementation will be reviewed by the court in January 2027.

What organisations can take from it

Risk analyses under due diligence laws must also cover the climate impact of the products sold (Scope 3).

Authority / court
Tribunal judiciaire de Paris (34. Kammer)
Area of law
Supply chain and human rights · Supply chain due diligence
Legal basis
Art. L.225-102-1 und L.225-102-2 Code de commerce (Loi n° 2017-399, devoir de vigilance); Art. 1252 Code civil
Action
Order
Status of proceedings
unknown
Sector
Energy and utilities
Employees
10,000 or more
Published
25 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

25 Jun 2026 Kochava Inc. und Collective Data Solutions, LLCKochava: court order ends FTC lawsuit over trade in location data USAData subject rights and transparency Order

After almost four years of litigation, the federal district court for Idaho entered an order agreed between the FTC and the data broker Kochava. The FTC had alleged that Kochava sold precise location data from hundreds of millions of mobile devices without the knowledge and consent of the people concerned, revealing, for example, visits to health facilities and places of worship. Kochava and its subsidiary Collective Data Solutions, which has taken over the data broker business, may only share sensitive location data with affirmative consent and for services requested by the consumer, and must introduce, among other things, a sensitive-locations programme, checks on their data suppliers, disclosure of recipients and retention limits; no payment is provided for. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Anyone who buys or passes on location data must verify consent at the source and consistently filter out sensitive locations.

Relevance to training and awareness

Location data as sensitive data; due diligence when buying and reselling data

Authority / court
U.S. District Court for the District of Idaho auf Klage der Federal Trade Commission (FTC)
Area of law
Data protection · Data subject rights and transparency
Legal basis
Section 5 FTC Act, 15 U.S.C. § 45 (unlautere Praktiken); Verfahren nach Section 13(b), 15 U.S.C. § 53(b)
Action
Order
Status of proceedings
final
Sector
Telecoms, IT and software
Published
26 Jun 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jun 2026 The Chemours Company; The Chemours Company FC, LLCChemours: USD 22.5m civil penalty in PFAS settlement with EPA and West Virginia USAEmissions and permits €19.8m

The EPA, the US Department of Justice and West Virginia's environmental agency reached a settlement (consent decree) with Chemours over PFAS discharges into the Cape Fear, Delaware and Ohio rivers, some made without and some in breach of discharge permits, together with TSCA and RCRA violations at four plants. Chemours will pay a civil penalty of 22,500,000 USD in three annual instalments of 7,500,000 USD and carry out remedial measures, including drinking water supply, PFAS controls and a USD 90m mitigation programme, which the EPA puts at over USD 450m in total. The settlement was lodged with the court on 24 June 2026 and is subject to public comment and court approval. The authority allegedly made the findings set out here; this account is not based on a final judgment. The decision is not final.

What organisations can take from it

PFAS manufacturers must continuously check every discharge against their permits – unregulated flows lead to penalties and costly obligations towards local residents.

Relevance to training and awareness

Discharge permits and PFAS emissions

Authority / court
U.S. Environmental Protection Agency (EPA) / U.S. Department of Justice mit West Virginia Department of Environmental Protection (U.S. District Court, Southern District of West Virginia)
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Clean Water Act (NPDES); Resource Conservation and Recovery Act; Toxic Substances Control Act; West Virginia Water Pollution Control Act
Action
Fine
Status of proceedings
not yet final
Sector
Chemicals and pharmaceuticals
Mitigating circumstances
The civil penalty was set on the basis of the company's ability to pay.
Published
24 Jun 2026

Original amount 22,500,000 USD, converted at the ECB reference rate of 24 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jun 2026 Ö Aktiengesellschaft (in der Entscheidung abgekürzt; Adressverlag und Direktwerbeunternehmen)VwGH sets data protection fine for party affinities definitively at 13 million EUR AustriaMarketing and consent €13m

The company had stored statistically calculated ‘party affinities’ for around 2.2 million people and in some cases sold them to advertising clients – special categories of personal data without consent; in addition, parcel frequency data was further processed for incompatible purposes. The Austrian Data Protection Authority (Datenschutzbehörde, DSB) had imposed 18 million EUR in 2019 and the Federal Administrative Court (Bundesverwaltungsgericht, BVwG) 16 million EUR in 2024; Austria's Supreme Administrative Court (Verwaltungsgerichtshof, VwGH) has now set the fine with final effect at 13 million EUR (plus 100,000 EUR in procedural costs).

What organisations can take from it

Calculated characteristics such as political leanings are themselves special categories – companies that derive them for advertising need explicit consent.

Authority / court
Verwaltungsgerichtshof (Ausgangsbescheid: Datenschutzbehörde)
Area of law
Data protection · Marketing and consent
Legal basis
DSGVO Art. 5 Abs. 1 lit. a und b, Art. 6 Abs. 4, Art. 9 Abs. 1 (VwGH Ro 2025/04/0007)
Action
Fine
Status of proceedings
reduced
Sector
Other
Culpability
negligent
Mitigating circumstances
Comprehensive cooperation, deletion of the party affinities, settlements with data subjects, long duration of proceedings (5 years, 10 months).
Published
16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jun 2026 Exmar NVExmar: €350,000 for late disclosure of inside information BelgiumDisclosure and reporting obligations €350,000

The Sanctions Committee of the FSMA (Belgian Financial Services and Markets Authority) found that the shipping company Exmar NV, listed on Euronext Brussels, had not disclosed as soon as possible inside information it held on 19 May and 18 June 2020; the information related to a customer's missing payments for the charter of a floating LNG facility. It imposed a fine of 350,000 EUR and ordered publication by name for one year. Exmar has lodged an appeal with the Market Court.

What organisations can take from it

Payment problems of a major customer can be inside information; the ad hoc assessment must be carried out immediately and documented.

Relevance to training and awareness

Ad hoc disclosure: identifying and promptly publishing inside information

Authority / court
Autoriteit voor Financiële Diensten en Markten / Autorité des services et marchés financiers (FSMA) – Sanctiecommissie
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 17 Verordnung (EU) Nr. 596/2014 (MAR); Art. 36 § 2 und Art. 72 § 3 Gesetz vom 2. August 2002 über die Aufsicht über den Finanzsektor
Action
Fine
Status of proceedings
under appeal
Sector
Transport, logistics and shipping

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jun 2026 Kaufland Hrvatska k.d.Croatia: 300,000 EUR against Kaufland for unfair practices towards suppliers CroatiaAbuse of market power €300,000

The Agencija za zaštitu tržišnog natjecanja (Croatian Competition Agency, AZTN) found that Kaufland Hrvatska charged food suppliers fees for services not provided and for advertising not commissioned, and paid for perishable goods only after more than 30 days. For these unfair trading practices, and with repeat offending as an aggravating factor (final penalty already in 2020), it imposed 300,000 EUR (date = publication).

What organisations can take from it

Purchasing departments must know the payment deadlines and fee prohibitions of UTP law – repeat offences become significantly more expensive.

Relevance to training and awareness

Fair terms towards suppliers in purchasing

Authority / court
Agencija za zaštitu tržišnog natjecanja (AZTN)
Area of law
Competition law · Abuse of market power
Legal basis
Art. 4, 11, 12 Zakon o zabrani nepoštenih trgovačkih praksi u lancu opskrbe hranom (ZNTP)
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Repeat case
yes
Published
24 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Jun 2026 Meta Platforms Ireland LimitedMeta: infringement of the P2B Regulation after fashion retailer’s Facebook page was hacked DenmarkPlatform obligations Order

After the Facebook page of the Danish fashion retailer Clothing By Ros ApS was hacked in 2023, Meta failed to respond appropriately for almost two years, gave no reasons for the de facto suspension and offered no effective complaint-handling procedure. The Konkurrencerådet (Danish Competition Council) found infringements of the P2B Regulation and ordered Meta to comply with the rules on statements of reasons and complaint handling in future.

What organisations can take from it

Platform operators must give reasons for suspending business users and handle complaints promptly – silence counts as a decision in its own right.

Authority / court
Konkurrencerådet (Danish Competition Council)
Area of law
AI and digital regulation · Platform obligations
Legal basis
Verordnung (EU) 2019/1150 (P2B) Art. 4, Art. 11
Action
Order
Status of proceedings
unknown
Sector
Media and online platforms
Employees
10,000 or more
Published
24 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jun 2026 Deghi S.p.A.Deghi: 2 million EUR for endlessly renewing countdown discounts ItalyMisleading advertising and pricing €2m

From January 2024 to December 2025, the online retailer advertised time-limited discounts with countdown timers which, once they had expired, restarted with a new timer on identical terms. The AGCM classified this artificial scarcity as a particularly insidious dark pattern and imposed a fine of 2 million EUR.

What organisations can take from it

A countdown must genuinely expire – an automatically restarting timer creates misleading scarcity.

Relevance to training and awareness

False urgency and countdown timers in online marketing

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Codice del Consumo (pratiche commerciali scorrette)
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Published
25 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jun 2026 TICKETBIS S.L. (StubHub UK)StubHub UK: 889,200 GBP penalty over mandatory fees added later United KingdomMisleading advertising and pricing €1.03m

The ticket exchange did not include mandatory fees in the total price at the start of the purchasing process. By way of a final infringement notice, the CMA imposed a penalty of 889,200 GBP (including a 40 % settlement discount) and required the company to refund the mandatory fees.

What organisations can take from it

Ticket marketplaces must also show the total price including mandatory fees from the outset.

Authority / court
Competition and Markets Authority (CMA)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Digital Markets, Competition and Consumers Act 2024
Action
Fine
Status of proceedings
final
Sector
Media and online platforms
Mitigating circumstances
Settlement with a 40 % discount and waiver of appeal.
Published
23 Jun 2026

Original amount 889,200 GBP, converted at the ECB reference rate of 23 Jun 2026.

Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jun 2026 Denka Performance Elastomer, LLCDenka Performance Elastomer: USD 996,703 over hazardous waste at neoprene plant USAWaste and hazardous substances €874,915

The EPA (Region 6) issued a Consent Agreement and Final Order against Denka Performance Elastomer over RCRA violations at its neoprene plant in LaPlace (Louisiana): missing waste determinations, breaches of land disposal restrictions and treatment and storage of hazardous waste without a permit. Denka will pay 996,703.35 USD and must clean out a brine pit and its ancillary equipment; if the currently idle plant resumes operations, further requirements apply, including on waste inventory, containers, training and protective equipment. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Every waste stream needs a documented determination of whether it is hazardous – without it there is no basis for lawful storage, treatment and disposal.

Relevance to training and awareness

Classification and storage of hazardous waste

Missing or inadequate training played a role in the decision.

Authority / court
U.S. Environmental Protection Agency (EPA), Region 6
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Resource Conservation and Recovery Act (RCRA), Docket RCRA-06-2025-0910
Action
Fine
Status of proceedings
final
Sector
Chemicals and pharmaceuticals
Repeat case
yes
Published
2 Jul 2026

Original amount 996,703.35 USD, converted at the ECB reference rate of 23 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jun 2026 Bourse Direct SAAMF: EUR 800,000 on online broker Bourse Direct over reporting and monitoring failures FranceDisclosure and reporting obligations €800,000

According to the AMF (Autorité des marchés financiers, French financial markets authority) Enforcement Committee, the online broker Bourse Direct did not properly submit its transaction reports under Art. 26 MiFIR between January 2021 and November 2023 and did not maintain an adequate system to detect and report suspicious orders and transactions under Art. 16(2) MAR. The company received EUR 800,000. The amount covers only the sanction imposed on the company.

What organisations can take from it

Investment firms should regularly test transaction reporting and market abuse surveillance for completeness and effectiveness.

Relevance to training and awareness

Transaction reporting and market abuse surveillance at brokers

Authority / court
Autorité des marchés financiers (AMF), Commission des sanctions
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 26 Verordnung (EU) Nr. 600/2014 (MiFIR); Art. 15 Delegierte Verordnung (EU) 2017/590; Art. 16 Abs. 2 Verordnung (EU) Nr. 596/2014 (MAR); Art. 2, 3 Delegierte Verordnung (EU) 2016/957
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Employees
50 to 249
Published
25 Jun 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jun 2026 VARTA AGVARTA: late ad hoc announcement and missing half-yearly financial report GermanyDisclosure and reporting obligations €620,000

BaFin imposed fines on the battery manufacturer because it had not disclosed inside information without delay and had not published the half-yearly financial report for the 2024 financial year.

What organisations can take from it

Ad hoc assessments and periodic disclosure require fixed responsibilities and deadline controls so that neither inside information nor mandatory reports are left pending.

Authority / court
Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 17 Abs. 1 UAbs. 1 MAR; § 115 Abs. 1 Satz 1 WpHG
Action
Fine
Status of proceedings
final
Sector
Manufacturing and mechanical engineering
Published
1 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jun 2026 Banca Popolare Commerciale SpaBanca d'Italia: 40,000 EUR against Banca Popolare Commerciale over AML deficiencies ItalyCustomer due diligence €40,000

Following an on-site inspection from February to April 2025, the Bank of Italy (Banca d'Italia) found deficiencies in customer due diligence, active cooperation (suspicious transaction reporting) and anti-money laundering controls, and imposed an administrative fine of 40,000 EUR. The duration of the deficiencies and the corrective measures initiated were taken into account.

What organisations can take from it

Gaps in customer due diligence and suspicious transaction reporting are consistently sanctioned after on-site inspections, even with smaller amounts – corrective measures reduce the sanction but do not replace it.

Relevance to training and awareness

Customer due diligence and suspicious transaction reports

Authority / court
Banca d'Italia
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Art. 62 d.lgs. 231/2007; Verstöße gegen Art. 7, 16–19, 24, 25, 35, 36 d.lgs. 231/2007
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Mitigating circumstances
Corrective measures initiated

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Jun 2026 Needle Craft Ltd.; Casual Wear Apparel LLCCBP import stop for textiles from Jordan's Needle Craft and Casual Wear Apparel USAForced and child labour Order

U.S. Customs and Border Protection (CBP) issued a Withhold Release Order: clothing from Needle Craft Ltd.; Casual Wear Apparel LLC (Jordan) is being detained at all US ports of entry because there are indications of forced labour (ILO indicators including physical and sexual violence, retention of identity documents, restriction of movement and withholding of wages). These are two parallel orders against both manufacturers.

What organisations can take from it

Fashion brands should supplement social audits at garment makers with confidential worker interviews, because violence and confiscation of identity documents remain invisible in paper-based checks.

Authority / court
U.S. Customs and Border Protection
Area of law
Supply chain and human rights · Forced and child labour
Legal basis
19 U.S.C. § 1307 (Tariff Act of 1930, Section 307)
Action
Order
Status of proceedings
unknown
Sector
Other
Published
23 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 Jun 2026 Inkasso-Team AGFederal Administrative Court upholds FDPIC: Inkasso-Team was not allowed to publish debtor data SwitzerlandData subject rights and transparency Order

The debt collection company posted personal data of alleged debtors on the internet, some of it particularly sensitive, in order to obtain information on their whereabouts and to warn third parties. The Swiss Federal Administrative Court (Bundesverwaltungsgericht, A-3891/2025) upheld the ruling of the Federal Data Protection and Information Commissioner (EDÖB) of 28 April 2025, according to which this constitutes an unjustified violation of privacy.

What organisations can take from it

Publicly naming and shaming debtors cannot be justified under data protection law – debt collection must use less intrusive means.

Authority / court
Bundesverwaltungsgericht (A-3891/2025) auf Verfügung des EDÖB vom 28.04.2025
Area of law
Data protection · Data subject rights and transparency
Legal basis
DSG Art. 6, Art. 19, Art. 31
Action
Order
Status of proceedings
final
Sector
Financial services and insurance
Published
20 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 Jun 2026 OzCar Pty LtdUsed car dealer OzCar: reprimand and licence conditions over unfair sales practices AustraliaMisleading advertising and pricing Fine

NSW Fair Trading (the consumer protection regulator of New South Wales) reprimanded used car dealer OzCar Pty Ltd on 22 June 2026 and imposed conditions on its dealer licence. The regulator refers to the maximum available in disciplinary proceedings and does not state the amount imposed on the company. The investigation found a pattern of dishonest conduct between 2023 and 2025; among other things, customers reported being pressured into signing or misled about the purpose of contracts, that contracts were not properly explained – including to particularly vulnerable buyers – and that vehicles of unacceptable quality were sold. Among other things, the company must introduce a compliance programme with training for sales staff, may no longer allow waivers of the statutory cooling-off right to be pre-filled, and must fix defects affecting safety or reliability before sale.

What organisations can take from it

Waivers of a cooling-off right must never be pre-selected, and contracts must be demonstrably explained to customers – especially vulnerable buyers.

Relevance to training and awareness

Fair sales conversations, cooling-off rights and dealing with vulnerable customers

Missing or inadequate training played a role in the decision.

Authority / court
NSW Fair Trading
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Motor Dealers and Repairers Act 2013 (NSW), s 45(1)(a), (b), (d) und (d1)(ii)
Action
Fine
Status of proceedings
unknown
Sector
Automotive
Liability of senior managers
Measures against individuals are not set out here.
Published
24 Sep 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Jun 2026 Banque Internationale à Luxembourg S.A.Banque Internationale à Luxembourg: €3.255m ECB penalty for breaching a model decision EU levelOrganisational requirements €3.26m

From 2 October 2023 to 22 October 2024, contrary to a 2023 ECB decision, Banque Internationale à Luxembourg did not apply the newly approved internal models for the expected loss best estimate (ELBE) of defaulted retail and corporate exposures and therefore reported an IRB shortfall to be deducted from Common Equity Tier 1 capital that was too small. The ECB regarded the breach as intentional and severe and imposed 3,255,000 EUR; remedial action was taken into account as mitigating.

What organisations can take from it

Supervisory decisions on internal models must be implemented on time, even if the previous approach produces more favourable capital figures.

Relevance to training and awareness

Timely implementation of supervisory decisions

Authority / court
Europäische Zentralbank (EZB), Bankenaufsicht
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Art. 18 Abs. 7 VO (EU) Nr. 1024/2013 (Verstoß gegen einen EZB-Beschluss zu internen Modellen)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Culpability
intentional
Mitigating circumstances
Remedial action to alleviate the effects and to prevent future breaches.
Published
29 Jun 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Jun 2026 CACEIS Bank (UK Branch)FCA: public censure for CACEIS UK over deficient checks on a custody client United KingdomCustomer due diligence Reprimand or warning

The UK Financial Conduct Authority (FCA) issued a public censure because the London branch opened and operated accounts for the wealth manager WealthTek, although its own register searches showed that it lacked permissions to hold client assets, and overlooked a restriction noted in the register; 16 monitoring alerts were not worked through over two years, and more than £314 million flowed through the accounts. In view of cooperation and a voluntary payment of £31.7 million to WealthTek clients, the FCA refrained from imposing a fine (otherwise £23.1 million after discount).

What organisations can take from it

Anyone who notices a discrepancy in the register must clarify and document it before accounts are activated.

Relevance to training and awareness

Register checks and follow-up on identified KYC gaps

Authority / court
Financial Conduct Authority (FCA)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Section 205 FSMA (Public Censure) wegen Verstoßes gegen FCA Principle 2; Maßstab u. a. SYSC 6.1.1R, 6.3.1R, 6.3.3R und Regulations 18, 27, 28 MLR 2017
Action
Reprimand or warning
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Cooperation, acknowledgement of the deficiencies and a voluntary payment of £31,714,068 to those harmed
Published
25 Jun 2026
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Jun 2026 HSBC Bank Australia LimitedHSBC Bank Australia: AUD 35m penalty for failing to protect customers from scams AustraliaOrganisational requirements €21.4m

HSBC admitted that from May 2023 to May 2024 it lacked adequate controls against unauthorised payments via its internal transfer channel, that from January 2020 it handled scam reports under the ePayments Code too slowly (144 days on average) and without applying the liability rules, and that until April 2024 it gave affected customers no orderly way back into their accounts. The Court imposed AUD 35 million (AUD 10 million for the fraud controls, AUD 22.5 million for the contraventions relating to the ePayments Code, AUD 2.5 million for restoring account access) and ordered notices on the website, in the app and in letters to customers.

What organisations can take from it

Banks must deploy scam controls on every payment channel and handle scam reports within the deadlines of the applicable rules.

Relevance to training and awareness

Fraud and scam prevention in payments and handling of customer scam reports

Authority / court
Federal Court of Australia (auf Antrag der Australian Securities and Investments Commission, ASIC)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
s 912A(1)(a), (5A) Corporations Act 2001 (Cth); s 47(1)(a), (4) National Consumer Credit Protection Act 2009 (Cth)
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Repeat case
no
Mitigating circumstances
Admissions and jointly proposed penalty; remediation programme with payments of AUD 27,915,700.56 by 21 May 2026; no previous contraventions of a similar nature.
Liability of senior managers
According to the agreed facts, senior management was also aware before May 2023 of heightened fraud risks and gaps in the controls.
Published
18 Jun 2026

Original amount 35,000,000 AUD, converted at the ECB reference rate of 18 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Jun 2026 Siliziumkarbid-Hersteller (anonymisiert)Silicon carbide producer: NOK 18m over unrepresentative emission measurements NorwayEmissions and permits €1.62m

Økokrim (Norwegian National Authority for Investigation and Prosecution of Economic and Environmental Crime) issued an industrial company producing silicon carbide with a penalty notice of NOK 18,000,000 for breaches of the Pollution Control Act (forurensningsloven) and for giving incorrect information to Miljødirektoratet (Norwegian Environment Agency). In Økokrim's view, the air emission measurements in 2021 were not representative because, among other things, production was lower during the measurement campaigns; this created a risk that considerably more of the carcinogenic benzo[a]pyrene was emitted than permitted. The company has accepted the penalty notice.

What organisations can take from it

Self-monitoring of emissions must reflect normal operations – anyone who embellishes measurements by throttling production risks heavy corporate penalties.

Relevance to training and awareness

Integrity of environmental self-monitoring and reports to authorities

Authority / court
Økokrim
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Forurensningsloven (Umweltschutzgesetz); falsche Angaben gegenüber Miljødirektoratet
Action
Fine
Status of proceedings
final
Sector
Manufacturing and mechanical engineering
Culpability
intentional
Liability of senior managers
According to Økokrim, managers took the decisions on the non-representative measurements knowing that they would not reflect actual emissions.
Published
18 Jun 2026

Original amount 18,000,000 NOK, converted at the ECB reference rate of 18 Jun 2026.

Sources

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Jun 2026 LOGZONE Inc.LOGZONE pays 507,144 USD over lack of cybersecurity in Navy contracts USAOther €442,495

The Huntsville-based defence services provider allegedly invoiced two Navy contracts from May 2021 to March 2025 even though it had not implemented the security controls under NIST SP 800-171 required by the contracts. The settlement under the False Claims Act with the U.S. Department of Justice amounts to 507,144 USD.

What organisations can take from it

Companies that commit to cybersecurity requirements in government contracts must document their implementation verifiably – otherwise every invoice becomes a liability risk.

Authority / court
U.S. Department of Justice (Civil Division) / USAO Northern District of Alabama
Area of law
Other
Legal basis
False Claims Act (31 U.S.C. §§ 3729 ff.); DFARS-Cybersicherheitsklauseln
Action
Other
Status of proceedings
final
Sector
Defence and security
Published
18 Jun 2026

Original amount 507,144 USD, converted at the ECB reference rate of 18 Jun 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Jun 2026 Ideal Supply Inc.Ladder fall in warehouse: industrial supplies distributor pays CA$70,000 Canada, ONWorkplace safety and accidents €43,239

At the warehouse and distribution centre in Listowel (around 130 employees at the site), a worker fell around 1.2 m while climbing down a ladder at high-bay racking. He had not been adequately informed, instructed and supervised on the safe use of ladders. Fine of CA$70,000 plus victim fine surcharge.

What organisations can take from it

Even everyday tasks such as working from ladders at racking require documented instruction – otherwise there is no evidence whatsoever if an incident occurs.

Relevance to training and awareness

Safe use of ladders in the warehouse

Missing or inadequate training played a role in the decision.

Authority / court
Provincial Offences Court Stratford (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Sections 25(2)(a), 66(1) Occupational Health and Safety Act (Ontario)
Action
Fine
Status of proceedings
final
Sector
Retail and e-commerce
Mitigating circumstances
Guilty plea.
Published
8 Jul 2026

Original amount 70,000 CAD, converted at the ECB reference rate of 18 Jun 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Jun 2026 St. Joseph's Healthcare HamiltonHamilton hospital: CA$65,000 after injury caused by known centrifuge defect Canada, ONWorkplace safety and accidents €40,151

In the teaching hospital's virology laboratory, the lid of a centrifuge fell on an employee who had to hold it open by hand because of a defective gas spring; she was seriously injured. Maintenance reports from 2023 and 2024 had already called for the spring to be replaced. Fine of CA$65,000 plus victim fine surcharge.

What organisations can take from it

A defect documented in maintenance reports that is not remedied makes every subsequent accident foreseeable – defective equipment must be taken out of use.

Relevance to training and awareness

Reporting defective equipment and taking it out of service

Authority / court
Provincial Offences Court Hamilton (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 25(1)(b) Occupational Health and Safety Act (Ontario)
Action
Fine
Status of proceedings
final
Sector
Healthcare
Mitigating circumstances
Guilty plea; repair two days after the accident.
Published
21 Jul 2026

Original amount 65,000 CAD, converted at the ECB reference rate of 18 Jun 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Jun 2026 Advanced Pathology Solutions PLLC und APS MSO LLCAdvanced Pathology Solutions: 30 million USD for kickbacks and unnecessary laboratory tests USACommercial bribery €25.9m

The Arkansas pathology laboratory and its management company allegedly granted unlawful kickbacks and ordered medically unnecessary tests. The settlement of 30 million USD is a joint payment by all settling parties; the laboratory entered into a Corporate Integrity Agreement.

What organisations can take from it

Where services are sold through referrals, all benefits to referrers belong in a central approval and review procedure.

Relevance to training and awareness

Benefits to clients in healthcare

Authority / court
U.S. Department of Justice
Area of law
Bribery and corruption · Commercial bribery
Legal basis
Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
Action
Other
Status of proceedings
final
Sector
Healthcare
Liability of senior managers
Measures against individuals are not reported here.

Original amount 30,000,000 USD, converted at the ECB reference rate of 17 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Jun 2026 Ikano Bank ABIkano Bank: 140 million SEK over deficiencies in money laundering risk assessment and customer due diligence SwedenCustomer due diligence €12.9m

For the period April 2022 to May 2023, the Swedish financial supervisory authority Finansinspektionen (FI) found that the bank’s general risk assessment did not realistically assess the terrorist financing risks of its corporate products and that no enhanced due diligence measures were taken for high-risk corporate customers. FI issued a remark and imposed 140 million SEK; the bank has brought an action before the administrative court.

What organisations can take from it

The money laundering risk assessment must reflect the actual customers and products – a generic assessment leaves the entire customer due diligence open to challenge.

Relevance to training and awareness

Enhanced due diligence for high-risk customers

Authority / court
Finansinspektionen (FI)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Penningtvättslagen (2017:630)
Action
Fine
Status of proceedings
under appeal
Sector
Financial services and insurance
Published
17 Jun 2026

Original amount 140,000,000 SEK, converted at the ECB reference rate of 17 Jun 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Jun 2026 MX Global Ltd (MEXC)VARA fines MX Global (MEXC) for unlicensed crypto services and missing KYC United Arab EmiratesCustomer due diligence Fine

According to investigations by the Virtual Assets Regulatory Authority (VARA, Dubai's virtual assets regulator), MX Global Ltd, which trades under the MEXC brand, provided broker-dealer and/or exchange services to customers in Dubai without a licence from 2022 to April 2026 and onboarded users without the KYC checks required by law. VARA imposed fines of an undisclosed amount and ordered the immediate cessation of all unlicensed activities in or from Dubai; other group companies were expressly not affected.

What organisations can take from it

Serving customers in a market requires a licence there – and local KYC obligations must be met regardless.

Relevance to training and awareness

Licensing requirement and KYC for cross-border crypto services

Authority / court
Virtual Assets Regulatory Authority (VARA), Dubai
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Federal Decree-Law No. (10) of 2025 (AML/CFT/PF); Dubai Law No. (4) of 2022 Regulating Virtual Assets in the Emirate of Dubai; Cabinet Resolution No. 111/2022; VARA Regulations and Rulebooks
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Mitigating circumstances
Full cooperation, compliance with the cease-and-desist orders and a stated intention to apply for a VARA licence.
Published
22 Jun 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Jun 2026 Kangaroo Limited (Keeta)Keeta gives binding commitment to open up its restaurant contracts Hong KongCompetition law Order

On 17 June 2026 the Competition Commission (Hong Kong's competition authority) accepted a commitment from Kangaroo Limited, which operates the Keeta food delivery platform in Hong Kong and is a subsidiary of Meituan. The authority was concerned that clauses in Keeta's agreements with partner restaurants made access harder for new and small platforms and softened competition – a possible breach of the First Conduct Rule (the ban on anti-competitive agreements). Keeta had already amended the agreements voluntarily (cooperation with platforms of up to 10% market share without losing incentives, easier switching, no bar on lower prices on the restaurants' own channels and on rival platforms); with the acceptance, these changes are legally binding and enforceable by the authority until 28 December 2026.

What organisations can take from it

Platforms should proactively align their exclusivity and price parity clauses with the standards the authority has already imposed on their competitors.

Relevance to training and awareness

Exclusivity and price parity clauses of online platforms

Authority / court
Competition Commission (Hongkong)
Area of law
Competition law
Legal basis
Competition Ordinance (Cap. 619), s. 6 (First Conduct Rule); Annahme einer Verpflichtungszusage nach s. 60
Action
Order
Status of proceedings
final
Sector
Media and online platforms
Published
17 Jun 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Jun 2026 Peken Global Limited (KuCoin)VARA: fine and cease-and-desist order against unlicensed Peken Global (KuCoin) United Arab EmiratesCapital markets and financial supervision Fine

Following VARA investigations, Peken Global Limited, trading as KuCoin, provided virtual asset broker-dealer and/or exchange services to customers in Dubai without a licence. VARA imposed fines of an undisclosed amount and ordered the immediate cessation of all unlicensed activities; other group entities were expressly not affected.

What organisations can take from it

Anyone providing crypto services cross-border to customers in Dubai needs a licence there – regardless of where the platform is based.

Relevance to training and awareness

Licensing requirement for crypto services in the target market

Authority / court
Virtual Assets Regulatory Authority (VARA), Dubai
Area of law
Capital markets and financial supervision
Legal basis
Federal Decree Law No. (10) of 2025 (AML/CFT/PF); Dubai Law No. (4) of 2022 Regulating Virtual Assets; Cabinet Resolution No. 111/2022; VARA Regulations und Rulebooks
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Mitigating circumstances
Full cooperation and full compliance with the measures; intention to go through the licensing process.
Published
24 Jun 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jun 2026 Robert Bosch GmbHBosch pays 36 million USD for sensor supplies to Huawei USAExport control and dual-use goods €31.2m

Between September 2020 and September 2024, Bosch exported MEMS sensors and vehicle software worth around 72.4 million USD from outside the US without a licence to Huawei and affiliated companies on the Entity List (Foreign Direct Product Rule). Bosch voluntarily disclosed the violations; around 3.6 million USD of the penalty imposed by the US Commerce Department's Bureau of Industry and Security (BIS) is credited against a disgorgement agreed with the DOJ.

What organisations can take from it

Even products manufactured outside the US can be subject to US export controls via US technology – supplies to Entity List customers need their own review.

Relevance to training and awareness

US export law for foreign-made products (Foreign Direct Product Rule)

Authority / court
U.S. Department of Commerce, Bureau of Industry and Security (BIS)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Export Administration Regulations (Foreign Direct Product Rule, Entity List)
Action
Fine
Status of proceedings
final
Sector
Automotive
Employees
10,000 or more
Mitigating circumstances
Voluntary self-disclosure and cooperation
Published
17 Jun 2026

Original amount 36,184,680 USD, converted at the ECB reference rate of 16 Jun 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jun 2026 Banco BPM S.p.A.; Banco BPM Vita S.p.A.CONSOB fines Banco BPM and BPM Vita €570,000 over delayed disclosure of ECB letter ItalyDisclosure and reporting obligations €570,000

The CONSOB (Italian securities regulator) fined Banco BPM S.p.A. 370,000 EUR, of which 170,000 EUR for late disclosure of inside information under Art. 17(1) MAR and 200,000 EUR for obstructing supervision under Art. 187-quinquiesdecies of the Consolidated Law on Finance (TUF), and fined its subsidiary Banco BPM Vita S.p.A. 200,000 EUR, 570,000 EUR in total. In connection with BPM Vita's tender offer for Anima Holding S.p.A., the bank disclosed an ECB letter of 21 March 2025 rejecting the application of the so-called Danish Compromise to CONSOB and the market only four days later, after two trading days of the acceptance period. Both companies had previously informed CONSOB only incompletely about their discussions with the ECB.

What organisations can take from it

Supervisory decisions affecting an ongoing takeover bid must be disclosed to the market and the supervisor at once rather than weighed internally.

Relevance to training and awareness

Ad hoc disclosure and transparency towards the supervisor in takeovers

Authority / court
CONSOB (Commissione Nazionale per le Società e la Borsa)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 17 Abs. 1 Verordnung (EU) 596/2014 (MAR); Art. 187-ter.1 und Art. 187-quinquiesdecies Abs. 1 und 1-ter D.Lgs. 58/1998 (TUF)
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Culpability
negligent
Repeat case
yes
Published
23 Jun 2026
Sources

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jun 2026 SCS Railways (Joint Venture von Skanska Construction UK Limited, Costain Limited und Strabag AG)HS2 joint venture SCS Railways: £400,000 fine after tipper truck fall United KingdomWorkplace safety and accidents €462,583

SCS Railways, a joint venture of Skanska, Costain and Strabag on the HS2 rail project, was fined £400,000 and ordered to pay £8,974 in costs. On 27 July 2021 at the Copthall North site near Uxbridge, a 20-tonne tipper truck belonging to a contracted haulage company fell from an excavation ramp and the driver was injured. The Health and Safety Executive found neither signage nor edge protection on the vehicle routes; a traffic route changed on the morning of the incident had left an unprotected edge and had been neither properly planned nor communicated in time.

What organisations can take from it

Every short-notice change to site vehicle routes needs a risk check and immediate briefing of all drivers.

Relevance to training and awareness

Traffic routes and change management on major construction sites

Authority / court
Uxbridge Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 3(1) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Mitigating circumstances
Guilty plea.
Published
26 Jun 2026

Original amount 400,000 GBP, converted at the ECB reference rate of 16 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jun 2026 Samson Containers LtdContainer manufacturer ignores notices on welding fume and hearing protection – £30,000 United KingdomWorkplace safety and accidents €34,694

Despite improvement notices from September 2024 and February 2025, the manufacturer of skips and metal containers failed to implement any measures against carcinogenic welding fume (mild steel) – with neither extraction nor respiratory protection; in addition, there was no health surveillance for hearing for employees exposed to noise. Fine of £30,000 plus costs. According to the annual accounts filed with the UK companies register for financial year 2024, the company had around 17 employees.

What organisations can take from it

Regulatory orders on hazardous substances have deadlines – companies that let them lapse will be prosecuted regardless of whether an accident occurs.

Authority / court
Warrington Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 33(1)(g) Health and Safety at Work etc. Act 1974 (Nichtbefolgung von Improvement Notices)
Action
Fine
Status of proceedings
unknown
Sector
Steel and metals
Employees
Under 50
Repeat case
yes
Published
18 Jun 2026

Original amount 30,000 GBP, converted at the ECB reference rate of 16 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jun 2026 Serbia Zijin Copper D.O.O.CBP import stop for copper from Serbia Zijin Copper over forced labour indicators USAForced and child labour Order

U.S. Customs and Border Protection (CBP) issued a Withhold Release Order: copper and copper products from Serbia Zijin Copper D.O.O. (Serbia) are being detained at all US ports of entry because there are indications of forced labour (ILO indicators including withholding of wages, intimidation, restriction of movement and retention of identity documents).

What organisations can take from it

Production in Europe is no free pass either: raw material and metal supply chains need their own forced labour checks.

Authority / court
U.S. Customs and Border Protection
Area of law
Supply chain and human rights · Forced and child labour
Legal basis
19 U.S.C. § 1307 (Tariff Act of 1930, Section 307)
Action
Order
Status of proceedings
unknown
Sector
Steel and metals
Published
16 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Jun 2026 Securitas Sverige AktiebolagSecuritas Sverige: reprimand over cameras in company vehicles without legal basis SwedenVideo surveillance Reprimand or warning

The security services provider used cameras in vehicles through which personal data was processed without any legal basis for doing so. The Swedish data protection authority (Integritetsskyddsmyndigheten, IMY) issued a reprimand under Art. 58 GDPR; no fine was imposed.

What organisations can take from it

Dashcams in company cars also need a verified legal basis and a balancing against the interests of employees and passers-by.

Relevance to training and awareness

Use of cameras in vehicles

Authority / court
Integritetsskyddsmyndigheten (IMY)
Area of law
Data protection · Video surveillance
Legal basis
DSGVO Art. 6 Abs. 1
Action
Reprimand or warning
Status of proceedings
final
Sector
Defence and security
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Jun 2026 Marks Electrical LimitedCMA: GBP 720,000 fine for Marks Electrical over pre-selected extra services United KingdomInformation duties in online retail €832,534

Using its new powers under the DMCCA 2024, the CMA found that the electrical retailer had pre-selected and charged customers on its website for paid extra services (removal of the old appliance, packaging disposal) without their express consent during the period examined, April to November 2025. It imposed a fine of GBP 720,000 (GBP 1,200,000 before a 40% settlement discount) and required the company to refund the amounts charged in this way to affected customers (around GBP 600,000 according to the CMA).

What organisations can take from it

Paid add-ons must never be pre-selected in an online shop – since the DMCCA, the CMA can impose fines and order refunds itself.

Relevance to training and awareness

Pre-selected extra charges in online shops

Authority / court
Competition and Markets Authority (CMA)
Area of law
Consumer protection and online retail · Information duties in online retail
Legal basis
Regulation 40 Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013; Chapter 4 Part 3 Digital Markets, Competition and Consumers Act 2024
Action
Fine
Status of proceedings
final
Sector
Retail and e-commerce
Mitigating circumstances
40% discount for admission and settlement (including waiver of appeal); the practice was stopped on the day the investigation was opened.
Published
18 Jun 2026

Original amount 720,000 GBP, converted at the ECB reference rate of 15 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Jun 2026 SSG SELECT SOLUTIONS S.R.L.Stranger in Kaufland CCTV room – service provider SSG Select Solutions pays 2,000 EUR RomaniaVideo surveillance €1,948

An employee of the service provider acting as processor for Kaufland România let a third party into a store’s video surveillance room; that person filmed the images and distributed them on social media. Kaufland reported the incident. The Romanian data protection authority (ANSPDCP) imposed 10,200 lei (2,000 EUR) on the processor and ordered additional checks of the work instructions; the fine has been paid. Date = publication of the press release; according to the authority, the investigation was concluded in April 2026.

What organisations can take from it

Anyone with access to surveillance rooms must know: video footage is confidential, and third parties have no access there.

Relevance to training and awareness

Access to surveillance rooms; staff bound by instructions

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection · Video surveillance
Legal basis
Art. 29, Art. 32 Abs. 1 lit. b, Abs. 2 und 4 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
15 Jun 2026

Original amount 10,200 RON, converted at the ECB reference rate of 15 Jun 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Jun 2026 Esso Petroleum Company LimitedEsso: £1m fine after LPG release at Fawley refinery United KingdomWorkplace safety and accidents €1.16m

Esso was fined £1m and ordered to pay £12,277 in costs. On 8 November 2022, a corroded steel tower at the Fawley refinery partially collapsed, damaged pipework and released around 2,400 kg of liquefied petroleum gas over 33 hours; workers were exposed to the risk of falling debris and potential burns. According to the Health and Safety Executive's investigation, the corrosion had been known since 2010 without appropriate action being taken.

What organisations can take from it

Known corrosion findings on load-bearing structures must be assessed and remedied promptly, before they lead to a major incident.

Relevance to training and awareness

Asset integrity and handling known corrosion findings

Authority / court
Southampton Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 3(1) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Energy and utilities
Mitigating circumstances
Guilty plea; no injuries.
Published
15 Jun 2026

Original amount 1,000,000 GBP, converted at the ECB reference rate of 12 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Jun 2026 Verkkokauppa.com OyjKHO confirms fine against Verkkokauppa.com over customer accounts without time limit FinlandData subject rights and transparency €792,639

The online retailer had not set a retention period for customer accounts and kept data until customers requested deletion; purchases were only possible with an account. The sanctions board of the Finnish Data Protection Ombudsman imposed 856,000 EUR in 2024, the administrative court reduced the fine to 792,639 EUR on the basis of current turnover, and the Supreme Administrative Court (Korkein hallinto-oikeus, KHO) confirmed this on 12 June 2026.

What organisations can take from it

Do not leave deletion to the customer – every online shop needs defined retention periods for accounts and order data.

Authority / court
Korkein hallinto-oikeus (KHO); Sanktionsgremium des Datenschutzbeauftragten
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 5 Abs. 1 lit. e DSGVO
Action
Fine
Status of proceedings
reduced
Sector
Retail and e-commerce
Published
18 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Jun 2026 Μάρκετ Ιν ΑΕΒΕ (Market In)Greece: 95,000 EUR against supermarket chain Market In over video footage GreeceVideo surveillance €95,000

A data subject complained about the disclosure of footage from the supermarket chain’s video surveillance and about the inadequate response to his access request. The Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority) found that Market In had passed the video footage to the judicial authorities without informing the data subject beforehand, processed more data than necessary, failed to comply with the right of access and failed to cooperate with the authority, and by Decision 10/2026 imposed a total of 95,000 EUR (50,000 EUR for lawfulness/transparency, 20,000 EUR each for data minimisation and the right of access, 5,000 EUR for failure to cooperate); in the same proceedings, ΜΕΔΕ ΑΕ received 65,000 EUR.

What organisations can take from it

Release video footage only for a specific purpose – and anyone ignoring requests from the supervisory authority pays extra.

Relevance to training and awareness

Handling video footage and access requests

Authority / court
Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic Data Protection Authority)
Area of law
Data protection · Video surveillance
Legal basis
Art. 5 Abs. 1 lit. a, c, Art. 5 Abs. 2, Art. 12, 13, 15, 31 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Jun 2026 Union Standard International Group Pty Ltd; Maxi EFX Global AU Pty Ltd (EuropeFX); BrightAU Capital Pty Ltd (TradeFred)Union Standard and two CFD intermediaries: record penalties of AUD 300.2m AustraliaConsumer protection and online retail €182.1m

Between 2018 and 2020 the since-collapsed CFD issuer Union Standard and its two authorised representatives EuropeFX and TradeFred pushed inexperienced and vulnerable customers into trading risky contracts for difference using aggressive sales tactics; customers lost more than AUD 83 million, while in most cases the representatives profited from those losses. The Court imposed AUD 156.7 million on Union Standard, AUD 114.1 million on EuropeFX and AUD 29.4 million on TradeFred, together with a permanent ban on EuropeFX and an obligation for it to refund customers’ net deposits. For the first time a licensee was also penalised for distributing CFDs to customers in China although it knew or ought to have known of their legal risk.

What organisations can take from it

Licensees cannot outsource responsibility for distribution through authorised representatives and must actively monitor their sales practices.

Relevance to training and awareness

Licensees’ responsibility for authorised representatives and distribution of complex leveraged products to retail clients

Authority / court
Federal Court of Australia (auf Antrag der Australian Securities and Investments Commission, ASIC)
Area of law
Consumer protection and online retail
Legal basis
ASIC Act 2001 (Cth): Verbot von unconscionable conduct und irreführenden Angaben; Corporations Act 2001 (Cth): Pflicht des Lizenzinhabers zu effizienter, ehrlicher und fairer Leistungserbringung
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Published
12 Jun 2026

Original amount 300,200,000 AUD, converted at the ECB reference rate of 11 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Jun 2026 Deutsche Bank AktiengesellschaftDeutsche Bank AG: AUD 2m penalty for inaccurate derivative trade reporting AustraliaDisclosure and reporting obligations €1.21m

ASIC issued an infringement notice because on 208 business days between October 2024 and August 2025 Deutsche Bank had not accurately reported the “direction” fields for 20,483 outstanding and 244,091 terminated or matured OTC derivative transactions, mostly foreign exchange trades, to trade repositories. The bank allegedly paid AUD 2 million under the infringement notice; payment is not an admission of guilt.

What organisations can take from it

Derivative reporting systems need plausibility checks on mandatory fields, otherwise individual errors add up to systemic breaches.

Relevance to training and awareness

Data quality in regulatory transaction reporting

Authority / court
Australian Securities and Investments Commission (ASIC)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Rule 2.2.6 ASIC Derivative Transaction Rules (Reporting) 2024; reg 7.5A.104 Corporations Regulations 2001
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Employees
10,000 or more
Mitigating circumstances
Cooperation with ASIC and measures to prevent further reporting errors.
Published
13 Jul 2026

Original amount 2,000,000 AUD, converted at the ECB reference rate of 11 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Jun 2026 Monash IVF Pty LtdMonash IVF: tracking pixels on fertility website used without consent AustraliaCookies and tracking Order

Monash IVF collected sensitive information about visitors to its fertility treatment website through third-party tracking pixels. The Privacy Commissioner held that following the visitors of health-related websites and afterwards showing them targeted adverts on social networks amounts to collecting sensitive data, which requires consent, and found breaches of APP 3.3, 5.1, 5.2 and 7.1. Monash IVF must not continue or repeat the conduct and must implement specified remedial steps; a parallel determination against the telehealth provider Medmate Australia was made on the same day.

What organisations can take from it

Anyone using tracking pixels on health websites needs visitors' consent and must know which data flows to advertising platforms.

Relevance to training and awareness

Tracking pixels and advertising tools on websites with sensitive content

Authority / court
Office of the Australian Information Commissioner (OAIC)
Area of law
Data protection · Cookies and tracking
Legal basis
Privacy Act 1988 (Cth), APP 3.3, 5.1, 5.2, 7.1
Action
Order
Status of proceedings
unknown
Sector
Healthcare
Published
24 Jun 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Jun 2026 Denso CorporationCADE: 100.79 million BRL against Denso over international wire harness cartel BrazilCartels and collusion €16.8m

The Tribunal of the Conselho Administrativo de Defesa Econômica (CADE, Brazilian competition authority) unanimously fined Denso Corporation 100,787,523.05 BRL for taking part in an international cartel in wire harnesses and electrical and electronic automotive components with effects in Brazil. According to the rapporteur’s vote, Denso took part in price fixing, the allocation of projects, geographic market sharing and the exchange of sensitive information roughly between 2000 and 2008. For other participants the proceedings ended through leniency, settlements or for lack of evidence; CADE dismissed Denso’s motion for clarification (embargos) in August 2026. The amount and the facts have not been confirmed against the primary source.

What organisations can take from it

International cartels are prosecuted in Brazil even long after they ended if they affected prices there.

Relevance to training and awareness

International cartels in the automotive supply chain

Authority / court
Conselho Administrativo de Defesa Econômica (CADE), Tribunal Administrativo
Area of law
Competition law · Cartels and collusion
Legal basis
Lei nº 12.529/2011 (Lei de Defesa da Concorrência)
Action
Fine
Status of proceedings
unknown
Sector
Automotive
Employees
10,000 or more
Published
10 Jun 2026

Original amount 100,787,523.05 BRL, converted at the ECB reference rate of 10 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Jun 2026 Health Service Executive (HSE)DPC: €300,000 fine against HSE after ransomware attack on hospital laboratory in Tullamore IrelandData breaches and data security €300,000

In November 2018 attackers encrypted patient data in the laboratory information system of Midlands Regional Hospital Tullamore. The DPC found that the HSE had infringed Art. 5(1)(f), 28, 30, 32(1) and 34 GDPR (including insufficient security, deficient processor contracts and record of processing, and incomplete notification of affected persons), issued a reprimand, imposed €300,000 for the security failings (Art. 5(1)(f) and 32(1)) and ordered it to introduce specified policies and procedures for secure processing.

What organisations can take from it

Laboratory and other specialist hospital systems also belong in security and supplier management; contracts with processors must contain the GDPR safeguards.

Relevance to training and awareness

Ransomware protection of clinical systems

Authority / court
Data Protection Commission (DPC)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 5(1)(f), 28, 30, 32(1), 34 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Healthcare

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Jun 2026 Philip Morris Italia S.r.l.AGCM fines Philip Morris Italia €7m over "senza fumo" (smoke-free) advertising ItalyMisleading advertising and pricing €7m

Philip Morris Italia widely promoted heated tobacco devices, e-cigarettes and nicotine products for oral use with phrases such as "senza fumo" (smoke-free) and a "smoke-free future"; the AGCM considered this misleading because it suggested that the products were harmless or less harmful, although they can endanger health and safety. The authority imposed a fine of 7,000,000 EUR and prohibited continuation; the proceedings were triggered by a report from the Ministry of Health.

What organisations can take from it

Health-related advertising claims must be complete and substantiated, and a slogan such as "smoke-free" must not imply that a product is harmless.

Relevance to training and awareness

Health-related advertising claims for tobacco and nicotine products

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Art. 20, 21 Abs. 1 und 3, 22 Codice del consumo (D.lgs. 206/2005)
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
10 Jun 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Jun 2026 Xponential Fitness, Inc. u. a. (Franchisegesellschaften der Marken AKT, BFT, Club Pilates, CycleBar, Pure Barre, Rumble, StretchLab, YogaSix)New York: Xponential Fitness pays 3.97 million USD over misleading franchise disclosures USA, NYConsumer protection and online retail €3.43m

According to the Attorney General's office, the fitness franchisor stated three to six months until studio opening in the disclosure documents filed in New York, although it took more than 13 months on average and its own SEC reports showed longer periods. The Assurance of Discontinuance requires 3,971,250 USD: 3 million USD for 70 harmed franchisees (of which 300,000 USD is a civil penalty) and 971,250 USD in fee refunds to 25 franchisees who never opened. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Statements in franchise disclosures must match the company's own capital market reports – discrepancies count as evidence of deception.

Relevance to training and awareness

Realistic statements in franchise disclosure documents

Authority / court
Office of the New York State Attorney General (Investor Protection Bureau, Franchise Section)
Area of law
Consumer protection and online retail
Legal basis
New York Franchise Sales Act (General Business Law §§ 680 ff., insb. § 687); Executive Law § 63(12)
Action
Disgorgement of profits
Status of proceedings
final
Sector
Other
Published
9 Jun 2026

Original amount 3,971,250 USD, converted at the ECB reference rate of 9 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Jun 2026 Leader Properties Investment Pty LtdNSW: property manager Leader Properties penalised for unlawfully locking out a tenant AustraliaConsumer protection and online retail €13,422

NSW Fair Trading (the consumer protection regulator of New South Wales) reprimanded Leader Properties Investment Pty Ltd on 9 June 2026 and imposed a monetary penalty of 22,000 AUD because it had locked out a tenant and unlawfully taken possession of the rented home in breach of the Residential Tenancies Act 2010. All licensed agents of the company who provide property management must complete tenancy training. Measures against individuals are not set out here.

What organisations can take from it

Property managers must never lock out tenants on their own authority; evictions only go through the statutory process, and staff must know this.

Relevance to training and awareness

Tenancy law in property management: no self-help evictions or lockouts

Missing or inadequate training played a role in the decision.

Authority / court
NSW Fair Trading
Area of law
Consumer protection and online retail
Legal basis
Property and Stock Agents Act 2002 (NSW), s 192(1)(a), (c) und (d); Verstoß gegen den Residential Tenancies Act 2010 (NSW)
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Liability of senior managers
Measures against individuals are not set out here.
Published
25 Jun 2026

Original amount 22,000 AUD, converted at the ECB reference rate of 9 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Jun 2026 Deutsche Wohnen SELG Berlin I confirms GDPR infringement by Deutsche Wohnen through tenant archive without deletion function GermanyData breaches and data security Fine

In 2019, the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI) had imposed 14.5 million EUR on the housing group because tenant data such as salary statements, bank statements and social security data were held in an archive system with no means of deletion. Following the 2023 CJEU judgment on direct corporate liability, the Berlin Regional Court (Landgericht Berlin I) confirmed on 9 June 2026 infringements of data minimisation and storage limitation; the press release does not state the amount of the fine set by the court.

What organisations can take from it

Ensure that archive and filing systems can technically implement deletion periods from the outset – ‘privacy by design’ is subject to fines.

Authority / court
Landgericht Berlin I (Bußgeldbehörde: Berliner Beauftragte für Datenschutz und Informationsfreiheit)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 5, Art. 25 Abs. 1 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Liability of senior managers
According to the CJEU (C-807/21), a breach of duty by a person in a management position need not be proven for the corporate fine.
Published
10 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Jun 2026 MetaMeta: interim measures to keep WhatsApp open to rival AI assistants free of charge EU levelAbuse of market power Order

The European Commission ordered Meta to restore access for rival general-purpose AI assistants to the WhatsApp for Business interface on the terms in place before 15 October 2025, i.e. free of charge, and to maintain it until the final decision. The Commission found a prima facie abuse of a dominant position in consumer communication apps, because Meta had first excluded third-party assistants and later charged a fee with practically the same effect; the measures had to be implemented within five working days.

What organisations can take from it

A company that has opened its dominant platform to third parties must not squeeze out competitors in the growing AI market through exclusion or prohibitive fees.

Relevance to training and awareness

Refusal of platform access to AI competitors

Authority / court
Europäische Kommission
Area of law
Competition law · Abuse of market power
Legal basis
Art. 102 AEUV; Art. 54 EWR-Abkommen; Art. 8 Abs. 1 VO (EG) Nr. 1/2003
Action
Order
Status of proceedings
unknown
Sector
Media and online platforms
Employees
10,000 or more
Published
9 Jun 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 Jun 2026 A. Tsokkos Hotels Public LimitedCyprus: 16,500 EUR against A. Tsokkos Hotels for late annual financial report CyprusDisclosure and reporting obligations €16,500

The listed hotel group did not publish its 2024 annual financial report on time; the Cyprus Securities and Exchange Commission (CySEC) imposed a total of 16,500 EUR. At the same meeting, eleven other issuers were fined between 1,500 and 17,000 EUR for the same reason; a fine of 13,500 EUR had already been imposed on the company under the same law in 2025.

What organisations can take from it

Publication deadlines for financial reports are not negotiable – repeated delays lead to fines and, in extreme cases, to suspension of trading.

Authority / court
Cyprus Securities and Exchange Commission (CySEC)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Sec. 9(1), 37(2)(a) Transparency Requirements (Securities Admitted to Trading on a Regulated Market) Law 2007
Action
Fine
Status of proceedings
unknown
Sector
Other
Repeat case
yes
Published
7 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Jun 2026 Portugal: 8.18 million EUR against three companies over advertising in TV recordings PortugalCartels and collusion €8.18m

With the support of a consultancy, the three largest pay-TV providers agreed from 2019 to May 2025 to introduce advertising as a condition for accessing recordings and to standardise the marketing of this advertising space. The Autoridade da Concorrência (Portuguese Competition Authority, AdC) imposed 8,181,000 EUR on three companies; together with the fourth participant, already sanctioned earlier under a settlement, the fines add up to 13,351,000 EUR. Owing to ongoing court proceedings, the AdC did not publish the names in its announcement.

What organisations can take from it

Jointly coordinated ‘industry solutions’ at customers’ expense are cartels – even when a service provider takes on the coordination.

Relevance to training and awareness

Coordinated product changes among competitors

Authority / court
Autoridade da Concorrência (AdC)
Area of law
Competition law · Cartels and collusion
Legal basis
Lei da Concorrência (Lei n.º 19/2012), Art. 9.º (Processo PRC/2020/4)
Action
Fine
Status of proceedings
unknown
Sector
Telecoms, IT and software
Published
5 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Jun 2026 CityFitness Group LimitedCityFitness: 1,120,000 NZD for a price rise disguised as a “transaction fee” New ZealandMisleading advertising and pricing €565,485

New Zealand's largest gym chain kept advertising a membership at 6.99 NZD a week on its website, Instagram and Google ads, although all new members had to pay a compulsory 3% surcharge that it presented as a “transaction fee” but which in fact served to raise revenue generally. After pleading guilty to eight representative charges (offending period 21 December 2023 to 30 April 2025), the company was sentenced on 5 June 2026 to a fine of 1,120,000 NZD. According to the Commerce Commission (ComCom, New Zealand's competition and consumer authority), the surcharge affected more than 125,000 members and generated around 1.6 million NZD in additional revenue.

What organisations can take from it

Unavoidable surcharges belong in the advertised price and must not be passed off as a payment-related fee.

Relevance to training and awareness

Transparent total prices and honestly labelled surcharges

Authority / court
Strafgericht, in der Quelle nicht benannt (Anklage: Commerce Commission)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Fair Trading Act 1986, ss 11, 40(1)
Action
Fine
Status of proceedings
unknown
Sector
Other
Culpability
intentional
Liability of senior managers
According to the court, the labels “transaction fee” and “Payment Authority Fee” were approved at the highest level; the fee increase was decided by senior executives.
Published
9 Jun 2026

Original amount 1,120,000 NZD, converted at the ECB reference rate of 5 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Jun 2026 Εταιρεία Προμήθειας Αερίου Θεσσαλονίκης Θεσσαλίας Α.Ε. („ZeniΘ“) und Τράπεζα Πειραιώς Α.Ε. (Piraeus Bank)Greece: 110,000 EUR against energy supplier ZENITH and Piraeus Bank (right of access) GreeceData subject rights and transparency €110,000

Due to errors by a processor of the energy supplier, incorrect details of a direct debit mandate were recorded, so that three bills instead of one were debited from the customer's account; call recordings and the mandate form had not been retained. ZENITH responded inadequately to the access request and did not correct the data (100,000 EUR), while Piraeus Bank infringed the right of access (10,000 EUR and a reprimand); Decision No. 8/2026 of the Hellenic Data Protection Authority.

What organisations can take from it

Answer access requests in full and retain records of mandates – this also applies to data recorded by a service provider.

Authority / court
Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα (Hellenic DPA)
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 5 Abs. 1 lit. d, Art. 12 Abs. 3, Art. 15, Art. 28 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Energy and utilities

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Jun 2026 Caisse populaire Alliance limitéeFINTRAC: CAD 82,500 penalty on Caisse populaire Alliance limitée for 4 violations of anti-money laundering obligations CanadaCustomer due diligence €51,055

According to FINTRAC, Caisse populaire Alliance limitée is a provincially regulated credit union based in North Bay, Ontario. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 82,500 on the company on 5 June 2026. According to FINTRAC's findings, made during a compliance examination, the company committed 4 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned written compliance policies and procedures, enhanced measures for high-risk situations, assessing and documenting money laundering and terrorist financing risks and the prescribed review of the compliance programme. Specifically, according to FINTRAC, 46 of 118 high-risk clients were not reviewed annually, contrary to the credit union's own policies. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Caisse populaire Alliance limitée", published 24 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-24-1-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
PCMLTFA s. 9.6(1), 9.6(3); PCMLTF Regulations 156(1)(b), 156(1)(c), 156(1)(f), 156(2), 156(3), 157; Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
24 Sep 2026

Original amount 82,500 CAD, converted at the ECB reference rate of 5 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Jun 2026 Illuminate Education Inc.FTC: final order against education software provider Illuminate after data leak affecting 10.1 million students USAData breaches and data security Order

According to the complaint by the US Federal Trade Commission (FTC), Illuminate promised schools data security but did not adequately protect its cloud databases, even though a service provider had pointed out vulnerabilities almost two years earlier; a hacker accessed data on 10.1 million students, including health information. The order requires an information security programme, data minimisation and a public deletion schedule, and prohibits misrepresentations about security and notification deadlines.

What organisations can take from it

Do not leave known vulnerabilities unaddressed for years – security promises to customers are measured as binding commitments.

Authority / court
Federal Trade Commission (FTC)
Area of law
Data protection · Data breaches and data security
Legal basis
FTC Act (Verbot unlauterer und irreführender Praktiken)
Action
Order
Status of proceedings
final
Sector
Telecoms, IT and software
Culpability
negligent
Published
5 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Jun 2026 Pathwise Credit UnionFINTRAC: CAD 41,250 penalty on Pathwise Credit Union for 2 violations of anti-money laundering obligations CanadaInternal controls €25,501

According to FINTRAC, Pathwise Credit Union is a provincially regulated credit union based in Oshawa, Ontario. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 41,250 on the company on 4 June 2026. According to FINTRAC's findings, made during a compliance examination, the company committed 2 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned written compliance policies and procedures and assessing and documenting money laundering and terrorist financing risks. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Pathwise Credit Union", published 24 September 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-09-24-3-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
PCMLTFA s. 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
24 Sep 2026

Original amount 41,250 CAD, converted at the ECB reference rate of 4 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Jun 2026 OVO Energy LimitedOfgem: OVO pays GBP 10.4m over poor support for vulnerable prepayment customers United KingdomConsumer protection and online retail €12m

Ofgem found that OVO Energy did not adequately monitor prepayment customers in vulnerable situations, did not properly support customers who self-disconnected and did not maintain the Priority Services Register properly; some internal training materials were unclear and contradictory. By way of alternative action, OVO is paying GBP 7m into the voluntary redress fund and providing GBP 3.4m in credit and debt relief to its most vulnerable customers; under a separate compliance engagement it is also paying GBP 1.1m to customers in the Scottish Highlands and Islands.

What organisations can take from it

Policies on paper are not enough: training materials and processes for vulnerable customers must be consistent and checked in practice.

Relevance to training and awareness

Dealing with customers in vulnerable situations

Missing or inadequate training played a role in the decision.

Authority / court
Office of Gas and Electricity Markets (Ofgem)
Area of law
Consumer protection and online retail
Legal basis
Standard Licence Conditions 26.1, 26.4, 26.5(d)(f), 27A.1, 28.1A/28.1B, 28.2 und 28.4 der Gas- und Stromversorgungslizenzen
Action
Other
Status of proceedings
final
Sector
Energy and utilities
Mitigating circumstances
Remedial action during the investigation, including welfare visits to customers who had been disconnected for more than 72 hours.
Published
3 Jun 2026

Original amount 10,400,000 GBP, converted at the ECB reference rate of 3 Jun 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Jun 2026 VF Hellas Ενδυμάτων Ε.Π.Ε. (VF Hellas, Tochter der VF Corporation)Greece: 954,485 EUR against VF Hellas for banning price comparison and Google Ads GreeceCartels and collusion €954,485

The importer and wholesaler of the Vans, Eastpak and The North Face brands contractually prohibited its retailers from using price comparison portals and search engine advertising (in particular Google Ads). The Επιτροπή Ανταγωνισμού (Hellenic Competition Commission) regarded this as a hardcore restriction in online sales and, in a settlement procedure (Decision 913/2026), set a reduced fine of 954,485 EUR; date = press release.

What organisations can take from it

Prohibiting retailers from using price comparison sites or search engine advertising is a hardcore restriction – distribution agreements should regularly undergo competition law review.

Relevance to training and awareness

Competition-law-compliant design of dealer agreements in online sales

Authority / court
Επιτροπή Ανταγωνισμού (Hellenic Competition Commission)
Area of law
Competition law · Cartels and collusion
Legal basis
Art. 1 Gesetz 3959/2011; Art. 101 AEUV; Art. 4 lit. e VO (EU) 2022/720
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Mitigating circumstances
Settlement procedure (Diettheti Diaforon) with fine reduction
Published
3 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Jun 2026 Sonus Public Relations LtdTribunal: PR agency Sonus must pay £71,052 after subjecting whistleblower to detriment United KingdomRetaliation against whistleblowers €82,264

The PR agency, which did not appear, lost on all claims: detriment on grounds of whistleblowing (£20,000 for injury to feelings), wrongful termination without notice pay (£3,547.60) and constructive unfair dismissal (basic and compensatory award including a 25 % ACAS uplift). A total of £71,051.82 was awarded.

What organisations can take from it

Employers who do not take part in the proceedings risk, in addition to whistleblower compensation, an uplift for failing to follow the ACAS Code of Practice.

Relevance to training and awareness

How managers handle internal reports

Authority / court
Employment Tribunal
Area of law
Whistleblower protection · Retaliation against whistleblowers
Legal basis
Employment Rights Act 1996, s. 47B (Benachteiligung wegen geschützter Offenlegung); konstruktive unfaire Kündigung; wrongful dismissal
Action
Other
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Published
22 Jul 2026

Original amount 71,051.82 GBP, converted at the ECB reference rate of 3 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 4 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Jun 2026 CoinMENA FZEVARA fines CoinMENA over failings in its anti-money laundering programme United Arab EmiratesInternal controls Fine

The Virtual Assets Regulatory Authority (VARA, Dubai's virtual assets regulator) had licensed CoinMENA FZE to provide broker-dealer services on 30 November 2023. In ongoing supervisory inspections covering its entire market operations from the outset up to and including the 2025 financial year, VARA found administrative weaknesses in internal systems and controls that led to compliance failures in the company's anti-money laundering programme. VARA imposed a fine, the amount of which was not published.

What organisations can take from it

Even a licensed provider must keep its anti-money laundering programme aligned with its actual operations – the regulator reviews the entire period of operation.

Relevance to training and awareness

Internal controls in the AML programmes of crypto service providers

Authority / court
Virtual Assets Regulatory Authority (VARA), Dubai
Area of law
Money laundering and terrorist financing · Internal controls
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Mitigating circumstances
Full cooperation, acceptance of the findings and a coordinated remediation plan.
Published
22 Jun 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Jun 2026 bunq B.V.AFM: €170,000 fine for bunq over late replies to fraud complaints NetherlandsOrganisational requirements €170,000

On 2 June 2026 the Autoriteit Financiële Markten (AFM, Dutch Authority for the Financial Markets) fined bunq B.V. 170,000 EUR because in seven cases the bank did not give a substantive reply within the statutory 15 working days to complaints from customers who had fallen victim to online fraud (November to December 2023 and April to at least August 2024). Because bunq fully or largely compensated those affected without being legally obliged to, the AFM lowered the base amount from 500,000 to 200,000 EUR; the simplified settlement brought a further 15% reduction.

What organisations can take from it

Complaint processes for payment services need deadline monitoring, especially for fraud victims with large losses.

Relevance to training and awareness

Timely handling of complaints in payment services

Authority / court
Autoriteit Financiële Markten (AFM)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Art. 43a Abs. 1 i. V. m. Abs. 2 Besluit Gedragstoezicht financiële ondernemingen Wft (BGfo), Umsetzung von Art. 101 PSD2
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Voluntary full or largely full compensation of the customers concerned; simplified settlement (−15%).
Published
8 Jun 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Jun 2026 Ascension Health Alliance; AmSurg LLC / Ambulatory Topco LLCAscension/AmSurg: seven ambulatory surgery centres must be sold USAMerger control Order

The non-profit hospital group Ascension wanted to acquire AmSurg for 3.9 billion USD. Owing to overlaps in outpatient surgery in five regions, the Federal Trade Commission (FTC) requires the sale of seven AmSurg centres to SC Affiliates and a gastroenterology practice, as well as transitional support.

What organisations can take from it

Non-profit healthcare providers are also subject to merger control – regional market shares determine divestitures.

Authority / court
Federal Trade Commission (FTC)
Area of law
Competition law · Merger control
Legal basis
Section 7 Clayton Act; Section 5 FTC Act (Consent Order)
Action
Order
Status of proceedings
unknown
Sector
Healthcare
Employees
10,000 or more

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Jun 2026 Euro Exchange Securities UK LtdFCA halts e-money institution Euro Exchange Securities UK over money laundering risks United KingdomInternal controls Order

The FCA barred the e-money institution Euro Exchange Securities UK Ltd with immediate effect from providing any e-money and payment services, prohibited any dealing with customer funds without its consent and required an independent third party to oversee their return. According to the FCA, the reasons were systemic weaknesses in combating financial crime – in customer risk assessment, customer due diligence and enhanced due diligence, screening, transaction monitoring and governance – together with indications that the obligations to safeguard customer funds were not being met. On the FCA's application the court appointed interim managers on 4 June 2026 and confirmed the special administration on 11 June 2026.

What organisations can take from it

Payment institutions must be able to evidence customer due diligence, transaction monitoring and the segregation of customer funds at all times, or face immediate shutdown.

Relevance to training and awareness

Anti-money laundering and safeguarding of customer funds at payment service providers

Authority / court
Financial Conduct Authority (FCA)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
reg. 11(1) Electronic Money Regulations 2011 i. V. m. regs. 6(5)(b), 6(5)(c), 6(6)(d), 20 und 37 EMRs; Money Laundering Regulations 2017
Action
Order
Status of proceedings
unknown
Sector
Financial services and insurance
Published
5 Jun 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 Jun 2026 Elkjøp Nordic AS, Elkjøp Norge ASElkjøp: NOK 20m fine over invalid consent in customer club NorwayMarketing and consent €1.85m

Datatilsynet (Norwegian Data Protection Authority) fined Elkjøp Nordic AS and Elkjøp Norge AS NOK 20,000,000. Following an on-site inspection in June 2022, the authority found that consent for the customer club was neither informed nor specific nor freely given, that club data had been reused without a legal basis for the 'kundematch' (customer match) tool, that the lawfulness of so-called offline conversions had not been assessed and documented, and that rectification requests had not been handled within the deadlines. The decision was adopted under the cooperation mechanism with the supervisory authorities of Sweden, Iceland, Finland and Denmark; more than six million club members across the Nordic countries were affected.

What organisations can take from it

Anyone who ties discounts to club membership must obtain separate, informed and freely given consent in advance for each marketing purpose and must not reuse club data for new purposes such as audience matching without assessment.

Relevance to training and awareness

Valid consent in customer clubs and loyalty programmes

Authority / court
Datatilsynet
Area of law
Data protection · Marketing and consent
Legal basis
Art. 6 Abs. 1 i. V. m. Art. 4 Nr. 11, Art. 6 Abs. 4, Art. 5 Abs. 2 i. V. m. Art. 5 Abs. 1 lit. a, Art. 12 Abs. 3 DSGVO; Art. 58 Abs. 2 lit. i DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Culpability
intentional
Mitigating circumstances
Improvements made after the inspection, Datatilsynet's long case-handling time and the lack of evidence that sensitive data were processed; the amount is well below the starting point in the EDPB guidelines (0.4–0.8% of group turnover).
Published
4 Jun 2026

Original amount 20,000,000 NOK, converted at the ECB reference rate of 1 Jun 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 Jun 2026 FTI Consulting, Inc.OFAC: USD 1.05 million settlement with FTI Consulting over prohibited extension of credit to a Russian state-owned bank USABreaches of sanctions and embargoes €901,597

Consulting firm FTI Consulting, Inc. of Washington, D.C. is paying USD 1,050,000 under a settlement with OFAC for apparent violations of the Russia financial sector sanctions. According to OFAC's findings, between April 2019 and May 2021 FTI indirectly extended prohibited debt on six occasions to a Russian state-owned bank subject to Directive 1 under Executive Order 13662: invoices remained unpaid beyond the permitted 14 days or were paid long afterwards while FTI continued to provide services. OFAC treated the apparent violations as non-egregious and not voluntarily self-disclosed; the base penalty was USD 525,000. The settlement amount is above the base penalty; OFAC cited in particular the anticipated impact on future compliance by similarly situated firms. Source: U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), enforcement release "FTI Consulting, Inc., a Global Business Advisory Firm, Settles with OFAC for $1,050,000 Related to Apparent Violations of Dealing in Prohibited Debt of Sanctioned Russian Bank", 1 June 2026, https://ofac.treasury.gov/media/935651/download?inline; summarised in our own words.

Authority / court
U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Ukraine-/Russia-Related Sanctions Regulations, 31 C.F.R. §§ 589.202, 589.213 i. V. m. Directive 1 zu E.O. 13662 (sechs mutmaßliche Verstöße); Vergleich nach den Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A
Action
Fine
Status of proceedings
final
Sector
Other
Published
1 Jun 2026

Original amount 1,050,000 USD, converted at the ECB reference rate of 1 Jun 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

29 May 2026 mBank S.A.mBank: PLN 14.9m for failings in treasury business and compliance PolandOrganisational requirements €3.52m

The KNF imposed four fines totalling PLN 14,900,000 on mBank: PLN 0.4m and 6m because staff negotiated client transactions with unauthorised third parties and passed client information to them, PLN 5m for not treating currency hedging transactions as financial instruments and PLN 3.5m for ineffective internal control and compliance functions. Following a request for reconsideration, the KNF upheld the decision on 28 August 2026; it is not final.

What organisations can take from it

Staff may negotiate client transactions only with persons whose authority has been verified, and the compliance function must monitor this.

Relevance to training and awareness

Verifying authority and confidentiality in client dealings

Authority / court
Komisja Nadzoru Finansowego (KNF)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
§ 8 Abs. 1 i. V. m. § 26 Nr. 1 Verordnung des Finanzministers vom 24.09.2012; Art. 83b Abs. 3 und 6, Art. 83c Abs. 1 ustawa o obrocie instrumentami finansowymi; Art. 9c Abs. 1 Nr. 4 Prawo bankowe; Art. 21 und 22 Delegierte Verordnung (EU) 2017/565
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance

Original amount 14,900,000 PLN, converted at the ECB reference rate of 29 May 2026.

Sources

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

29 May 2026 Atlantic Lottery Corporation Inc.FINTRAC: CAD 212,025 penalty on Atlantic Lottery Corporation Inc. for 3 violations of anti-money laundering obligations CanadaSuspicious activity reports €131,906

According to FINTRAC, Atlantic Lottery Corporation Inc. is a reporting entity in the casino sector based in Moncton, New Brunswick. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 212,025 on the company on 29 May 2026. According to FINTRAC's findings, made during a compliance examination, the company committed 3 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned suspicious transaction reporting, written compliance policies and procedures and assessing and documenting money laundering and terrorist financing risks. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Atlantic Lottery Corporation Inc.", published 9 July 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-07-09-1-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
PCMLTFA s. 7, 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Other
Published
9 Jul 2026

Original amount 212,025 CAD, converted at the ECB reference rate of 29 May 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

28 May 2026 TemuDSA: 200 million EUR against Temu over deficient risk assessment of illegal products EU levelPlatform obligations €200m

Temu's 2024 risk assessment was based on general industry data rather than on findings about its own service and underestimated how often EU consumers encounter illegal products; test purchases revealed unsafe chargers and baby toys. The European Commission imposed 200 million EUR under the Digital Services Act (DSA) and required an action plan by 28 August 2026.

What organisations can take from it

Risk assessments must be based on the company's own, service-specific evidence – generic industry analyses are not sufficient.

Authority / court
Europäische Kommission
Area of law
AI and digital regulation · Platform obligations
Legal basis
Verordnung (EU) 2022/2065 (DSA), Risikobewertungspflichten sehr großer Online-Plattformen; Art. 75
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Published
28 May 2026
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

28 May 2026 Thermotech Wall and Loft Surveys LtdICO: £240,000 fine for Thermotech over marketing calls to TPS numbers United KingdomMarketing and consent €276,928

The ICO fined Thermotech Wall and Loft Surveys Ltd £240,000 and issued an enforcement notice. After executing a search warrant in April 2025, the regulator found that between October 2024 and March 2025 the company had instigated 575,062 unsolicited marketing calls to numbers that had been on the TPS register for more than 28 days. There were 132 complaints. The legal basis is regulations 21 and 24 of PECR.

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Marketing and consent
Legal basis
Regulations 21 und 24 PECR; section 55A DPA 1998
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate

Original amount 240,000 GBP, converted at the ECB reference rate of 28 May 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 May 2026 Frigorífico Cason Ltda., ASM Comércio de Subprodutos de Origem Animal Ltda., ASM Comércio e Coleta de Ossos Ltda.CADE: buyer cartel for animal by-products in Rio Grande do Sul – BRL 6.4m BrazilCartels and collusion €1.09m

The CADE Tribunal convicted three companies of a buyer cartel in the purchase of animal residues in Rio Grande do Sul: according to CADE, rendering plants and haulage companies divided collection points among themselves, exchanged sensitive information and obstructed competitors outside the arrangement. Frigorífico Cason received 5,937,915.73 BRL and the two ASM companies jointly 455,419.65 BRL (6,393,335.38 BRL in total); proceedings against several other parties were closed because settlements had been fulfilled or for lack of evidence. The amount and the facts have not been confirmed against the primary source.

What organisations can take from it

Buyers, too, must not coordinate the allocation of suppliers or collection areas; buyer cartels are prohibited just like seller cartels.

Relevance to training and awareness

Buyer cartels and allocation of supply or collection areas

Authority / court
Conselho Administrativo de Defesa Econômica (CADE), Tribunal Administrativo
Area of law
Competition law · Cartels and collusion
Legal basis
Lei nº 12.529/2011
Action
Fine
Status of proceedings
unknown
Sector
Food and agriculture
Liability of senior managers
Measures against individuals are not set out here.
Published
29 May 2026

Original amount 6,393,335.38 BRL, converted at the ECB reference rate of 27 May 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 May 2026 Soltec Power Holdings, SASoltec: incorrect 2023 annual figures reported to the market SpainDisclosure and reporting obligations €190,000

The manufacturer of solar tracking systems disseminated its results for 2023 by way of an "Otra Información Relevante" announcement containing inaccurate information. Spain's National Securities Market Commission (CNMV) imposed a fine of 190,000 EUR for a serious infringement; the company waived administrative appeals.

What organisations can take from it

Voluntary market announcements on results are also subject to MAR – figures must be reconciled before publication.

Authority / court
Comisión Nacional del Mercado de Valores (CNMV)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 297.1.e i. V. m. 297.2.d Ley 6/2023; Art. 17 i. V. m. Art. 7 MAR
Action
Fine
Status of proceedings
unknown
Sector
Energy and utilities
Published
3 Aug 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 May 2026 Scottish Sea Farms LimitedScottish Sea Farms: £70,000 civil penalties over missing F-gas leak detection United KingdomEmissions and permits €80,815

Scotland's environmental regulator SEPA imposed two civil penalties of £35,000 each (£70,000 in total) on salmon processor Scottish Sea Farms. Two ice plants at the Gremista site in Lerwick (Shetland) contained fluorinated greenhouse gases above the threshold of 500 tonnes of CO2 equivalent but had no working leak detection system.

What organisations can take from it

Large refrigeration systems need working leak detection; its absence is penalised even without a proven leak.

Relevance to training and awareness

Obligations for refrigeration equipment containing fluorinated gases

Authority / court
Scottish Environment Protection Agency (SEPA)
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Fluorinated Greenhouse Gases Regulations 2015; Verordnung (EU) Nr. 517/2014
Action
Fine
Status of proceedings
unknown
Sector
Food and agriculture
Mitigating circumstances
The company has since brought the equipment into compliance.
Published
27 May 2026

Original amount 70,000 GBP, converted at the ECB reference rate of 27 May 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 May 2026 IQVIA Operations FranceCNIL: €5m fine for IQVIA Operations France over health data warehouses FranceData subject rights and transparency €5m

The CNIL (French data protection authority) fined IQVIA Operations France EUR 5,000,000 because, for two health data warehouses authorised by the CNIL (fed with data from around 14,000 pharmacies and several thousand medical practices), the company did not comply with the conditions of the authorisations, including log analysis, multi-factor authentication, patient information and the right to object. In addition, pharmacy customers were not informed of the transfer of their data, in-house studies were carried out without the required authorisation and the pharmacy software transmitted data even after a refusal (Art. 25 GDPR). The CNIL classified the data as pseudonymised rather than anonymous and ordered remedial action within six months, subject to a penalty payment of EUR 10,000 per day.

What organisations can take from it

Anyone working with authorised health data must implement the conditions of the authorisation technically as well and actively monitor how partners inform the individuals concerned.

Relevance to training and awareness

Conditions for processing health data

Authority / court
Commission nationale de l'informatique et des libertés (CNIL), formation restreinte
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 66 Loi n° 78-17 du 6 janvier 1978 (Loi Informatique et Libertés); Art. 14 und 25 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Healthcare
Culpability
negligent
Mitigating circumstances
The security shortcomings were remedied after the inspections.
Published
28 May 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 May 2026 Sabre Global Technologies LimitedSabre subsidiary accepted payments from designated Ural Airlines United KingdomBreaches of sanctions and embargoes €1.16m

The provider of a travel booking system continued to provide services to Ural Airlines, designated in May 2022, requested payments of around 906,600 USD and, after the funds were frozen by the bank, looked for alternative payment routes, which HM Treasury's Office of Financial Sanctions Implementation (OFSI) regarded as circumvention. A lack of escalation during a change of roles, vacant leadership positions in legal and compliance, policies focused on US law and screening that did not flag the designation all contributed. According to the annual accounts filed with the UK companies register for financial year 2024, the company had around 150 employees.

What organisations can take from it

If an existing customer is designated, escalate this immediately; looking for alternative payment routes after the bank has frozen funds is itself a breach.

Relevance to training and awareness

Responding to new designations of existing customers, prohibition of circumvention

Authority / court
HM Treasury, Office of Financial Sanctions Implementation (OFSI)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Russia (Sanctions) (EU Exit) Regulations 2019, regs. 13, 14, 19
Action
Fine
Status of proceedings
final
Sector
Telecoms, IT and software
Employees
50 to 249
Mitigating circumstances
Voluntary disclosure (31 October 2022) and full cooperation; settlement under the new settlement procedure
Published
17 Jun 2026

Original amount 1,000,920.59 GBP, converted at the ECB reference rate of 26 May 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 May 2026 Mediaworks Hungary Zrt.Mediaworks Hungary: 50 million HUF for links to leaked map of party supporters HungaryData protection €140,706

On 7 November 2025, the publisher's news portals Origo and Magyar Nemzet linked to a map, created by unknown persons, containing the names, addresses, telephone numbers, email addresses, geo-coordinates and political preferences of Tisza sympathisers; Ripost showed an image with the name of the map. The Hungarian data protection authority (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH) found intentional infringements of Art. 6 and 9 GDPR, prohibited further dissemination and imposed 50 million HUF.

What organisations can take from it

Linking to leaked data is itself a separate processing operation – editorial teams need a data protection review before publication.

Relevance to training and awareness

Handling leaked personal data in newsrooms

Authority / court
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Area of law
Data protection
Legal basis
DSGVO Art. 6 Abs. 1, Art. 9 Abs. 1, Art. 58 Abs. 2 lit. b und f
Action
Fine
Status of proceedings
final
Sector
Media and online platforms
Culpability
intentional
Published
26 May 2026

Original amount 50,000,000 HUF, converted at the ECB reference rate of 26 May 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 May 2026 TGI AGLiechtenstein: FMA halts TGI AG products over deposit-taking without a licence LiechtensteinCapital markets and financial supervision Order

The Finanzmarktaufsicht Liechtenstein (FMA, Financial Market Authority) ordered by decree of 26 May 2026 that TGI AG in Vaduz immediately stop distributing and publicly offering its products “Customer Basic 2 %”, “Sales Premium” and “Sofortrabatt”, because it was thereby conducting deposit-taking business without a licence, and that it no longer hold the customer funds received in this way within four months. In a partial decision of 12 August 2026 the FMA's appeals commission granted suspensive effect only for the order concerning the holding of the funds; the other measures remain in force and the proceedings are not final.

What organisations can take from it

Business models in which customer money is taken in and later repaid must be checked for a licensing requirement of the financial regulator before launch.

Relevance to training and awareness

Licensing requirement when accepting customer funds (deposit-taking)

Authority / court
Finanzmarktaufsicht Liechtenstein (FMA)
Area of law
Capital markets and financial supervision
Action
Order
Status of proceedings
under appeal
Sector
Financial services and insurance
Published
28 May 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

25 May 2026 Robomarkets LtdCyprus: Robomarkets pays 100,000 EUR under settlement over CFD sales to retail clients CyprusOrganisational requirements €100,000

For the period June 2023 to June 2024, the Cyprus Securities and Exchange Commission (CySEC) examined the investment firm’s organisational requirements, client information, appropriateness assessment and compliance with the restrictions on marketing CFDs to retail investors. The proceedings were concluded with a settlement of 100,000 EUR, which the company has already paid.

What organisations can take from it

When selling CFDs to retail clients, the appropriateness assessment and product intervention rules are central points of supervisory scrutiny.

Relevance to training and awareness

Appropriateness assessment when selling complex products

Authority / court
Cyprus Securities and Exchange Commission (CySEC)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Art. 22(1), 25(1), 26(3) Gesetz über Wertpapierdienstleistungen 2017; Art. 42 VO (EU) 600/2014; CySEC-Richtlinie DI87-09; Art. 37(4) CySEC-Gesetz
Action
Other
Status of proceedings
final
Sector
Financial services and insurance
Published
24 Aug 2026
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 May 2026 Siemens Gamesa Renewable Energy LtdSiemens Gamesa: £600,000 fine after accident at Hull blade factory United KingdomWorkplace safety and accidents €694,300

Siemens Gamesa was fined £600,000 and ordered to pay £7,980.80 in costs. At the blade factory in Hull on 18 July 2024, a prefabricated component weighing around 800 kg fell onto an employee after support poles had been removed; she has since been paralysed from the waist down. The Health and Safety Executive found inadequate risk assessment, no safe system of work and insufficient training.

What organisations can take from it

Where employees develop their own working methods, a binding and trained safe system of work is usually missing.

Relevance to training and awareness

Risk assessment and safe systems of work in manufacturing

Missing or inadequate training played a role in the decision.

Authority / court
Grimsby Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2(1) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Manufacturing and mechanical engineering
Mitigating circumstances
Guilty plea; after the accident the supports were secured with a key-controlled system.
Published
26 May 2026

Original amount 600,000 GBP, converted at the ECB reference rate of 22 May 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 May 2026 House of Tickets B.V.ACM: €270,000 fine for Ticketveiling operator over price inflation by bidding bots NetherlandsMisleading advertising and pricing €270,000

On the auction website Ticketveiling.nl, House of Tickets B.V. drove up the prices of auctioned lots with automatic bids placed by an algorithm and misled consumers about how the final price came about. The ACM (Autoriteit Consument & Markt, Dutch competition and consumer authority) considered 300,000 EUR appropriate and reduced the fine by 10% to 270,000 EUR because the company admitted the infringements in the simplified procedure; it decided not to fine Ticketveiling B.V.

What organisations can take from it

Automated bids placed by the operator in its own auctions deceive bidders and must not be used.

Relevance to training and awareness

Algorithmic pricing and transparency in online auctions

Authority / court
Autoriteit Consument & Markt (ACM)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Art. 8.8 Whc i. V. m. Art. 6:193c Abs. 1 lit. d und Art. 6:193g lit. v BW
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Mitigating circumstances
10% reduction for admitting the infringements and cooperating in the simplified procedure; the infringements were short and ended voluntarily before the investigation began.
Published
28 May 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 May 2026 Streamline Shipping Agencies LimitedAberdeen port agency: £146,700 after forklift accident without traffic separation United KingdomWorkplace safety and accidents €169,756

At the Port of Aberdeen, an employee loosening a lorry curtain was struck by a reversing forklift truck and suffered multiple fractures and a degloving injury. Pedestrians and vehicles were not separated during simultaneous loading and unloading. Fine of £146,700. According to the annual accounts filed with the UK companies register for financial year 2025, the company had around 236 employees.

What organisations can take from it

Loading and manoeuvring areas need firm rules on who may be where and when if forklifts and pedestrians are working at the same time.

Authority / court
Aberdeen Sheriff Court (Ermittlung: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Regulation 17(1) Workplace (Health, Safety and Welfare) Regulations 1992; Section 33(1)(c) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
final
Sector
Transport, logistics and shipping
Employees
50 to 249
Published
28 May 2026

Original amount 146,700 GBP, converted at the ECB reference rate of 22 May 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 May 2026 Foot Locker, Inc.SEC: Foot Locker pays 148,000 US dollars over award waivers in separation agreements USARetaliation against whistleblowers €127,641

From July 2020 to June 2024, around 148 departing employees – including managers and staff from finance, legal and supply chain – signed separation agreements containing a waiver of SEC whistleblower awards. Foot Locker had itself phased out the clause from March 2024 but had not amended all templates; the U.S. Securities and Exchange Commission (SEC) imposed 148,000 US dollars.

What organisations can take from it

When cleaning up clauses, all contract templates must be covered – a single forgotten template is enough for a violation.

Relevance to training and awareness

Whistleblower protection in contract templates (HR/Legal)

Authority / court
U.S. Securities and Exchange Commission
Area of law
Whistleblower protection · Retaliation against whistleblowers
Legal basis
Securities Exchange Act of 1934, Rule 21F-17(a)
Action
Fine
Status of proceedings
final
Sector
Retail and e-commerce
Employees
10,000 or more
Mitigating circumstances
Clause phased out before contact by the SEC; cooperation and prompt remediation
Published
22 May 2026

Original amount 148,000 USD, converted at the ECB reference rate of 22 May 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 May 2026 China Harbour Engineering Company LimitedChina Harbour Engineering: 78,000 HKD for discharge into water control zone Hong KongEmissions and permits €8,584

In April 2026 China Harbour Engineering Company Limited was fined 78,000 HKD at the Eastern Magistrates' Courts (a Hong Kong magistrates' court) under the Water Pollution Control Ordinance (Hong Kong's water pollution law) because the company had discharged waste or polluting matter into a water control zone on 14 July 2025; the prosecution was brought by the Environmental Protection Department (Hong Kong's environmental authority). It was the highest fine among the 40 environmental convictions the department published for April 2026.

What organisations can take from it

Discharges into waters must be authorised in advance and monitored continuously – a single incident is enough for a criminal conviction in Hong Kong.

Relevance to training and awareness

Water protection and authorised discharges

Authority / court
Eastern Magistrates' Courts, Hongkong (Anklage: Environmental Protection Department)
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Water Pollution Control Ordinance (Einleitung von Abfall oder verunreinigenden Stoffen in eine water control zone)
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Published
22 May 2026

Original amount 78,000 HKD, converted at the ECB reference rate of 22 May 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 May 2026 Parrish & Heimbecker, Limited; GrainsConnect Canada Operations Inc.Canada: grain elevator must be sold in the takeover of GrainsConnect CanadaMerger control Order

The planned acquisition of GrainsConnect by Parrish & Heimbecker would have reduced competition for the purchase of wheat from farmers around Reford (Saskatchewan). The Competition Bureau reached an agreement under which P&H must divest the grain elevator in Reford to an approved buyer and continue to operate it normally until then.

What organisations can take from it

Merger control also has local effects: even a single site can trigger a divestiture requirement.

Authority / court
Competition Bureau Canada (Consent Agreement beim Competition Tribunal)
Area of law
Competition law · Merger control
Legal basis
Competition Act (Kanada), Fusionskontrolle
Action
Order
Status of proceedings
unknown
Sector
Food and agriculture
Published
22 May 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 May 2026 Emma Matratzen GmbH, Emma Sleep UK Limited, Emma Sleep GmbHHigh Court: Emma Sleep agrees to end pressure-selling tactics after CMA claim United KingdomMisleading advertising and pricing Order

On a claim brought by the CMA, the High Court made a consent order in which the Emma companies accepted that they had used misleading countdown timers, inaccurate high-demand messages and misleading discount claims. They gave undertakings to the court that are enforceable and must put compliance measures in place with reporting to the CMA; the dispute over was/now reference pricing was tried separately, and in its judgment of 30 July 2026 the court found only the admitted infringements.

What organisations can take from it

Artificial time pressure and apparent scarcity in an online shop are an enforcement risk, up to contempt sanctions, even for foreign sellers with UK customers.

Relevance to training and awareness

Misleading urgency and discount claims in online retail

Authority / court
High Court of Justice, Business and Property Courts (Klägerin: Competition and Markets Authority)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
section 217 Enterprise Act 2002 (Enforcement order wegen Schedule 13 Infringements)
Action
Order
Status of proceedings
final
Sector
Retail and e-commerce
Published
28 May 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 May 2026 Farjess Inc. und Royal Canadian Steel Inc.Canadian steel companies pay 19 million USD – steel from Asia and Europe declared as Canadian USACustoms €16.4m

Two Canadian steel companies allegedly declared flat-rolled steel from China, Indonesia, Italy, Turkey and Vietnam to US customs as being of Canadian or US origin from May 2019 to January 2025. The settlement of 19 million USD (a joint payment with a further settling party) resolves the lawsuit of a customs broker, who receives around 3.61 million USD.

What organisations can take from it

Base origin declarations in cross-border trade on mill certificates – and take note that your own customs broker is often the first to spot inconsistencies.

Relevance to training and awareness

Proof of origin in steel trading

Authority / court
U.S. Department of Justice, Civil Division, und U.S. Attorney’s Office Eastern District of Michigan
Area of law
Sanctions and export control · Customs
Legal basis
False Claims Act, 31 U.S.C. §§ 3729 ff. (Vergleich; Haftung nicht festgestellt)
Action
Other
Status of proceedings
final
Sector
Steel and metals
Liability of senior managers
Measures against individuals are not reported here.
Published
20 May 2026

Original amount 19,000,000 USD, converted at the ECB reference rate of 20 May 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 May 2026 Marketing-Unternehmen, UK (anonymisiert)ICO: £300,000 fine for a marketing firm over spam and fake bailiff texts United KingdomMarketing and consent €346,600

The ICO fined a UK marketing company £300,000 and issued an enforcement notice. The ICO found that the company had sent more than 5.5 million unsolicited marketing text messages, including messages styled as if they came from bailiffs. The 7726 spam reporting service received over 60,000 complaints. The ICO relied on regulations 22 and 23 of PECR (electronic marketing without consent and concealed sender identity).

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Marketing and consent
Legal basis
Regulations 22 und 23 PECR; section 55A DPA 1998
Action
Fine
Status of proceedings
unknown
Sector
Other

Original amount 300,000 GBP, converted at the ECB reference rate of 20 May 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 May 2026 Jusan Technologies LtdTribunal: Jusan Technologies withheld 600,000 US dollars after an employee raised concerns United KingdomRetaliation against whistleblowers Other

In August 2023, an employee raised internal concerns about possible irregularities in the use of earmarked funds. The London South Employment Tribunal found that, for that reason, a payment of 600,000 US dollars owed to him at the end of his contract had been withheld (whistleblowing detriment, s. 47B ERA 1996); compensation will be determined separately. It is not known whether the decision is final.

What organisations can take from it

Subjecting whistleblowers to detriment, for example by withholding contractual payments, exposes employers in the UK to compensation claims; under s. 47B(1A) ERA 1996, individual workers can also be personally liable.

Relevance to training and awareness

How managers handle internal reports

Authority / court
Employment Tribunal
Area of law
Whistleblower protection · Retaliation against whistleblowers
Legal basis
Employment Rights Act 1996, ss. 43B, 43C, 43G, 47B(1) und (1A)
Action
Other
Status of proceedings
unknown
Employees
Under 50
Published
10 Jul 2026

Checked against the official source on 28 Sep 2026 · Version 4 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 May 2026 Adani Enterprises LimitedAdani Enterprises pays 275 million USD over Iranian liquefied petroleum gas USABreaches of sanctions and embargoes €236.1m

From November 2023 to June 2025, the Indian conglomerate bought allegedly Omani and Iraqi liquefied petroleum gas (LPG) via a trader in Dubai which in fact originated from Iran; 32 payments totalling around 192 million USD were routed through US banks. The US Treasury's Office of Foreign Assets Control (OFAC) assessed the violations as egregious and not voluntarily self-disclosed; Adani had recklessly ignored numerous warning signs (AIS manipulation by the tankers, implausible loading ports, conspicuous price discounts, irregularities in the certificates of origin).

What organisations can take from it

Companies that source commodities below market price via intermediaries must actively check origin, vessel movements and documents – mere name screening against sanctions lists is not enough.

Relevance to training and awareness

Warning signs in commodity and shipping transactions (origin, AIS gaps, price discounts)

Authority / court
U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Iranian Transactions and Sanctions Regulations (31 C.F.R. part 560); IEEPA
Action
Fine
Status of proceedings
final
Sector
Energy and utilities
Mitigating circumstances
Remedial measures after discovery and cooperation with OFAC
Published
18 May 2026

Original amount 275,000,000 USD, converted at the ECB reference rate of 18 May 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 May 2026 Volvo Group North America, LLCVolvo Group North America: settlement of around 197 million USD over undisclosed emission control devices USA, CAEmissions and permits €168.7m

Around 10,000 heavy-duty Volvo diesel engines from model years 2010 to 2016 used auxiliary emission control devices (AECDs) that were not disclosed during certification and emitted more NOx than permitted. The settlement with the California Air Resources Board (CARB) comprises 17.5 million USD in penalties and costs, 71 million USD for mitigation measures and 108 million USD for emission reduction projects in California.

What organisations can take from it

Every emissions-relevant control function must be fully disclosed in the certification application; otherwise high settlement payments may follow years later.

Authority / court
California Air Resources Board (CARB)
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Kalifornische Emissions- und Zertifizierungsvorschriften für schwere Nutzfahrzeugmotoren
Action
Fine
Status of proceedings
final
Sector
Automotive
Employees
10,000 or more
Mitigating circumstances
Cooperation during the investigation; recall and extended warranty for engines from model years 2014 to 2016.
Published
18 May 2026

Original amount 196,500,000 USD, converted at the ECB reference rate of 18 May 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 May 2026 Walker Stores Pty Ltd (in Liquidation), Handelsname SnaffleSnaffle operator Walker Stores: AUD 33.5m penalty for overcharging credit interest AustraliaConsumer protection and online retail €20.6m

The online retailer sold household appliances and electronics on instalments and, between September 2021 and February 2025, calculated interest in more than 38,000 credit contracts on the total contract amount instead of the unpaid balance; customers paid almost AUD 20 million too much as a result. Sample contracts also exceeded the statutory annual cost rate cap of 48%. The Court imposed AUD 32 million for the interest calculation and AUD 1.5 million for exceeding the cap, and ordered publication of a notice.

What organisations can take from it

Anyone selling goods on instalments must have interest calculations and cost caps technically checked before thousands of contracts are affected.

Relevance to training and awareness

Correct interest calculation and compliance with cost caps in instalment credit

Authority / court
Federal Court of Australia (auf Antrag der Australian Securities and Investments Commission, ASIC)
Area of law
Consumer protection and online retail
Legal basis
s 24(1) National Credit Code (Anhang 1 zum National Consumer Credit Protection Act 2009 (Cth)) i. V. m. ss 23(1), 28, 32A(1)
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Published
18 May 2026

Original amount 33,500,000 AUD, converted at the ECB reference rate of 18 May 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 May 2026 ArcelorMittal Exploitation Minière Canada s.e.n.c.ArcelorMittal mining subsidiary in Québec: 100 million CAD fine for acidic mine effluent Canada, QCWaste and hazardous substances €62.5m

From May 2014 to May 2022, acidic effluent, effluent with elevated zinc, nickel or suspended solids content, and effluent that was acutely lethal to fish entered fish-bearing waters from the Mont-Wright mining complex and the Fire Lake mine in the Fermont region. The company pleaded guilty to 100 counts; the fine of 100 million CAD goes almost entirely to the Environmental Damages Fund, and an action plan on wastewater management must also be submitted by mid-February 2027.

What organisations can take from it

Long-standing exceedances of limit values add up to hundreds of individual offences; effluent monitoring must lead to immediate corrective action.

Authority / court
Court of Québec (Ermittlungen: Environment and Climate Change Canada)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Fisheries Act, Subsection 36(3)
Action
Fine
Status of proceedings
unknown
Sector
Steel and metals
Published
15 May 2026

Original amount 100,000,000 CAD, converted at the ECB reference rate of 15 May 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

14 May 2026 Takeda Pharmaceuticals U.S.A., Inc.Takeda: 13.7 million USD – speaker fees and luxury meals for prescribing physicians USAGifts, hospitality and benefits €11.7m

From 2014 to 2020, Takeda allegedly selected physicians specifically for its speaker programme for the antidepressant Trintellix and provided them with fees and meals at expensive restaurants to promote prescriptions; some participants attended the same event several times without any educational benefit. Takeda paid 13,670,921 USD.

What organisations can take from it

Speaker programmes need a demonstrable educational purpose – repeated attendance and expensive hospitality turn them into inducements.

Relevance to training and awareness

Invitations, hospitality and fees for healthcare professionals

Authority / court
U.S. Department of Justice / U.S. Attorney's Office, Eastern District of California
Area of law
Bribery and corruption · Gifts, hospitality and benefits
Legal basis
Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
Action
Other
Status of proceedings
final
Sector
Chemicals and pharmaceuticals
Employees
10,000 or more

Original amount 13,670,921 USD, converted at the ECB reference rate of 14 May 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

14 May 2026 Wind Tre S.p.A.Garante: 1.7 million EUR against Wind Tre after data exfiltration via deceived shop staff ItalyData breaches and data security €1.72m

Attackers posed as technical support, induced staff at points of sale to grant system access and obtained data on more than 365,000 customers, including payment data for 41,359 of them. The Italian data protection authority (Garante per la protezione dei dati personali) criticised deficient management of access credentials and digital certificates as well as inadequate security assessments, and imposed 1,715,600 EUR.

What organisations can take from it

Staff in branches and partner shops must verify alleged support calls before granting access.

Relevance to training and awareness

Social engineering / fake IT support

Authority / court
Garante per la protezione dei dati personali
Area of law
Data protection · Data breaches and data security
Legal basis
DSGVO (Integrität und Vertraulichkeit, Art. 32)
Action
Fine
Status of proceedings
unknown
Sector
Telecoms, IT and software
Published
16 Jul 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

13 May 2026 Comércio de Combustíveis Stang Ltda., Pato Comércio de Combustíveis Ltda. u. a. (3 Unternehmen)CADE: fuel cartel in Coronel Vivida – fines cut to BRL 15.1m on embargos BrazilCartels and collusion €2.63m

The CADE Tribunal convicted three petrol station companies because in 2017 they had divided the lots of municipal fuel tenders in Coronel Vivida (Paraná) among themselves in advance and had also coordinated retail pump prices. The fines on the companies initially totalled 43,953,905.42 BRL (Comércio de Combustíveis Stang 25,801,726.15; a further petrol station company 9,406,784.68; Pato Comércio de Combustíveis 8,745,394.59 BRL). On motions for clarification (embargos) the Tribunal reduced, on 1 July 2026, the fines on Stang to 4,615,849.76 BRL and on Pato to 1,090,682.28 BRL owing to a subsequently arising fact relevant to the calculation, leaving 15,113,316.72 BRL. The amount and the facts have not been confirmed against the primary source.

What organisations can take from it

Dividing lots in public tenders is a cartel infringement carrying heavy fines, even in small municipal procurement.

Relevance to training and awareness

Division of tender lots between competitors

Authority / court
Conselho Administrativo de Defesa Econômica (CADE), Tribunal Administrativo
Area of law
Competition law · Cartels and collusion
Legal basis
Lei nº 12.529/2011; Art. 38 VI (Handelsverbot für natürliche Personen)
Action
Fine
Status of proceedings
reduced
Sector
Energy and utilities
Liability of senior managers
Measures against individuals are not set out here.
Published
13 May 2026

Original amount 15,113,316.72 BRL, converted at the ECB reference rate of 13 May 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

13 May 2026 NaphtachimieMarseille: environmental CJIP with Naphtachimie for €1.2m after oil leaks at Lavéra FranceEmissions and permits €1.2m

Pyrolysis oil leaked twice at the Lavéra petrochemical site in Martigues: around 50 tonnes in July 2018 through a failed seal into the Anse d'Auguette, part of which reached the sea, and around one tonne in April 2022 through a corroded seawater pipe, of which some 500 kg reached the Anse d'Auguette. Naphtachimie therefore concluded an environmental CJIP (convention judiciaire d'intérêt public, French deferred prosecution agreement) with the Marseille public prosecutor; it pays a public interest fine of 1,200,000 EUR, compensates two environmental associations and will trial, at its own expense, a biological clean-up of the Anse d'Auguette; validated on 13 May 2026.

What organisations can take from it

Seals and pipes at plants handling substances hazardous to water must be inspected proactively; leaks lead to fines and remediation duties.

Relevance to training and awareness

Maintenance and leak prevention at industrial sites near water

Authority / court
Parquet de Marseille (Procureur de la République); Validierung durch den Präsidenten des Tribunal judiciaire de Marseille
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Art. 41-1-3 Code de procédure pénale (pollution des eaux)
Action
Fine
Status of proceedings
final
Sector
Chemicals and pharmaceuticals
Published
26 May 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

13 May 2026 Oma Säästöpankki OyjOma Säästöpankki: 400,000 EUR over late and incomplete insider lists FinlandMarket abuse and insider dealing €400,000

The bank failed to draw up insider lists in good time for two pieces of inside information (termination of the core banking project with Cognizant in 2021, merger talks with Liedon Säästöpankki in 2022), did not update them and omitted mandatory information. The Finanssivalvonta (Finnish Financial Supervisory Authority, FIN-FSA) imposed a total fine of 400,000 EUR; the decision was not appealed and is final.

What organisations can take from it

Insider lists must be created from the moment inside information exists – a fixed process with designated responsible persons prevents gaps.

Relevance to training and awareness

Insider lists and handling of inside information

Authority / court
Finanssivalvonta (FIN-FSA)
Area of law
Capital markets and financial supervision · Market abuse and insider dealing
Legal basis
Verordnung (EU) Nr. 596/2014 (MAR) Art. 18 Abs. 1, 3 und 4; Durchführungsverordnung (EU) 2016/347
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Measures to prevent recurrence and partial admission/cooperation had a mitigating effect.
Published
15 May 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

13 May 2026 Pareto Securities AbPareto Securities: EUR 115,000 for gaps and duplicate filings in transaction reporting FinlandDisclosure and reporting obligations €115,000

The Finanssivalvonta (FIN-FSA, Finnish Financial Supervisory Authority) imposed a penalty payment of 115,000 EUR on Pareto Securities Ab. The firm had submitted no transaction reports at all on 71 days in 2024 and 20 days in 2025, and between June 2023 and May 2025 it reported 13 transactions an unusually high number of times, most of them more than 300 times. The admission of the failings reduced the amount.

What organisations can take from it

Automated reporting pipelines need controls that detect outages and duplicates immediately.

Relevance to training and awareness

Monitoring automated reporting pipelines

Authority / court
Finanssivalvonta (FIN-FSA)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 26 Abs. 1 UAbs. 1 MiFIR (VO (EU) Nr. 600/2014); Sijoituspalvelulaki 15 luku 2 § 7 mom. 5 kohta; FivaL 40 §, 41 §
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Admission of the failings and cooperation with the supervisor.
Published
13 May 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 May 2026 Perfectus Aluminum Inc., Perfectus Aluminum Acquisitions LLC und vier verbundene LagergesellschaftenPerfectus Aluminum: 549.5 million USD – aluminium extrusions imported as sham pallets USACustoms €468.1m

From July 2011 to June 2014, the companies imported more than 2.2 million Chinese aluminium extrusions that had merely been spot-welded into “pallets”, and declared them as finished goods not subject to anti-dumping and countervailing duties – there were never any buyers for the pallets. A jury had already convicted the companies in 2021 of, among other things, conspiracy to defraud the United States; the civil settlement of 549.5 million USD resolves several whistleblower lawsuits.

What organisations can take from it

Do not use minimal processing to declare goods as finished products outside the scope of anti-dumping duties – that is duty evasion; classify goods according to what they actually are.

Relevance to training and awareness

Tariff classification and evasion of anti-dumping duties

Authority / court
U.S. Department of Justice, Civil Division, und U.S. Attorney’s Office Central District of California
Area of law
Sanctions and export control · Customs
Legal basis
False Claims Act, 31 U.S.C. §§ 3729 ff. (zivilrechtlicher Vergleich)
Action
Other
Status of proceedings
final
Sector
Steel and metals
Culpability
intentional
Published
12 May 2026

Original amount 549,500,000 USD, converted at the ECB reference rate of 12 May 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 May 2026 Société Wallonne des Eaux (SWDE)SWDE: 86,000 EUR for call recordings without sufficient transparency BelgiumData subject rights and transparency €86,000

The Walloon water utility recorded and listened in on customer calls for quality control and training purposes; the Litigation Chamber of the Autorité de protection des données (Belgian Data Protection Authority, APD/GBA) found infringements of transparency and fairness as well as in the engagement of a sub-processor. It imposed two fines totalling 86,000 EUR (85,000 + 1,000) after reducing the amounts in view of the situation of the public utility; an appeal against the decision has been lodged with the Market Court.

What organisations can take from it

Anyone recording customer calls must clearly communicate purpose, legal basis and the parties involved in advance and engage service providers under proper contracts.

Relevance to training and awareness

Recording of customer calls

Authority / court
Autorité de protection des données (APD/GBA) – Chambre Contentieuse
Area of law
Data protection · Data subject rights and transparency
Legal basis
DSGVO Art. 5 Abs. 1 lit. a, Art. 6 Abs. 1, Art. 12 Abs. 1, Art. 13, Art. 28 Abs. 3
Action
Fine
Status of proceedings
under appeal
Sector
Energy and utilities

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 May 2026 Banco Topázio S.A.Banco Topázio: BRL 16.28m and crypto FX ban over anti-money laundering failings BrazilSuspicious activity reports €2.82m

The sanctions committee COPAS of the Banco Central do Brasil (central bank) imposed fines totalling BRL 16,280,000.00 on Banco Topázio S.A.: BRL 4,560,000.00 because its monitoring system contained no rules for foreign exchange transactions to buy and sell virtual assets, BRL 3,280,000.00 because suspicious transactions were not reported, or reported late, to the financial intelligence unit Coaf (including BRL 3.05bn from one client), and BRL 8,440,000.00 because the bank had not verified the qualification of foreign exchange clients. In addition, for two years it may not carry out over-the-counter foreign exchange transactions for virtual assets in which the client acts as an unauthorised intermediary for third parties. The decision is not final.

What organisations can take from it

Anyone processing foreign exchange for crypto intermediaries needs suitable monitoring scenarios and must also know the customers behind the customers.

Relevance to training and awareness

Anti-money laundering monitoring of foreign exchange with crypto intermediaries

Authority / court
Banco Central do Brasil (Comitê de Decisão de Processo Administrativo Sancionador – COPAS)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
Lei 9.613/1998, Art. 10 III, Art. 11 II, Art. 12 II und § 2 II und IV; Circular BCB 3.978/2020, Arts. 38, 39 und 48; Lei 13.506/2017, Art. 3 XVII, Art. 5 II und IV
Action
Fine
Status of proceedings
under appeal
Sector
Financial services and insurance
Liability of senior managers
Measures against individuals are not set out here.

Original amount 16,280,000 BRL, converted at the ECB reference rate of 11 May 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 May 2026 Permanent TSB plcDPC: 277,500 EUR against Permanent TSB after account takeovers via call centre calls IrelandData breaches and data security €277,500

Fraudsters in possession of customer data posed as customers at the bank's ‘Open24’ call centre, had account details changed and obtained further information because security protocols were not followed; those affected had to close accounts, and some suffered losses. Ireland's Data Protection Commission (DPC) imposed 250,000 EUR for inadequate security and 27,500 EUR for late breach notification (decision served in the week before the press release).

What organisations can take from it

Call centre staff must adhere to identity checks without exception – callers with ‘matching’ data are not automatically authorised.

Relevance to training and awareness

Identity verification by telephone (vishing)

Authority / court
Data Protection Commission (DPC)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 5 Abs. 1 lit. f, Art. 32 Abs. 1, Art. 33 Abs. 1 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Published
8 May 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 May 2026 Transport Desgagnés Inc.Transport Desgagnés: 40,000 CAD because a tanker entered an Arctic protected area without a permit Canada, NUEnvironment and sustainability €24,902

The tanker M/T Sarah Desgagnés, operated by the company, entered the Akpait National Wildlife Area in Nunavut on 29 September and 6 October 2024 without the required access permit. The Nunavut Court of Justice imposed 40,000 CAD for the Environmental Damages Fund; the company must publish a notice in a local newspaper and is listed in the Environmental Offenders Registry.

What organisations can take from it

Protected area boundaries belong in every vessel's voyage planning; missing access permits are prosecuted even in remote areas.

Relevance to training and awareness

Protected areas in voyage planning and bridge practice

Authority / court
Nunavut Court of Justice (Ermittlungen: Environment and Climate Change Canada)
Area of law
Environment and sustainability
Legal basis
Wildlife Area Regulations (Canada Wildlife Act), Paragraph 3.3(1)(h)
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Published
8 May 2026

Original amount 40,000 CAD, converted at the ECB reference rate of 8 May 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

7 May 2026 South Staffordshire Plc und South Staffordshire Water PlcICO: almost £1 million against water supplier South Staffordshire after cyber attack United KingdomData breaches and data security €1.12m

In 2020, malware entered the water supplier's network via a phishing e-mail and remained undetected for around 20 months; in 2022, attackers obtained administrator rights and stole data on 633,887 people, which ended up on the dark web. The UK Information Commissioner's Office (ICO) criticised, among other things, monitoring of only 5% of the IT environment, outdated software such as Windows Server 2003 and a lack of vulnerability and patch management.

What organisations can take from it

Utilities in critical infrastructure must also monitor their entire IT estate and replace legacy systems – an attack must not only come to light through performance problems.

Relevance to training and awareness

Recognising phishing

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Data breaches and data security
Legal basis
UK GDPR Art. 5 Abs. 1 lit. f, Art. 32 Abs. 1
Action
Fine
Status of proceedings
final
Sector
Energy and utilities
Culpability
negligent
Mitigating circumstances
40% reduction for early admission of liability; payment agreed without appeal.
Published
11 May 2026

Original amount 963,900 GBP, converted at the ECB reference rate of 7 May 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

7 May 2026 Sydney Water CorporationSydney Water: AUD 240,000 penalty after sewage overflow in Carramar AustraliaEmissions and permits €147,975

In two incidents in July and August 2022 around 423,000 litres of untreated sewage escaped in Carramar because plant had not been properly maintained, affecting a residential property, a sports field, bushland and Prospect Creek. After a guilty plea, the Land and Environment Court convicted Sydney Water and imposed AUD 225,000 for breaching its environment protection licence and AUD 15,000 for failing without lawful excuse to provide CCTV footage requested by the EPA.

What organisations can take from it

Operators of sewerage networks must ensure their plant is maintained and respond promptly to regulators’ information requests.

Relevance to training and awareness

Maintenance of wastewater plant and cooperation with regulatory information requests

Authority / court
NSW Environment Protection Authority (EPA NSW) / Land and Environment Court of NSW
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Bedingungen der Environment Protection Licence; Pflicht zur Vorlage von Informationen und Unterlagen gegenüber der EPA NSW
Action
Fine
Status of proceedings
unknown
Sector
Energy and utilities
Mitigating circumstances
25% discount for an early guilty plea.
Published
7 May 2026

Original amount 240,000 AUD, converted at the ECB reference rate of 7 May 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

7 May 2026 Duncan Farms LimitedDuncan Farms: 53,000 GBP because a worker was caught in an unguarded conveyor United KingdomWorkplace safety and accidents €61,335

In October 2024, an employee of the egg producer climbed between two running manure conveyors to check a noise and was caught at the in-running nip; he suffered nerve damage to both arms. The drive had no fixed or interlocked guards – instruction and clothing rules alone were not sufficient. The Health and Safety Executive (HSE) prosecution resulted in a fine of 53,000 GBP.

What organisations can take from it

Instruction is no substitute for technical safeguards: in-running nips must be protected by fixed or interlocked guards.

Relevance to training and awareness

Stopping machinery before intervening

Authority / court
Health and Safety Executive (Aberdeen Sheriff Court)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Provision and Use of Work Equipment Regulations 1998, reg. 11(1) und (2); Health and Safety at Work etc. Act 1974, s. 33(1)(c)
Action
Fine
Status of proceedings
final
Sector
Food and agriculture
Published
13 May 2026

Original amount 53,000 GBP, converted at the ECB reference rate of 7 May 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

7 May 2026 Canada Revenue Agency (CRA)Privacy Commissioner: Canada's tax authority CRA must strengthen protection against account takeovers CanadaData breaches and data security Other

Since 2020, the Canada Revenue Agency (CRA) has experienced more than 42,000 individual breaches in which unauthorised persons accessed tax accounts or changed data in order to redirect benefits. In a special report to Parliament, the Privacy Commissioner of Canada criticised, among other things, the delayed introduction of mandatory MFA and incomplete incident recording, and made nine recommendations, eight of which were accepted in full and one in part.

What organisations can take from it

Online accounts with payment functions need mandatory strong authentication and complete recording of incidents.

Authority / court
Office of the Privacy Commissioner of Canada (OPC)
Area of law
Data protection · Data breaches and data security
Legal basis
Privacy Act (Kanada)
Action
Other
Status of proceedings
unknown
Sector
Public sector
Employees
10,000 or more
Published
7 May 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 May 2026 HP TRONIC Zlín, spol. s r.o.HP TRONIC Zlín: 39 million CZK for price requirements imposed on electronics retailers CzechiaCartels and collusion €1.6m

For more than ten years from 2012, the distributor and retailer of consumer electronics and household appliances set minimum resale prices for its retail customers, monitored them and sanctioned deviations. The Úřad pro ochranu hospodářské soutěže (Czech Office for the Protection of Competition, ÚOHS) imposed 38.971 million CZK; a leniency application, settlement and an improved compliance programme reduced the fine, and the company appealed against the amount.

What organisations can take from it

Reprimanding retailers over low prices risks high fines – an effective compliance programme can reduce them but is no substitute for ending the practice.

Relevance to training and awareness

Resale price maintenance in sales

Missing or inadequate training played a role in the decision.

Authority / court
Úřad pro ochranu hospodářské soutěže (ÚOHS)
Area of law
Competition law · Cartels and collusion
Legal basis
Tschechisches Wettbewerbsgesetz, Art. 101 AEUV
Action
Fine
Status of proceedings
under appeal
Sector
Retail and e-commerce
Culpability
intentional
Mitigating circumstances
Leniency application, settlement and expansion of the internal compliance programme.
Published
6 May 2026

Original amount 38,971,000 CZK, converted at the ECB reference rate of 6 May 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 May 2026 Československá obchodní banka, a. s.ČNB: CZK 30m fine for ČSOB over customer due diligence and AML control failures CzechiaCustomer due diligence €1.23m

The Česká národní banka (ČNB, Czech National Bank) fined Československá obchodní banka 30,000,000 CZK under the Czech anti-money laundering act. For customers internally rated as high-risk, including a credit institution, the bank did not adequately examine the purpose and background of transactions such as 58 cash withdrawals and did not fully screen ownership and management structures against sanctions lists. It also lacked effective internal procedures for ongoing customer due diligence and for enhanced due diligence on transactions involving high-risk third countries; for 8,414 legal entities with complex structures, the whole structure was not screened for sanctions.

What organisations can take from it

High-risk customers, especially other financial institutions, need ongoing, documented review of their transactions and of their entire ownership chain, including sanctions screening.

Relevance to training and awareness

Customer due diligence and transaction monitoring for high-risk customers

Authority / court
Česká národní banka (ČNB)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
§ 9 Abs. 1 lit. c, § 9a Abs. 1, § 21 Abs. 1, § 44 Abs. 1 lit. b und Abs. 3 lit. d, § 48 Abs. 1 Zákon č. 253/2008 Sb. (AML-Gesetz)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance

Original amount 30,000,000 CZK, converted at the ECB reference rate of 6 May 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 May 2026 P&V Assurances SCP&V Assurances: 150,000 EUR – distribution via a deregistered insurance intermediary BelgiumOrganisational requirements €150,000

One of the insurer’s intermediaries was removed from the FSMA register in December 2023; owing to a human data entry error in the monitoring tool, P&V only noticed this after more than a month and concluded 34 contracts through him during that time. The Autorité des services et marchés financiers (Belgian Financial Services and Markets Authority, FSMA) accepted a settlement of 150,000 EUR; there had already been a settlement for the same amount in 2020.

What organisations can take from it

Automated register checks are only as good as the underlying data maintenance – critical entries require a four-eyes principle.

Relevance to training and awareness

Care in master data maintenance / register reconciliation

Authority / court
Autorité des services et marchés financiers (FSMA)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Loi du 4 avril 2014 relative aux assurances, Art. 259
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Repeat case
yes
Mitigating circumstances
IT adjustments to prevent recurrence.
Published
5 May 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 May 2026 Decora S.A., Bel-Pol sp. z o.o.Decora and Bel-Pol: PLN 33.6m for price and territory agreements on flooring accessories PolandCartels and collusion €7.9m

The manufacturer Decora and the wholesaler Bel-Pol had coordinated prices for vinyl panels, underlays, skirting boards and floor profiles from Decora's range and divided the wholesale market for these products. UOKiK imposed fines of PLN 28,344,000 on Decora and PLN 5,290,000 on Bel-Pol, PLN 33,634,000 in total. The decision is not final.

What organisations can take from it

Vertical agreements on prices and territories in wholesale are hardcore restrictions.

Relevance to training and awareness

Price and territory agreements between manufacturer and wholesaler

Authority / court
Prezes Urzędu Ochrony Konkurencji i Konsumentów (UOKiK)
Area of law
Competition law · Cartels and collusion
Legal basis
Art. 6 Abs. 1 Nr. 1 und 3 ustawa o ochronie konkurencji i konsumentów; Art. 101 Abs. 1 lit. a und c AEUV; Art. 106 Abs. 1 Nr. 1 und 2, Art. 113c und Art. 89a ustawa o ochronie konkurencji i konsumentów
Action
Fine
Status of proceedings
under appeal
Sector
Construction and real estate
Mitigating circumstances
As a leniency applicant, Bel-Pol received a 50% reduction of its fine and a further 10% for voluntarily accepting the fine (settlement).
Liability of senior managers
Measures against individuals are not reported here.

Original amount 33,634,000 PLN, converted at the ECB reference rate of 4 May 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 May 2026 Malta: insurer reprimanded again and fined – marketing calls despite objection MaltaMarketing and consent €1,000

Although the Information and Data Protection Commissioner (IDPC) had already ruled in favour of a complainant, an insurance company (name redacted) again had him called for marketing purposes via a third-party company; his number remained on call lists. The IDPC criticised the lack of safeguards and inadequate contracts with processors, ordered remedial action within 20 days and imposed two fines totalling 1,000 EUR.

What organisations can take from it

An objection to marketing must also reach all call centres engaged – otherwise the next complaint follows.

Relevance to training and awareness

Passing marketing objections on to service providers (suppression lists)

Authority / court
Information and Data Protection Commissioner (IDPC)
Area of law
Data protection · Marketing and consent
Legal basis
Art. 5 Abs. 2, Art. 21 Abs. 2, Art. 24 Abs. 1, Art. 28 Abs. 3 i. V. m. Art. 58 Abs. 2 lit. b, d, i DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Repeat case
yes
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 May 2026 Berliner Verkehrsbetriebe (BVG) AöRBlnBDI reprimands BVG: deletion at service provider not checked, data breach reported too late GermanyData processors Reprimand or warning

A processor of Berlin's public transport operator BVG, which had sent customer letters in early 2025, was hacked; around 180,000 customer records were affected, although they should long since have been deleted after the end of the contract. BVG had never checked the deletion, had not agreed any procedure for data breaches in the data processing agreement and reported the incident only after the 72-hour deadline had expired; the Berlin Commissioner for Data Protection and Freedom of Information (BlnBDI) issued a reprimand.

What organisations can take from it

Have service providers prove deletion after the end of the contract, and have an internal procedure that immediately turns indications of a breach into a 72-hour notification.

Relevance to training and awareness

Reporting process for data breaches and management of service providers

Authority / court
Berliner Beauftragte für Datenschutz und Informationsfreiheit (BlnBDI)
Area of law
Data protection · Data processors
Legal basis
Art. 5 Abs. 2 i. V. m. Abs. 1 lit. c, e, f, Art. 28 Abs. 3 S. 2 lit. f, Art. 32 Abs. 1, Art. 33 DSGVO
Action
Reprimand or warning
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Mitigating circumstances
BVG has announced measures against similar incidents.
Published
4 May 2026
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 May 2026 Ultra Electronics Holdings Limited (vormals plc)Ultra Electronics: DPA of around 10.1 million GBP over bribery in Algeria and Oman United KingdomBribery of public officials €11.6m

The British defence supplier failed to prevent bribery by agents in connection with three public contracts in Oman and Algeria (including a contract with the Omani Ministry of Transport worth up to 200 million GBP). The DPA approved by Southwark Crown Court provides for a penalty of 10,083,150 GBP; in addition, the company is bearing around 4.8 million GBP of the SFO's investigation costs and must report on its compliance programme for three years.

What organisations can take from it

Companies that use agents for government contracts must be able to demonstrate adequate procedures – otherwise the company is liable under Section 7 Bribery Act even without any intent to bribe on its own part.

Relevance to training and awareness

Use of sales agents in public contracts

Authority / court
Serious Fraud Office (SFO)
Area of law
Bribery and corruption · Bribery of public officials
Legal basis
Section 7 Bribery Act 2010 (Failure to prevent bribery); Deferred Prosecution Agreement
Action
Fine
Status of proceedings
final
Sector
Defence and security
Culpability
intentional
Mitigating circumstances
Self-report of the Algerian matters in 2018; restructuring of ownership and leadership; 45 % discount on the penalty.
Published
1 May 2026

Original amount 10,083,150 GBP, converted at the ECB reference rate of 30 Apr 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 May 2026 Modern Nuclear Inc.Modern Nuclear: 8.33 million USD – excessive supervision fees paid to referring cardiologists USACommercial bribery €7.12m

The Californian provider of mobile PET scans allegedly paid referring cardiologists excessive fees for supervising the examinations in order to secure referrals. The settlement of 8,334,350.71 USD plus revenue-based payments is based on ability to pay; in addition, there is a Corporate Integrity Agreement.

What organisations can take from it

Remuneration of business partners who refer work must correspond to the market value of the service – any overpayment acts as a bribe.

Relevance to training and awareness

Checking fee agreements with referrers for market conformity

Authority / court
U.S. Department of Justice / U.S. Attorney's Office, Central District of California
Area of law
Bribery and corruption · Commercial bribery
Legal basis
Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
Action
Other
Status of proceedings
final
Sector
Healthcare

Original amount 8,334,350.71 USD, converted at the ECB reference rate of 30 Apr 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 May 2026 LiveBetter Services LimitedLiveBetter Services: 675,000 AUD after fatal scalding of an NDIS participant AustraliaWorkplace safety and accidents €412,314

Following an investigation by SafeWork NSW, the District Court of NSW fined LiveBetter Services Limited 675,000 AUD for a breach of ss 32/19(2) of the Work Health and Safety Act 2011. In February 2022, a participant in the National Disability Insurance Scheme (NDIS) was placed in a bath with excessively hot water, suffered serious burns and died from her injuries.

What organisations can take from it

When bathing people in care, water temperature must be limited by technical means and checked before every bath.

Relevance to training and awareness

Preventing scalds in care and support services

Authority / court
SafeWork NSW
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Work Health and Safety Act 2011 (NSW) ss 32/19(2)
Action
Fine
Status of proceedings
unknown
Sector
Healthcare

Original amount 675,000 AUD, converted at the ECB reference rate of 30 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 May 2026 Swiss Fund Management AG in Liquidation; BZ Berater Zentrum AGFINMA revokes Swiss Fund Management's licence and confiscates BZ commissions SwitzerlandOrganisational requirements Order

Swiss Fund Management AG in liquidation and BZ Berater Zentrum AG, which held around 2,000 asset management mandates, channelled investor money of around CHF 200 million, directly or via funds, into illiquid bonds of interlinked issuers that financed real estate projects of related companies, without adequately informing investors about the conflicts of interest and without adequate suitability and appropriateness checks under FIDLEG (Swiss Financial Services Act). By ruling of 1 May 2026 the Eidgenössische Finanzmarktaufsicht (FINMA, Swiss Financial Market Supervisory Authority) revoked SFM's licence as a manager of collective assets, rejected BZ's application for a licence as an asset manager and confiscated placement commissions of more than CHF 3 million from BZ. The ruling is final.

What organisations can take from it

Anyone steering client money into products of related companies must disclose the conflicts of interest and document a suitability check for each client.

Relevance to training and awareness

Conflicts of interest and suitability checks in asset management

Authority / court
Eidgenössische Finanzmarktaufsicht (FINMA)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Verhaltensregeln nach dem Finanzdienstleistungsgesetz (FIDLEG): Interessenkonflikte, Eignungs- und Angemessenheitsprüfung
Action
Order
Status of proceedings
final
Sector
Financial services and insurance
Published
29 Jun 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Apr 2026 Cardiff UniversityCardiff University: £280,000 fine over occupational asthma from animal allergens United KingdomWorkplace safety and accidents €323,232

Cardiff University was fined £280,000 and ordered to pay £11,745 in costs after two employees developed occupational asthma from exposure to animal allergens. According to the Health and Safety Executive, the university failed from 2008 to 2025 to identify and implement suitable controls against allergen exposure, although the COSHH regulations and relevant guidance had long been in place.

What organisations can take from it

Slowly developing occupational diseases also lead to prosecution when exposures go uncontrolled for years.

Relevance to training and awareness

Health protection in laboratories working with animals

Authority / court
Cardiff Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2(1) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Public sector
Mitigating circumstances
Guilty plea.
Published
1 May 2026

Original amount 280,000 GBP, converted at the ECB reference rate of 30 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Apr 2026 Deutsche Bank AG London BranchOFSI: GBP 165,000 settlement penalty for Deutsche Bank AG London Branch over payments to an app developer United KingdomBreaches of sanctions and embargoes €190,476

On 30 April 2026 OFSI imposed a monetary penalty of GBP 165,000 on the London branch of Deutsche Bank AG by way of settlement. According to OFSI's findings, in June and July 2022 the branch processed two payments totalling GBP 635,618.75 for a customer to a Russian app developer owned by a designated entity. According to OFSI, its screening provider's list did not contain ownership information on the designated entity, so the beneficiary was not identified. The bank had voluntarily disclosed the payments on 20 September 2022. After a notice of intent of 12 September 2025, which OFSI upheld on 2 December 2025, the bank requested a ministerial review on 23 January 2026; the proceedings ended in settlement. The publication does not state the amount originally proposed. Source: Office of Financial Sanctions Implementation (OFSI), HM Treasury, "Imposition of Monetary Penalty – Deutsche Bank AG London Branch (“DBLB”)", 19 May 2026, https://www.gov.uk/government/publications/imposition-of-monetary-penalty-deutsche-bank-ag-london-branch-dblb. Contains public sector information licensed under the Open Government Licence v3.0 (https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/).

Authority / court
HM Treasury, Office of Financial Sanctions Implementation (OFSI)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Russia (Sanctions) (EU Exit) Regulations 2019, reg. 12; Geldbuße nach s. 146 Policing and Crime Act 2017
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
19 May 2026

Original amount 165,000 GBP, converted at the ECB reference rate of 30 Apr 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Apr 2026 „Вазовски машиностроителни заводи“ ЕАД (VMZ)Arms manufacturer VMZ used a partner’s know-how for disposable grenade launchers – 50,855 EUR BulgariaCompetition law €50,855

On application by a client, the Комисия за защита на конкуренцията (Bulgarian Commission for the Protection of Competition, KZK) found that VMZ had used technical documentation on disposable grenade launchers that had been provided in confidence (trade secret) contrary to the confidentiality agreements and good commercial practice (Art. 37(1) ZZK – Bulgarian Protection of Competition Act). Sanction of 50,855.09 EUR and obligation to cease, with immediate enforceability. Appeals have been lodged against the decision.

What organisations can take from it

Design documents provided in confidence may only be used within the agreed scope – especially in sensitive industries.

Relevance to training and awareness

Handling confidential know-how of business partners

Authority / court
Комисия за защита на конкуренцията (КЗК, Bulgarische Wettbewerbskommission)
Area of law
Competition law
Legal basis
Art. 37 Abs. 1 ZZK (Geschäftsgeheimnisse)
Action
Fine
Status of proceedings
under appeal
Sector
Defence and security

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

29 Apr 2026 Delta Dental Insurance Company und Delta Dental of New York, Inc.NYDFS: $2.25 million against Delta Dental after MOVEit attack and late notification USA, NYSecurity measures and risk management €1.92m

In 2023, attackers exploited a zero-day vulnerability in MOVEit Transfer to steal files containing social security, driving licence, account and health data. The New York State Department of Financial Services (NYDFS) criticised inadequate retention settings, policies and controls as well as the late notification of the cybersecurity incidents to the supervisory authority.

What organisations can take from it

Keep data in transfer tools only for as long as necessary – and report security incidents to the supervisory authority on time.

Authority / court
New York State Department of Financial Services (NYDFS)
Area of law
Information security and cyber · Security measures and risk management
Legal basis
23 NYCRR Part 500 (Cybersecurity Regulation)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Culpability
negligent
Published
30 Apr 2026

Original amount 2,250,000 USD, converted at the ECB reference rate of 29 Apr 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

28 Apr 2026 Purdue Pharma L.P.Purdue Pharma: 5.544 billion USD penalty – including kickbacks via the speaker programme USAGifts, hospitality and benefits €4.75bn

Following its 2020 guilty plea, the opioid manufacturer was sentenced in Newark to a criminal fine of 3.544 billion USD (asserted in the insolvency proceedings) and forfeiture of 2 billion USD; up to 1.775 billion USD can be credited against the forfeiture if Purdue emerges from insolvency as a public benefit company. Purdue had deceived the DEA and paid kickbacks to prescribers via its speaker programme and to an electronic health records platform in order to increase opioid prescriptions.

What organisations can take from it

Fee programmes for customers who drive revenue can become part of a criminal overall scheme – with consequences that threaten the company’s existence.

Relevance to training and awareness

Speaker fees and benefits for prescribing physicians

Authority / court
U.S. District Court, District of New Jersey (Anklage: U.S. Department of Justice)
Area of law
Bribery and corruption · Gifts, hospitality and benefits
Legal basis
Verschwörung zum Betrug der USA und zur Verletzung des Food, Drug, and Cosmetic Act; zwei Fälle Verschwörung zur Verletzung des Anti-Kickback Statute (Schuldbekenntnis vom 24.11.2020)
Action
Fine
Status of proceedings
unknown
Sector
Chemicals and pharmaceuticals
Culpability
intentional

Original amount 5,544,000,000 USD, converted at the ECB reference rate of 28 Apr 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

28 Apr 2026 Amica Chips S.p.A., Pata S.p.A., Preziosi Food S.p.A.Italy: 23.3 million EUR against Amica Chips, Pata and Preziosi Food over snack cartel ItalyCartels and collusion €23.3m

In a secret, continuing agreement, three manufacturers of salty snacks and crisps divided up among themselves the supply of private-label snacks to food retailers. Fines: Amica Chips 8,239,210 EUR, Pata 7,555,387 EUR, Preziosi Food 7,503,550 EUR; this was the first time Italy's competition authority (Autorità Garante della Concorrenza e del Mercato, AGCM) applied its settlement procedure.

What organisations can take from it

Retailers' tenders for private labels are competition – coordinated sham bids to retailers constitute a cartel.

Relevance to training and awareness

Sham bids in retailers' private-label tenders

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Competition law · Cartels and collusion
Legal basis
Art. 101 AEUV; Art. 14-quater Gesetz 287/1990 (Settlement)
Action
Fine
Status of proceedings
unknown
Sector
Food and agriculture
Mitigating circumstances
Leniency reduction for Pata and Amica Chips; 10 % settlement discount for all
Published
28 Apr 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

28 Apr 2026 Canva Pty Ltd; Canva Operations Pty Limited; Canva Trading Pty Ltd; Fusion Books Pty LtdCanva group: AUD 792,000 in penalties for late annual financial reports AustraliaDisclosure and reporting obligations €485,086

Four Australian companies of the Canva group did not lodge their financial reports for the 2024 financial year with ASIC by the due date of 30 April 2025; the consolidated report followed only on 27 March 2026. ASIC issued an infringement notice of allegedly AUD 198,000 to each company (AUD 792,000 in total); the notices were paid, which is not an admission of guilt.

What organisations can take from it

Even fast-growing technology groups must monitor the reporting deadlines of every single group company.

Relevance to training and awareness

Lodgement deadlines for the financial reports of all group companies

Authority / court
Australian Securities and Investments Commission (ASIC)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
s 319(1) Corporations Act 2001 (Cth); Bußgeldbescheide nach s 1317DAM
Action
Fine
Status of proceedings
final
Sector
Telecoms, IT and software
Published
6 May 2026

Original amount 792,000 AUD, converted at the ECB reference rate of 28 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Apr 2026 Compensa Towarzystwo Ubezpieczeń S.A. Vienna Insurance GroupCompensa: PLN 8.5m for inadequate motor third-party liability premiums PolandOrganisational requirements €2m

The KNF fined the insurer Compensa PLN 8,500,000 because, in motor third-party liability insurance (class 10) in 2022 to 2024, it set premiums that were insufficient to cover all obligations under the contracts and the costs of its insurance business. The decision is not final.

What organisations can take from it

Insurers must price premiums so that they cover at least all contractual obligations and operating costs, and review this regularly.

Relevance to training and awareness

Adequate premium pricing in insurance

Authority / court
Komisja Nadzoru Finansowego (KNF)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Art. 33 Abs. 2 ustawa z dnia 11 września 2015 r. o działalności ubezpieczeniowej i reasekuracyjnej
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance

Original amount 8,500,000 PLN, converted at the ECB reference rate of 27 Apr 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Apr 2026 Colônia dos Pescadores Z-12 do Médio Rio DoceFishers' colony Z-12: BRL 7.18m CGU fine over fraud involving Renova compensation BrazilBribery and corruption €1.23m

The CGU imposed on the Colônia dos Pescadores Z-12 do Médio Rio Doce a fine of BRL 7,180,921.47 and extraordinary publication of the decision. Acting together with others, the association had falsified its members' applications for entry in the fishing register (RGP) and backdated records and had interfered with the federal fisheries office in Espírito Santo, so that false data found their way into official documents and compensation from the Fundação Renova, together with lawyers' fees, was paid out without entitlement (Art. 5 II, III and V Lei 12.846/2013).

Relevance to training and awareness

Falsified documents submitted to authorities to obtain compensation

Authority / court
Controladoria-Geral da União (CGU)
Area of law
Bribery and corruption
Legal basis
Lei 12.846/2013, Art. 5 II, III und V, Art. 6 I und II, Art. 14; Decreto 11.129/2022, Arts. 19, 22 und 23
Action
Fine
Status of proceedings
unknown
Sector
Food and agriculture
Liability of senior managers
Measures against individuals are not set out here.
Published
5 May 2026

Original amount 7,180,921.47 BRL, converted at the ECB reference rate of 24 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Apr 2026 White Ray Oakleigh Pty Ltd (Ray White Oakleigh)Federal Court: 600,000 AUD against former operator of Ray White Oakleigh for underquoting AustraliaMisleading advertising and pricing €366,010

Following action by Consumer Affairs Victoria (the consumer protection regulator of the state of Victoria), the Federal Court of Australia ordered White Ray Oakleigh Pty Ltd, former operator of the Ray White Oakleigh agency, to pay 600,000 AUD because between February 2022 and November 2023 it advertised nine properties well below market value and at prices it did not itself expect to achieve (underquoting). According to the regulator, the agency agreements often provided for considerably higher commission on proceeds above the reserve price, and vendors were persuaded to lower their reserves after signing; text messages between the agents showed that they expected considerably higher prices. The court found misleading or deceptive conduct and false or misleading representations.

What organisations can take from it

Prices in property advertising must reflect the agent's genuine estimate; commission models that reward bait pricing are a compliance risk in their own right.

Relevance to training and awareness

Truthful price information in property advertising (underquoting)

Authority / court
Consumer Affairs Victoria / Federal Court of Australia
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Irreführendes Verhalten sowie falsche oder irreführende Angaben (Vorschriften in der Mitteilung nicht genannt)
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Culpability
intentional
Mitigating circumstances
The company admitted the conduct and cooperated with the regulator in the court proceedings; it has not operated the agency since 2025.
Published
24 Apr 2026

Original amount 600,000 AUD, converted at the ECB reference rate of 24 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Apr 2026 Anwaltskanzlei aus Hamilton (anonymisiert)Hamilton law firm: 60,000 NZD fine for anti-money laundering breaches New ZealandInternal controls €30,092

Between March 2022 and March 2025 a Hamilton law firm repeatedly breached the AML/CFT Act: it lacked a proper risk assessment, an implemented anti-money laundering programme and adequate records. It also failed to respond, or responded only in part, to information notices from the Department of Internal Affairs (DIA, the AML/CFT supervisor for law firms), thereby obstructing its investigators. After the firm pleaded guilty, the court imposed a fine of 60,000 NZD, taking the firm's size and financial capacity into account.

What organisations can take from it

Even small law firms must actually implement their risk assessment, AML programme and record keeping and answer supervisory information requests in full.

Relevance to training and awareness

Anti-money laundering duties in law firms and cooperation with the supervisor

Authority / court
Strafgericht, in der Quelle nicht benannt (Anklage: Department of Internal Affairs)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
Anti-Money Laundering and Countering Financing of Terrorism Act 2009
Action
Fine
Status of proceedings
unknown
Sector
Other
Culpability
intentional
Liability of senior managers
According to the Department of Internal Affairs, the firm's partners, as lawyers, also had professional obligations to uphold the law.
Published
24 Apr 2026

Original amount 60,000 NZD, converted at the ECB reference rate of 24 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Apr 2026 12066424 Canada Inc.Temporary staffing agency: CA$100,000 over unpaid wages Canada, ONMinimum wage and undeclared work €62,555

Following complaints, the labour inspectorate found, among other things, outstanding minimum wages at the temporary staffing agency in Leamington; an audit for 2022 showed that hundreds of employees were owed a total of CA$234,212 in regular wages, public holiday pay and vacation pay. The company did not comply with the 2023 orders to pay; in proceedings held in its absence, the court imposed CA$100,000 on the company (plus victim fine surcharge).

What organisations can take from it

Companies that ignore regulatory orders to pay outstanding wages risk a substantial fine.

Authority / court
Provincial Offences Court Windsor (Ermittlung: Ontario Ministry of Labour, Immigration, Training and Skills Development)
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
Employment Standards Act, 2000 (Ontario), ss. 103(8), 106, 132, 136
Action
Fine
Status of proceedings
unknown
Sector
Other
Liability of senior managers
Measures against individuals are not reported here.
Published
3 Jun 2026

Original amount 100,000 CAD, converted at the ECB reference rate of 23 Apr 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Apr 2026 PricewaterhouseCoopers Hong KongPwC Hong Kong: HKD 1bn compensation for Evergrande shareholders under SFC agreement Hong KongMarket abuse and insider dealing Other

Under an agreement with the Securities and Futures Commission (SFC, Hong Kong's securities regulator), PricewaterhouseCoopers Hong Kong has undertaken to set aside 1,000,000,000 HKD to compensate independent minority shareholders of China Evergrande Group; in return the regulator will take no further action, without any admission of liability. China Evergrande's audited revenue was allegedly overstated by 44.79% for 2019 and 69.03% for 2020, and PwC Hong Kong, as auditor, was allegedly concerned in the dissemination of false information, allegedly did not maintain its independence and allegedly acquiesced in management's manipulation of audit samples and site inspections.

What organisations can take from it

Auditors who tolerate manipulation of their audit procedures face a considerable risk of having to compensate investors.

Relevance to training and awareness

Independence and professional scepticism in auditing

Authority / court
Securities and Futures Commission (SFC)
Area of law
Capital markets and financial supervision · Market abuse and insider dealing
Legal basis
s. 277 SFO (Cap. 571) (Auffassung der SFC, von PwC HK nicht anerkannt)
Action
Other
Status of proceedings
final
Sector
Other
Published
23 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Apr 2026 Yau Yat Chuen Garden City Club LimitedRansomware via remote maintenance access: enforcement notice against private club Hong KongData breaches and data security Order

In a ransomware attack on the membership management system of Yau Yat Chuen Garden City Club Limited, a private, non-profit recreational club, reported on 31 October 2025, data of 9,045 current and former members and supplementary card holders were affected, including identity card or passport numbers. The attacker exploited a known vulnerability in outdated remote access software of the external service provider and reached the server, which had been left logged in, without further authentication; antivirus software and firewall were outdated, and personal data had been kept longer than necessary. In its investigation report published on 23 April 2026 the PCPD (Privacy Commissioner for Personal Data, Hong Kong's data protection authority) found breaches of DPP 4(1) and DPP 2(2) and served an enforcement notice.

What organisations can take from it

Service providers' remote maintenance access belongs in an organisation's own security concept: current software, additional authentication and no servers left permanently logged in.

Relevance to training and awareness

Service providers' remote access, patch management and retention periods

Authority / court
Privacy Commissioner for Personal Data (PCPD), Hongkong
Area of law
Data protection · Data breaches and data security
Legal basis
Personal Data (Privacy) Ordinance, Data Protection Principles 4(1) und 2(2); Enforcement Notice
Action
Order
Status of proceedings
unknown
Sector
Other
Published
23 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

22 Apr 2026 Keytrade Bank (belgische Zweigniederlassung der Arkea Direct Bank SA)Keytrade Bank: €250,000 for faulty appropriateness warnings in online trading BelgiumOrganisational requirements €250,000

Because of an IT problem, Keytrade Bank displayed the same warning for every order from 27 December 2023 to 13 March 2024, regardless of the complexity of the instrument and the client's known level of knowledge. In the view of the FSMA (Belgian Financial Services and Markets Authority), the bank thereby breached the rules on clear client information and on the appropriateness assessment, including for 81,416 transactions in non-complex instruments, 1,081 transactions in complex instruments without asking for knowledge and experience and 4,542 transactions where the required warning of inappropriateness was missing. The bank refunded losses of affected clients and pays 250,000 EUR under the settlement.

What organisations can take from it

Mandatory warnings in online brokerage must differentiate by product and client profile; changes to this logic need testing and ongoing monitoring.

Authority / court
Autorité des services et marchés financiers / Autoriteit voor Financiële Diensten en Markten (FSMA) – Comité de direction (règlement transactionnel)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Art. 27bis § 1 und Art. 27ter §§ 3 und 5 Gesetz vom 2. August 2002; Art. 71 § 3 Gesetz vom 2. August 2002
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
The bank sold affected complex positions, refunded losses and informed the clients.

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

21 Apr 2026 Industrial Chemicals LimitedIndustrial Chemicals: 3.8 million GBP after caustic soda burns – one leg amputated United KingdomWorkplace safety and accidents €4.37m

In 2019, an employee stepped into a puddle of caustic soda; his safety boots offered no protection, and his leg had to be amputated below the knee. In 2022, another worker suffered chemical burns during manual decanting. The Health and Safety Executive (HSE) found leaking pipes and valves, a lack of maintenance, no risk assessment for decanting and untested safety footwear; fine of 3.8 million GBP plus 124,748 GBP in costs. According to the annual accounts filed with the UK companies register for financial year 2024, the company had around 469 employees.

What organisations can take from it

Leaks of hazardous substances are not a normal state of affairs – maintenance, spill management and tested protective equipment go hand in hand.

Relevance to training and awareness

Handling corrosive hazardous substances and PPE

Authority / court
Health and Safety Executive (Southwark Crown Court)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Control of Substances Hazardous to Health Regulations 2002, reg. 7(1)
Action
Fine
Status of proceedings
final
Sector
Chemicals and pharmaceuticals
Employees
250 to 999
Published
24 Apr 2026

Original amount 3,800,000 GBP, converted at the ECB reference rate of 21 Apr 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

21 Apr 2026 Unternehmen (Anrufe zur Schadensregulierung), UK (anonymisiert)ICO: enforcement notice against a UK company over claims management calls without consent United KingdomMarketing and consent Order

The ICO issued an enforcement notice to a UK company. The ICO found that the company had instigated calls about claims management services without the consent of the people called. Under regulation 21A of PECR such calls are only permitted with prior consent; the ICO also found a breach of regulation 24. The notice is an enforcement notice and does not impose a fine.

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Marketing and consent
Legal basis
Regulations 21A und 24 PECR; section 40 DPA 1998
Action
Order
Status of proceedings
unknown
Sector
Financial services and insurance

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Apr 2026 flatexDEGIRO SEBaFin fines flatexDEGIRO €1m for late ad hoc disclosure of special audit findings GermanyDisclosure and reporting obligations €1m

On 20 April 2026 BaFin (German Federal Financial Supervisory Authority) imposed a fine of 1,000,000 EUR on flatexDEGIRO SE. At the end of 2022, the company had not published the results of a special audit under § 44 KWG (German Banking Act) at flatexDEGIRO Bank AG, in which BaFin had identified deficiencies in business organisation, without delay as an ad hoc announcement, but only later as a press release. The fine is final.

What organisations can take from it

Supervisory findings can also be inside information; a press release does not replace an ad hoc announcement.

Relevance to training and awareness

Assessing supervisory audit findings as potential inside information

Authority / court
Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 17 Abs. 1 UAbs. 1 MAR (Verordnung (EU) Nr. 596/2014)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
30 Apr 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Apr 2026 Arrowstreet Capital, Limited PartnershipAFM: €297,000 fine for Arrowstreet Capital over incorrect short position reports NetherlandsDisclosure and reporting obligations €297,000

On 20 April 2026 the Autoriteit Financiële Markten (AFM, Dutch Authority for the Financial Markets) fined the US asset manager Arrowstreet Capital, Limited Partnership 297,000 EUR because, between July 2020 and November 2024, an error in its calculation method led it to report its net short positions in Just Eat Takeaway.com and Galapagos to the AFM too low on 101 occasions, 85 of which also breached the public disclosure obligation. Because the firm reported the error itself, corrected it quickly, cooperated fully and took measures against recurrence, the AFM reduced the base amount by 30%; the simplified settlement brought a further 15% reduction, and the matter is closed.

What organisations can take from it

Calculation methods used for reporting obligations should be validated regularly; self-reporting after discovering an error noticeably lowers the fine.

Relevance to training and awareness

Correct calculation and reporting of net short positions

Authority / court
Autoriteit Financiële Markten (AFM)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 5 Abs. 1 und Art. 6 Abs. 1 Verordnung (EU) Nr. 236/2012 (Leerverkaufsverordnung, SSR)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Self-reporting, prompt correction, full cooperation and measures against recurrence (−30% on the base amount); simplified settlement (−15%).
Published
22 Apr 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Apr 2026 Sapia Partners LLPFCA: Public censure for Sapia Partners over lack of segregation for client money United KingdomOrganisational requirements Reprimand or warning

The FCA publicly censured Sapia Partners LLP. Sapia was responsible for client money accounts operated in connection with its appointed representative, a wealth manager, but the FCA found that from 2014 to 2020 it did not ensure effective segregation between those making payments and those reconciling the accounts. About £150 million was deposited into the accounts in that period, exposing clients to a risk of loss. Sapia agreed to a voluntary payment of £19,637,950 to that representative's clients; for this reason the FCA did not impose a fine, which it said would otherwise have been £7,412,000 (after discount).

Authority / court
Financial Conduct Authority (FCA)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
FCA Principle 10; CASS 7.12.2R bzw. CASS 7.3.2R; section 205 FSMA 2000
Action
Reprimand or warning
Status of proceedings
final
Sector
Financial services and insurance

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Apr 2026 General Electric CompanyDDTC: USD 36 million against General Electric for technical data exports to China USAExport control and dual-use goods €30.5m

The DDTC settled with General Electric Company for a civil penalty of USD 36 million for ITAR violations: unauthorised exports of technical data to the People's Republic of China, breaches of authorisation provisos, unauthorised exports of defence articles and failure to report material changes to its ITAR registration. USD 18 million is suspended for approved compliance measures and USD 18 million is payable in three instalments. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Changes to one's own ITAR registration must also be reported and belong in the compliance calendar.

Relevance to training and awareness

ITAR registration and control of technical data with a China link

Authority / court
U.S. Department of State, Directorate of Defense Trade Controls (DDTC)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Arms Export Control Act § 38 (22 U.S.C. § 2778); ITAR, 22 C.F.R. Parts 120–130, insbesondere Part 127 und § 128.11
Action
Fine
Status of proceedings
final
Sector
Defence and security
Employees
10,000 or more
Mitigating circumstances
The allegations are based on facts that the company itself disclosed to the DDTC.

Original amount 36,000,000 USD, converted at the ECB reference rate of 17 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Apr 2026 Medirex s. r. o.; KLINICKÁ BIOCHÉMIA s.r.o.; Unilabs Slovensko, s. r. o.; synlab slovakia s. r. o.; Asociácia laboratóriíLaboratory cartel: 14.6 million EUR and procurement bans against diagnostic laboratories SlovakiaCartels and collusion €14.6m

Four laboratories and their association coordinated negotiations on prices with health insurers, coordinated in tenders, exchanged sensitive information and allocated customers. At first instance, the Protimonopolný úrad Slovenskej republiky (Antimonopoly Office of the Slovak Republic, PMÚ SR) imposed 14,551,800 EUR and three-year procurement bans; Unilabs received a substantially reduced fine as leniency applicant and under a settlement.

What organisations can take from it

Common negotiating positions towards payers via an association are a cartel – association meetings need minutes and a review of the agenda.

Relevance to training and awareness

Information exchange among competitors and association work

Authority / court
Protimonopolný úrad Slovenskej republiky (PMÚ SR)
Area of law
Competition law · Cartels and collusion
Legal basis
Slowakisches Wettbewerbsschutzgesetz (Kartellverbot)
Action
Fine
Status of proceedings
unknown
Sector
Healthcare
Culpability
intentional
Mitigating circumstances
Unilabs: leniency reduction (50%) and settlement (a further 30%).
Published
12 May 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Apr 2026 Cream della Cream Switzerland GmbH und Philipp Plein International AGFDPIC ruling: Philipp Plein and Cream della Cream ignored objections to advertising SwitzerlandMarketing and consent Order

Both companies continued to use e-mail addresses and telephone numbers from online purchases for advertising, although data subjects had objected – in some cases after deletion had been confirmed. The Swiss Federal Data Protection and Information Commissioner (Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter, EDÖB) ordered the processing for advertising to cease and the data to be deleted on request.

What organisations can take from it

An objection to advertising must take effect across all systems – a confirmed deletion followed by further advertising violates the principle of good faith.

Relevance to training and awareness

Handling objections to advertising and deletion requests

Authority / court
Eidgenössischer Datenschutz- und Öffentlichkeitsbeauftragter (EDÖB)
Area of law
Data protection · Marketing and consent
Legal basis
DSG Art. 6, Art. 30 Abs. 2 lit. b, Art. 31
Action
Order
Status of proceedings
final
Sector
Retail and e-commerce
Published
26 Jun 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Apr 2026 Synadis Bio, Greenweez (mit Carrefour SA), ITM Entreprises (mit Les Mousquetaires), Les Comptoirs de la BioFrance: 12.67 million EUR over allocation of distribution channels for organic food FranceCartels and collusion €12.7m

Through the association Synadis Bio, market participants ensured for more than seven years that organic brands were not sold simultaneously in specialist organic shops and in conventional supermarkets, in order to prevent price comparisons (decision 26-D-05). Fines: Synadis Bio 10 million EUR, Greenweez/Carrefour 1.85 million EUR, ITM 740,000 EUR, Les Comptoirs de la Bio 80,000 EUR.

What organisations can take from it

Association decisions that tie members to particular distribution channels amount to market sharing – even if they are justified as a quality or positioning policy.

Relevance to training and awareness

Association rules to foreclose distribution channels

Authority / court
Autorité de la concurrence
Area of law
Competition law · Cartels and collusion
Legal basis
Art. L.420-1 Code de commerce, Art. 101 Abs. 1 AEUV; Bußgeldbemessung nach Art. L.464-2 Code de commerce
Action
Fine
Status of proceedings
under appeal
Sector
Food and agriculture
Published
16 Apr 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Apr 2026 Fullgevity OÜ (vormals Zahnarztpraxis unter Inhabernamen, anonymisiert)Fullgevity (dental clinic) must reorganise data processing in Invisalign treatment EstoniaData processors Order

The starting point was a complaint about incomplete disclosure of patient data; the clinic left several requests from the supervisory authority unanswered. The Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate, AKI) ordered it to revise its contracts with Align Technology (Invisalign) with regard to the GDPR roles (Art. 26/28 GDPR), to adapt the consent form and the privacy notices in accordance with Art. 7, 9, 13 and 14 GDPR and to publish them in Estonian; non-compliance is subject to a penalty payment of 1,000 EUR per item.

What organisations can take from it

Anyone passing patient data on to manufacturers or platforms must clarify roles, contracts and consents properly in advance – and respond to supervisory requests on time.

Relevance to training and awareness

Consent and transparency for health data; cooperation with the supervisory authority

Authority / court
Andmekaitse Inspektsioon (AKI)
Area of law
Data protection · Data processors
Legal basis
§ 56 Abs. 1 IKS; Art. 58 Abs. 2 lit. d DSGVO i. V. m. Art. 5 Abs. 1 lit. a, 7, 9, 13, 14, 26, 28 DSGVO
Action
Order
Status of proceedings
unknown
Sector
Healthcare

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Apr 2026 Automobile Association Developments Limited (AA Driving School, BSM Driving School)AA and BSM driving schools: 4.2 million GBP for drip pricing – CMA's first consumer fine United KingdomMisleading advertising and pricing €4.83m

For online bookings, the driving schools only showed a mandatory booking fee at checkout instead of in the initial price. Following an admission and settlement, the CMA imposed a penalty of 4.2 million GBP (40 % discount on 7 million GBP) and ordered refunds of more than 760,000 GBP to more than 80,000 customers. According to the annual accounts filed with the UK companies register for financial year 2026, the company had around 6,776 employees.

What organisations can take from it

Mandatory fees must be included from the very first price – in the United Kingdom, the CMA has been able to impose fines for this itself since 2025.

Relevance to training and awareness

Price disclosures and mandatory fees at online checkout

Authority / court
Competition and Markets Authority (CMA)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Digital Markets, Competition and Consumers Act 2024
Action
Fine
Status of proceedings
final
Sector
Other
Employees
1,000 to 9,999
Mitigating circumstances
Admission and early settlement (40 % discount).
Published
15 Apr 2026

Original amount 4,200,000 GBP, converted at the ECB reference rate of 15 Apr 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Apr 2026 Liquidnet Canada Inc.Liquidnet Canada: confidential order data passed on to unauthorised persons Canada, ONOrganisational requirements €369,572

The operator of alternative trading systems passed on confidential order and trading information from its fixed income and equity platforms to unauthorised employees, lacked adequate safeguards and was initially not forthcoming with the regulator. Sanctions: administrative penalty of 600,000 CAD, 75,000 CAD in costs, a reprimand and an external review.

What organisations can take from it

Technically restrict access rights to confidential client data and review them regularly – and make complete reports to the regulator.

Relevance to training and awareness

Need-to-know principle and protection of confidential trading data

Authority / court
Capital Markets Tribunal (Ontario) auf Antrag der Ontario Securities Commission
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
National Instrument 21-101, s. 5.10(1)-(3); Securities Act (Ontario) ss. 127(1), 127.1
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Cooperation, self-report, no prior record

Original amount 600,000 CAD, converted at the ECB reference rate of 15 Apr 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

15 Apr 2026 Öffentliches Kommunalunternehmen (in der Mitteilung nicht namentlich genannt)Municipal company: 6,000 EUR for permanent GPS tracking of company vehicles SloveniaEmployee data €6,000

A provider of public utility services used GPS transmitters in company vehicles to record employees’ location data permanently and without cause, without defining a purpose, carrying out a balancing of interests or providing sufficient information. The Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia, IP) imposed 6,000 EUR on the company.

What organisations can take from it

GPS data are not suitable for performance monitoring – consider less intrusive means before introduction and inform employees in advance.

Relevance to training and awareness

GPS tracking and employee data protection

Authority / court
Informacijski pooblaščenec Republike Slovenije (IP)
Area of law
Data protection · Employee data
Legal basis
Art. 5 und Art. 6 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Energy and utilities
Liability of senior managers
Measures against individuals are not reported here.
Published
15 Apr 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

14 Apr 2026 Sun Shine Decoration Limited, Wai Tat Aluminium & Glass Engineering Company LimitedHong Kong: HKD 730,000 in fines for two contractors after fatal fall Hong KongWorkplace safety and accidents €79,028

The court fined Sun Shine Decoration HKD 500,000 and Wai Tat Aluminium & Glass Engineering HKD 230,000, HKD 730,000 in total, for breaches of the Factories and Industrial Undertakings Ordinance and the Construction Sites (Safety) Regulations. The case arose from a fatal accident on 16 May 2025 at a house in Kwu Tung, in which a worker fell into the swimming pool of the neighbouring house while fixing insulation boards on a metal canopy.

What organisations can take from it

Work on roofs and canopies requires fall protection planned in advance, even at residential houses, and every company involved can be held liable for breaches.

Relevance to training and awareness

Fall protection when working on roofs and canopies

Authority / court
Fanling Magistrates' Courts, Hongkong (Anklage: Labour Department)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Factories and Industrial Undertakings Ordinance; Construction Sites (Safety) Regulations
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Published
14 Apr 2026

Original amount 730,000 HKD, converted at the ECB reference rate of 14 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

14 Apr 2026 Gyldendal A/SGyldendal: fine for storing data of 685,000 former book club members for years DenmarkData protection Fine

The publisher kept data of around 685,000 former book club members in a ‘passive database’, in around 395,000 cases more than ten years after they had left, without any deletion rules. The Danish Data Protection Agency (Datatilsynet) had recommended a fine of 1 million DKK in 2022; the case was closed on 14 April 2026 with a fine notice whose amount is not stated in the source.

What organisations can take from it

‘Passive’ legacy data also needs a deletion concept – storage without a purpose is a separate infringement.

Authority / court
Anklagemyndigheden (Bødeforelæg) auf Anzeige der Datatilsynet
Area of law
Data protection
Legal basis
DSGVO Art. 5 Abs. 1 lit. e, Art. 5 Abs. 2
Action
Fine
Status of proceedings
final
Sector
Media and online platforms
Mitigating circumstances
Cooperative conduct; only two employees had access to the passive database; deletion after the supervisory visit.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

13 Apr 2026 Coastal PVA Technology, Inc.Coastal PVA: 1.7 million USD (suspended) for brushes sold to SMIC – without an export compliance programme USAExport control and dual-use goods €1.45m

The Californian manufacturer of PVA brushes for wafer cleaning sold goods worth around 400,000 USD on 18 occasions between 2021 and 2024 via two Chinese distributors to SMIC Beijing and SMIC North, both on the Entity List (the US export control list of restricted parties). The company had no formal export compliance rules; the penalty of 1.7 million USD is suspended for one year owing to limited ability to pay and will be waived if training and an internal audit are completed on time.

What organisations can take from it

Obtain a licence even for unlisted everyday goods (EAR99) when the end customer is on the Entity List – without end-customer screening, routing sales through distributors does not help.

Relevance to training and awareness

Export controls for EAR99 goods and deliveries via distributors

Missing or inadequate training played a role in the decision.

Authority / court
U.S. Department of Commerce, Bureau of Industry and Security (BIS)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Export Administration Regulations, 15 C.F.R. § 764.2(a), § 744.11
Action
Fine
Status of proceedings
final
Sector
Manufacturing and mechanical engineering
Culpability
negligent
Mitigating circumstances
Payment suspended owing to demonstrated limited ability to pay; deliveries stopped after notification by BIS (Bureau of Industry and Security).
Published
14 Apr 2026

Original amount 1,700,000 USD, converted at the ECB reference rate of 13 Apr 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Apr 2026 Koninklijke PostNL B.V.ACM: €6.9m fine for PostNL over late letter delivery in 2023 NetherlandsOther €6.92m

In 2023 PostNL delivered only 89.48% of letters with a five-day delivery obligation under the universal postal service on time, instead of the statutory 95%. The ACM (Autoriteit Consument & Markt, Dutch competition and consumer authority) rejected the force majeure argument based on the tight labour market and imposed a fine of 6,923,000 EUR.

What organisations can take from it

A company bearing a statutory service obligation must compensate for foreseeable staff shortages in good time; labour market conditions alone are not force majeure.

Authority / court
Autoriteit Consument & Markt (ACM)
Area of law
Other
Legal basis
Art. 16 Abs. 6 Postwet 2009 i. V. m. Art. 4a Postbesluit 2009
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Published
12 May 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Apr 2026 MM Flowers LimitedFlower supplier: leg amputated after roller deck accident – 134,000 GBP United KingdomWorkplace safety and accidents €153,837

While unloading stuck air cargo skids ahead of Valentine's Day 2023, an employee's leg became trapped in a 10 cm gap in the roller deck and was struck by a skid that slid forward; the leg had to be amputated. Employees had to free stuck loads by hand, and the gap had never been identified; fine of 134,000 GBP plus 4,908 GBP in costs. According to its annual accounts (financial year to August 2025), the flower supplier had an average of 882 employees.

What organisations can take from it

Include everyday tasks such as freeing stuck loads in the risk assessment – especially for peak periods.

Authority / court
Peterborough Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2(1) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Food and agriculture
Employees
250 to 999
Published
13 Apr 2026

Original amount 134,000 GBP, converted at the ECB reference rate of 10 Apr 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Apr 2026 StubHub Holdings, Inc.FTC: StubHub refunds 10 million USD over ticket prices shown without mandatory fees USAMisleading advertising and pricing Disgorgement of profits

According to the FTC, StubHub displayed ticket prices on its website without clearly and conspicuously stating up front the total price including all mandatory fees. The court order relies on the new FTC rule against unfair or deceptive fees and requires StubHub to pay 10 million USD for consumer refunds. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Since the FTC fees rule, the first price shown for tickets must include all mandatory fees.

Relevance to training and awareness

Total price display including mandatory fees (drip pricing)

Authority / court
Federal Trade Commission (FTC)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Section 5 FTC Act; Rule on Unfair or Deceptive Fees (16 C.F.R. Part 464)
Action
Disgorgement of profits
Status of proceedings
final
Sector
Media and online platforms
Published
9 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Apr 2026 Electro Optic Systems Holdings LimitedElectro Optic Systems: 4 million AUD for late correction of revenue guidance AustraliaDisclosure and reporting obligations €2.41m

The Federal Court of Australia, on application by the Australian Securities and Investments Commission (ASIC, Australia's corporate, markets and financial services regulator), imposed an allegedly agreed penalty of 4 million AUD on the listed manufacturer of defence, space and communications technology. By 25 July 2022 the company knew that its 2022 revenue was likely to fall materially short of its published guidance of at least 212.3 million AUD, but did not correct the guidance until 31 October 2022; the court found a continuing breach of the continuous disclosure obligation.

What organisations can take from it

Once it becomes apparent that published guidance will be materially missed, the correction must be disclosed without delay.

Relevance to training and awareness

Continuous disclosure: handling deviations from guidance and escalating them internally to those responsible for disclosure

Authority / court
Federal Court of Australia (auf Antrag der Australian Securities and Investments Commission, ASIC)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Corporations Act 2001 (Cth) s 674A(2) i. V. m. s 1317QA
Action
Fine
Status of proceedings
unknown
Sector
Defence and security
Liability of senior managers
Measures against individuals are not set out here.
Published
9 Apr 2026

Original amount 4,000,000 AUD, converted at the ECB reference rate of 9 Apr 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Apr 2026 Ara 1857 S.p.A.IVASS fines Ara 1857 €900,000 for failing to carry out required remedies ItalyOrganisational requirements €900,000

IVASS (Italian insurance supervisor) imposed a fine of 900,000 EUR on Ara 1857 S.p.A. under Art. 310(1) of the Private Insurance Code (CAP). The company had not adequately implemented the preventive and corrective measures required by the supervisor, so serious shortcomings persisted in corporate governance, remuneration systems, risk management and control, and in the current and forward-looking solvency assessment. According to IVASS sanctions statistics, the company had already received a fine of 380,000 EUR in 2023.

What organisations can take from it

Supervisory requirements are not recommendations: failing to make the required corrections is in itself a breach that attracts a heavy sanction.

Relevance to training and awareness

Implementing supervisory remedial measures

Authority / court
IVASS (Istituto per la Vigilanza sulle Assicurazioni)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Art. 188 Abs. 3-bis lit. d, Art. 30, 30-bis, 30-ter, 30-quater, 30-septies und 310 Abs. 1 D.Lgs. 209/2005 (CAP); IVASS-Verordnung 38/2018
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Repeat case
yes
Published
29 May 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Apr 2026 Arbeitgeber (in der Mitteilung nicht namentlich genannt)Slovenia: 71,474 EUR for covert monitoring of employees using spyware SloveniaEmployee data €71,474

An employer installed the software Spyrix Employee Monitoring on the work computers of individual employees, which for months recorded screen content, audio and even private e-mails and conversations without informing the employees. The supervisory authority, the Informacijski pooblaščenec (Information Commissioner of the Republic of Slovenia, IP), imposed 71,474 EUR on the company.

What organisations can take from it

Covert employee monitoring by software is practically never permissible – IT and managers must know this before tools are installed.

Relevance to training and awareness

Permissible monitoring of employees and IT use

Authority / court
Informacijski pooblaščenec Republike Slovenije (IP)
Area of law
Data protection · Employee data
Legal basis
Art. 5 und Art. 6 Abs. 1 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Culpability
intentional
Liability of senior managers
Measures against individuals are not reported here.
Published
9 Apr 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 Apr 2026 Alquiler Seguro, S.A.U.Consumer ministry: €3.6m fine on Alquiler Seguro over charges imposed on tenants SpainConsumer protection and online retail €3.6m

The Ministerio de Derechos Sociales, Consumo y Agenda 2030 (Spanish Ministry of Social Rights, Consumer Affairs and 2030 Agenda) imposed fines totalling 3,600,902 EUR (1,000,000, 990,900, three times 500,000, 100,001 and 10,001 EUR) on the rental agency Alquiler Seguro for six very serious and one serious breach of tenants' consumer rights. Among other things, the company had required tenants to pay for a tenant service as management and contract costs, to take out home insurance for the landlord's benefit and to bear debt collection and court costs, used a clause allowing reporting to debtor registers and excluded the right of withdrawal. The clauses must be removed and the sanction published.

What organisations can take from it

Agents must not pass management and signing costs on to tenants through mandatory services or add-on contracts; standard clauses in tenancy agreements should be reviewed regularly.

Relevance to training and awareness

Unfair terms and charges in tenancy agreements

Authority / court
Ministerio de Derechos Sociales, Consumo y Agenda 2030
Area of law
Consumer protection and online retail
Legal basis
Verbraucherschutzrecht (in der Pressemitteilung nicht einzeln zitiert); Ley 12/2023, de 24 de mayo, por el derecho a la vivienda (Verbot, Verwaltungs- und Vertragskosten auf Mieter abzuwälzen)
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Published
8 Apr 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

8 Apr 2026 The Goldman Sachs Group, Inc.Goldman Sachs Group: SEK 1.5m for late major shareholding notifications SwedenDisclosure and reporting obligations €139,095

Finansinspektionen (FI, Swedish Financial Supervisory Authority) imposed an administrative fine of 1,500,000 SEK on The Goldman Sachs Group, Inc. because six crossings of the 5% threshold for shares and voting rights in Lundin Mining Corporation, Samhällsbyggnadsbolaget i Norden AB and Scandic Hotels Group AB were notified between 1 and 104 trading days late; a further transaction (Lundin Mining, 27 March 2025) was closed without sanction. FI took into account that a professional market participant had committed breaches in several issuers and saw no grounds for waiving the fine.

What organisations can take from it

Group-wide shareholding monitoring must detect crossings of national notification thresholds on the day they occur and report them on time.

Relevance to training and awareness

Major shareholding notifications (flagging) when thresholds are crossed

Authority / court
Finansinspektionen (FI)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
6 kap. 3 a § första stycket 4 lagen (1991:980) om handel med finansiella instrument (Flaggningspflicht)
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Employees
10,000 or more
Published
10 Apr 2026

Original amount 1,500,000 SEK, converted at the ECB reference rate of 8 Apr 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

7 Apr 2026 Wspólnota Mieszkaniowa K. (Wohnungseigentümergemeinschaft, im Bescheid pseudonymisiert)Homeowners’ association: 4,852 PLN – misdirected statement not notified PolandIncident reporting obligations €1,135

Acting as processor, the property management company sent an owner’s statement of service charges to an unauthorised person. The association considered notification unnecessary because only ‘ordinary’ data of one member were affected, and maintained this position in the proceedings; the UODO (Poland’s data protection authority) imposed 4,852 PLN.

What organisations can take from it

Small controllers must also assess and notify data breaches by their service providers – ‘only one data subject’ is no ground for exemption.

Relevance to training and awareness

Recognising misdirected mail as a data breach – including at service providers

Authority / court
Prezes Urzędu Ochrony Danych Osobowych (UODO)
Area of law
Information security and cyber · Incident reporting obligations
Legal basis
Art. 33 Abs. 1 DSGVO
Action
Fine
Status of proceedings
final
Sector
Construction and real estate

Original amount 4,852 PLN, converted at the ECB reference rate of 7 Apr 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Apr 2026 LPP S.A.LPP: PLN 15m for flawed consolidated accounts after the outbreak of war in Ukraine PolandDisclosure and reporting obligations €3.5m

The KNF imposed a fine of PLN 15,000,000 on the listed issuer LPP for breaches of disclosure obligations in its consolidated financial statements for 2021/2022 and 2022/2023. LPP had wrongly recognised impairments of PLN 608m on fixed assets and inventories resulting from the Russian attack on Ukraine of 24 February 2022 as an adjusting event in the 2021/2022 statements and did not correct the comparative figures in the following year, although the authority had repeatedly recommended this and the auditor had issued qualifications. The decision is not final.

What organisations can take from it

Issuers should promptly act on supervisory recommendations and auditor qualifications on accounting treatment rather than carrying errors forward.

Relevance to training and awareness

Correct accounting for events after the reporting period

Authority / court
Komisja Nadzoru Finansowego (KNF)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 56 Abs. 1 Nr. 2 lit. a ustawa o ofercie publicznej i. V. m. § 3 Abs. 1 und 3 sowie § 71 Abs. 1 Nr. 3 lit. b Verordnung des Finanzministers über laufende und periodische Informationen; IAS 2, 8, 10 und 36
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce

Original amount 15,000,000 PLN, converted at the ECB reference rate of 2 Apr 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Apr 2026 Nexans France, Nexans SA; Sonepar-Gruppe (Sonepar France Distribution u. a.)Nexans and Sonepar: EUR 6.5 million for exclusive import rights in overseas territories FranceCartels and collusion €6.5m

From 13 May 2015 to 20 November 2023, Nexans granted companies of the Sonepar group exclusive rights to import Nexans cables into La Réunion, Mayotte, French Guiana, Martinique and Guadeloupe, which Art. L. 420-2-1 of the Code de commerce (French Commercial Code) prohibits for the overseas territories. In a settlement procedure the Autorité de la concurrence (French Competition Authority) imposed EUR 3 million on Nexans France (jointly with Nexans SA) and EUR 3.5 million on the Sonepar companies involved, EUR 6.5 million in total. It is the authority’s first decision based on a report by a person with protected whistleblower status.

What organisations can take from it

Exclusive import or distribution rights for the French overseas territories are prohibited in principle and should be reviewed before any contract is signed.

Relevance to training and awareness

Exclusive distribution and import rights; whistleblowers as a source of detection

Authority / court
Autorité de la concurrence
Area of law
Competition law · Cartels and collusion
Legal basis
Art. L. 420-2-1 Code de commerce; Vergleichsverfahren nach Art. L. 464-2 III Code de commerce
Action
Fine
Status of proceedings
under appeal
Sector
Manufacturing and mechanical engineering
Mitigating circumstances
Settlement procedure (transaction): the companies did not contest the objections.
Published
2 Apr 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Apr 2026 Rickman Trade OÜ (mit Rickman Trade Latvijas filiāle), „EUGESTA“ SIA, SIA „Innocent PRO“Latvia: 512,100 EUR for resale price maintenance on JURA coffee machines LatviaCartels and collusion €512,100

According to the decision of the Konkurences padome (Latvian Competition Council), the distributor Rickman Trade set the resale prices for JURA coffee machines for retailers, while EUGESTA and Innocent PRO monitored and maintained those prices at retail level in order to secure a uniform price level in Latvia. Fines: Rickman Trade OÜ with its Latvian branch 255,938.04 EUR, EUGESTA 232,636.20 EUR and Innocent PRO, after a 10 % settlement reduction, 23,525.93 EUR, totalling 512,100.17 EUR.

What organisations can take from it

Suppliers and distributors may recommend resale prices but must neither impose them nor police compliance with them.

Relevance to training and awareness

Prohibition of resale price maintenance in distribution

Authority / court
Konkurences padome (Lettischer Wettbewerbsrat)
Area of law
Competition law · Cartels and collusion
Legal basis
Art. 11 Abs. 1 Konkurences likums (Wettbewerbsgesetz)
Action
Fine
Status of proceedings
final
Sector
Retail and e-commerce
Mitigating circumstances
Innocent PRO received a 10 % reduction following a settlement offer.
Published
7 May 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 Apr 2026 MLU B.V. (Rechtsnachfolgerin der Ridetech International B.V., Anbieterin der Yango-App)Yango taxi app: 100 million EUR for transferring data to Russia NetherlandsInternational data transfers €100m

Amsterdam-based Ridetech offered the ride-hailing app Yango in Finland and Norway and transferred data of drivers and customers to the group companies Yandex.Taxi LLC and Yandex LLC in Russia without demonstrating appropriate safeguards. The Autoriteit Persoonsgegevens (Dutch Data Protection Authority, AP) imposed 100 million EUR on the legal successor and prohibited further transfers to Russia.

What organisations can take from it

Transfers to states without legal protection against access by authorities can hardly be safeguarded – group structures with such locations need data localisation in the EU.

Authority / court
Autoriteit Persoonsgegevens (AP)
Area of law
Data protection · International data transfers
Legal basis
Art. 44, Art. 46 iVm Art. 5 Abs. 1 lit. a und Abs. 2 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

1 Apr 2026 IRE Pty Ltd (InspectRealEstate, Plattform 2Apply)2Apply operator IRE: order over excessive and unfair collection of renters’ data AustraliaData subject rights and transparency Order

The Privacy Commissioner found that the rental application platform 2Apply collected more personal information than necessary from March 2020 to March 2025, such as gender, student status, citizenship, visa expiry and previous living arrangements, and did so unfairly through design techniques such as “confirmshaming”, biased framing and bundled consent. The determination requires IRE to stop this collection within 60 days, engage an independent reviewer and report to the OAIC within twelve months on implementing the recommendations.

What organisations can take from it

Online forms may only request necessary data and must not push users into disclosure through design tricks.

Relevance to training and awareness

Data minimisation and fair design of online forms (dark patterns)

Authority / court
Office of the Australian Information Commissioner (OAIC)
Area of law
Data protection · Data subject rights and transparency
Legal basis
APP 3.2 und APP 3.5 (Privacy Act 1988 (Cth)); Feststellungen nach s 52(1A)
Action
Order
Status of proceedings
unknown
Sector
Telecoms, IT and software
Mitigating circumstances
IRE adapted its collection practices during the investigation without admitting a breach.
Published
22 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Mar 2026 XTB S.A.XTB: PLN 20m for deficient appropriateness checks in CFD sales PolandOrganisational requirements €4.66m

The KNF fined the brokerage XTB PLN 20,000,000 because, between January 2022 and September 2023, it did not properly assess clients' knowledge and experience, did not adequately define the target market for complex instruments such as CFDs, failed to identify possible conflicts of interest arising from the „lista HOT“ distributed to clients and gave clients unreliable information on CFD risks. At XTB's request the KNF reconsidered the case and upheld the decision on 28 August 2026.

What organisations can take from it

Experience with simple products is not enough to classify complex leveraged products such as CFDs as appropriate for a client.

Relevance to training and awareness

Appropriateness assessment and product governance for leveraged products

Authority / court
Komisja Nadzoru Finansowego (KNF)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Art. 34 Abs. 2 lit. a, Art. 48 und Art. 56 Abs. 1 Delegierte Verordnung (EU) 2017/565; § 37 Abs. 5 Nr. 6 i. V. m. § 31 Abs. 7 Verordnung des Finanzministers vom 30.05.2018; Art. 83c Abs. 2 und Abs. 4 Nr. 2 ustawa o obrocie instrumentami finansowymi
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance

Original amount 20,000,000 PLN, converted at the ECB reference rate of 30 Mar 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Mar 2026 Peken Global Limited (KuCoin)Peken Global (KuCoin): 500,000 USD and ban on US access without CFTC registration USAOrganisational requirements €435,388

On a complaint by the CFTC, the federal court in New York entered a consent order against the operator of the KuCoin crypto exchange, which is registered in the Turks and Caicos Islands. Peken Global had given US participants direct access to its trading system without being registered with the CFTC as a foreign board of trade; the court permanently prohibited this and imposed a fine of 500,000 USD. Disgorgement was waived because of the cooperation and the forfeiture in the parallel criminal case, in which Peken Global had pleaded guilty to operating an unlicensed money transmitting business. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Anyone giving US participants direct access to a foreign trading platform needs the appropriate CFTC registration or must effectively block such access.

Authority / court
U.S. District Court for the Southern District of New York (auf Klage der CFTC)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
CFTC Regulation 48.3 (17 C.F.R. § 48.3); Section 6c Commodity Exchange Act (7 U.S.C. § 13a-1)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Cooperation with the CFTC and in the criminal proceedings; because of the forfeiture ordered there, the CFTC did not seek disgorgement.
Published
30 Mar 2026

Original amount 500,000 USD, converted at the ECB reference rate of 30 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

30 Mar 2026 Energy Prices Direct LimitedICO: £160,000 fine for Energy Prices Direct over calls without TPS screening United KingdomMarketing and consent €184,325

The ICO fined Energy Prices Direct Limited, an energy switching broker, £160,000. The ICO found that the company had obtained contact details from public sources and list providers and did not screen them against the TPS/CTPS registers before making marketing calls. The legal basis is regulations 21 and 24 of PECR. Under the notice, timely payment reduces the amount by 20% to £128,000.

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Marketing and consent
Legal basis
Regulations 21 und 24 PECR; section 55A DPA 1998
Action
Fine
Status of proceedings
unknown
Sector
Energy and utilities

Original amount 160,000 GBP, converted at the ECB reference rate of 30 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Mar 2026 Oztures Trading Pty Ltd (Binance Australia Derivatives)Binance Australia Derivatives: 10 million AUD for misclassified retail clients AustraliaOrganisational requirements €5.98m

The Federal Court of Australia, on application by the Australian Securities and Investments Commission (ASIC, Australia's corporate, markets and financial services regulator), imposed a penalty of 10 million AUD because, between July 2022 and April 2023, the provider of crypto derivatives wrongly classified 524 retail clients – more than 85% of its Australian client base – as wholesale clients, depriving them of, among other things, a Product Disclosure Statement, a target market determination and a compliant internal dispute resolution system. The causes were deficient onboarding processes – such as a multiple-choice test that could be retaken without limit – and inadequate training and review; the affected clients suffered 8.66 million AUD in trading losses and paid 3.89 million AUD in fees.

What organisations can take from it

Classifications that remove client protections require robust evidence, trained staff and effective oversight – a knowledge test that can be retaken at will is no substitute for a proper assessment.

Relevance to training and awareness

Client classification (retail or wholesale) and verification of evidence during onboarding

Missing or inadequate training played a role in the decision.

Authority / court
Federal Court of Australia (auf Antrag der Australian Securities and Investments Commission, ASIC)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Corporations Act 2001 (Cth) ss 1012B(3)(a)(i) und (iii), 994B(1) und (2)(a), 912A(1)(a), (b), (f) und (g); Geldbuße nach s 1317G
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Repeat case
no
Mitigating circumstances
Full compensation of affected clients (around 13.1 million AUD) overseen by ASIC, cooperation in the investigation and the proceedings, admission of all contraventions; no previous court findings.
Published
27 Mar 2026

Original amount 10,000,000 AUD, converted at the ECB reference rate of 27 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Mar 2026 13010431 Canada Inc. (Necosmart)FINTRAC: 693,742 CAD against crypto service provider Necosmart over missing suspicious transaction reports CanadaSuspicious activity reports €434,295

The Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) imposed 693,742.50 CAD on the Edmonton money services business, which also exchanges virtual currencies, for five violations: repeated failure to file suspicious transaction reports, lack of written compliance policies, insufficient enhanced measures for high-risk transactions, lack of a risk assessment and incomplete records of occupation and transactions for crypto exchanges.

What organisations can take from it

Small crypto exchange offices need the same basic framework as banks: risk analysis, policies, enhanced scrutiny and reporting.

Relevance to training and awareness

Recognising and reporting grounds for suspicion in crypto exchange

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
Proceeds of Crime (Money Laundering) and Terrorist Financing Act, Part 1, und zugehörige Verordnungen
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Published
14 May 2026

Original amount 693,742.5 CAD, converted at the ECB reference rate of 27 Mar 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Mar 2026 Dinosaur Merchant Bank LimitedDinosaur Merchant Bank: 338,000 GBP – CFD trading without market abuse surveillance United KingdomOrganisational requirements €389,760

After a new order management system was introduced in June 2024, CFD transactions with an underlying value of around 3.05 billion USD were not captured by automated trade surveillance. The bank identified the error in October 2024 but only remedied it in May 2025; the Financial Conduct Authority (FCA) imposed 338,000 GBP after a 30% cooperation discount.

What organisations can take from it

With every system migration, check whether surveillance systems actually capture the new data flows.

Authority / court
Financial Conduct Authority (FCA)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Art. 16 Abs. 2 UK MAR; SYSC 6.1.1R; FCA Principle 3
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Full cooperation (30% discount); CFD business discontinued in May 2025.

Original amount 338,000 GBP, converted at the ECB reference rate of 27 Mar 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Mar 2026 Huws Gray LimitedBuilders' merchant Huws Gray: 2.2 million GBP after fatal conveyor accident United KingdomWorkplace safety and accidents €2.54m

At Herringswell sawmill in 2024 a labourer was crushed by a pack of timber weighing around three tonnes after a colleague started the conveyor without seeing him inside the conveyor framework. The company knew that workers were entering the danger zone – CCTV showed 19 occasions between 14 April and 23 May 2024 – but only put up stickers; fine of 2.2 million GBP plus 9,929 GBP in costs. According to its 2025 annual accounts, the company had an average of 4,570 employees.

What organisations can take from it

Where you know of unsafe behaviour at machinery, prevent it by technical means – warning signs alone will not satisfy a court.

Authority / court
Chelmsford Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2(1) Health and Safety at Work etc. Act 1974
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Employees
1,000 to 9,999
Published
27 Mar 2026

Original amount 2,200,000 GBP, converted at the ECB reference rate of 26 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Mar 2026 NN Penzijní společnost, a.s.ČNB: CZK 10m fine for NN Penzijní společnost – savers' interest income booked as its own CzechiaOrganisational requirements €408,530

The ČNB (Czech National Bank) fined NN Penzijní společnost 10,000,000 CZK under the supplementary pension savings act. In 2023 the pension company booked interest income totalling 8,060,467.26 CZK earned on savers' money held in collection and payout accounts as its own income instead of allocating it to the participants. In addition, until at least February 2024 it lacked independent ongoing monitoring of investment limits, effective oversight of outsourced activities and adequate procedures for conflicts of interest within the corporate group.

What organisations can take from it

Income generated on client money belongs to the clients; firms that outsource administration need their own independent controls rather than relying on the provider's data.

Relevance to training and awareness

Fiduciary duties towards savers and oversight of outsourced activities

Authority / court
Česká národní banka (ČNB)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
§ 49 lit. a und b, § 50, § 51, § 54 Abs. 1, § 160 Abs. 1 lit. q und u, § 160 Abs. 10 Zákon č. 427/2011 Sb. (ZDPS, Fassung bis 31. 12. 2024)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance

Original amount 10,000,000 CZK, converted at the ECB reference rate of 26 Mar 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Mar 2026 Commercial Lines Limited (HLN Supplies)Plastics fabricator: two finger injuries in ten days – 16,000 GBP United KingdomWorkplace safety and accidents €18,494

In August 2024 two employees of the Leeds plastics fabricator lost parts of fingers within ten days – one on an unguarded sanding machine, the other on a table saw. The HSE (Health and Safety Executive, Britain's workplace safety regulator) found inadequate guarding, insufficient saw training, no safe systems of work and no suitable risk assessment; fine of 16,000 GBP plus 6,534 GBP in costs for the business, which had 17 employees according to its annual accounts.

What organisations can take from it

Treat an accident on one machine as a warning for all others – after the first incident, review all guarding and instruction immediately.

Relevance to training and awareness

Safe use of saws and machinery

Missing or inadequate training played a role in the decision.

Authority / court
Leeds Magistrates' Court (Anklage: Health and Safety Executive)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Section 2(1) Health and Safety at Work etc. Act 1974; Regulation 3(1) Management of Health and Safety at Work Regulations 1999
Action
Fine
Status of proceedings
unknown
Sector
Manufacturing and mechanical engineering
Employees
Under 50
Published
26 Mar 2026

Original amount 16,000 GBP, converted at the ECB reference rate of 26 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

25 Mar 2026 RENAULT COMMERCIAL ROUMANIE S.R.L.Cyber attack via service provider – Renault Commercial Roumanie pays 125,000 EUR RomaniaData processors €125,083

In an attack on an application operated by a processor, data of a very large number of persons (including personal identification numbers, driving licence and identity card numbers, vehicle identification numbers) were stolen and published. The Romanian data protection authority (ANSPDCP) criticised the lack of security measures and effectiveness testing as well as the selection of a service provider without sufficient guarantees and imposed 637,262.50 lei (125,000 EUR).

What organisations can take from it

Responsibility for customer data does not end with the service provider – check its security guarantees in advance and monitor them continuously.

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection · Data processors
Legal basis
Art. 32 Abs. 1 lit. b und d, Abs. 2 i. V. m. Art. 28 Abs. 1 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Automotive
Published
25 Mar 2026

Original amount 637,262.5 RON, converted at the ECB reference rate of 25 Mar 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

25 Mar 2026 Familiam Asset Management OyFamiliam Asset Management: 70,000 EUR for 2,867 unreported securities transactions FinlandDisclosure and reporting obligations €70,000

Between September 2021 and August 2023, the asset manager failed to report a total of 2,867 transactions to the supervisory authority on time and in 2024 also submitted quarterly reports (FINREP) late. The Finanssivalvonta (Finnish Financial Supervisory Authority, FIN-FSA) imposed a total fine of 70,000 EUR; the admission had a mitigating effect.

What organisations can take from it

Reporting obligations require deadline monitoring with a deputy arrangement – especially in small firms without their own reporting department.

Relevance to training and awareness

Regulatory reporting

Authority / court
Finanssivalvonta (FIN-FSA)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
MiFIR (VO (EU) 600/2014) Art. 26 Abs. 1; IFR (VO (EU) 2019/2033) Art. 54 Abs. 1; FIN-FSA-Vorschriften 20/2013 (FINREP)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Mitigating circumstances
Admission of the failures / cooperation.
Published
25 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Mar 2026 3R Technology UK Ltd3R Technology UK: penalty for exporting contaminated plastic waste despite prohibition United KingdomWaste and hazardous substances €92,442

From 2022 to 2025, the company exported containers of supposedly clean plastic that was in fact contaminated with electronic waste such as cables and circuit boards; in some cases, the waste was hidden at the back of the container, and further containers were shipped despite prohibition notices from August 2024. The company pleaded guilty and was fined 80,000 GBP; in addition, it was ordered to pay 45,000 GBP in costs and a 2,000 GBP surcharge. According to the annual accounts filed with the UK companies register for financial year 2025, the company had around 19 employees.

What organisations can take from it

Incorrectly declared waste exports are detected during port inspections; those who ignore regulatory prohibitions risk a criminal conviction.

Relevance to training and awareness

Correct classification and declaration of waste for export

Authority / court
Preston Magistrates' Court (Anklage: Environment Agency)
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Vorschriften zur grenzüberschreitenden Abfallverbringung (Notifizierung und Zustimmung); Verstoß gegen Untersagungsverfügungen
Action
Fine
Status of proceedings
unknown
Sector
Other
Employees
Under 50
Culpability
intentional
Repeat case
yes
Mitigating circumstances
Guilty plea.
Published
2 Apr 2026

Original amount 80,000 GBP, converted at the ECB reference rate of 24 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 5 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Mar 2026 SIA "Fitsypro"Fitsypro fails to answer access request and DVI enquiries – 1,500 EUR LatviaData subject rights and transparency €1,500

A person complained that Fitsypro had not responded to their request for access, rectification and erasure of November 2023. Three requests for information from the Datu valsts inspekcija (Latvian Data State Inspectorate, DVI) between 2024 and 2026 went unanswered, and nobody attended the hearing. The DVI imposed 1,500 EUR and requested the information by 21 April 2026.

What organisations can take from it

Official mailboxes (eAdrese) and data protection e-mail addresses must be monitored – silence towards the supervisory authority costs money.

Relevance to training and awareness

Handling data subject requests and correspondence from authorities

Authority / court
Datu valsts inspekcija (DVI)
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 58 Abs. 1 lit. e, Art. 83 Abs. 5 lit. e DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Other
Culpability
intentional

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Mar 2026 Revolut Group Holdings Ltd, Revolut Bank UAB, Revolut Securities Europe UABAGCM fines Revolut €11.5m over misleading investment, account and IBAN information ItalyMisleading advertising and pricing €11.5m

The AGCM objected to three unfair commercial practices by Revolut: unclear information that investors sometimes acquire only fractional shares, together with misleading "0% commission" advertising; unclear information on account blocks and their aggressive implementation without adequate prior notice or support; and missing information on the requirements and time needed to obtain an Italian IBAN. Fines of 5,000,000 EUR against Revolut Group Holdings Ltd and Revolut Securities Europe UAB, and of 5,000,000 and 1,500,000 EUR against Revolut Group Holdings Ltd and Revolut Bank UAB, each jointly and severally, were imposed, totalling 11,500,000 EUR.

What organisations can take from it

Account blocks need transparent criteria, timely information and a reachable route to resolve them, and "0% commission" must not be advertised where other costs apply.

Relevance to training and awareness

Transparency on investment products, fee advertising and account blocks

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Art. 20, 21, 22, 24, 25 Codice del consumo (D.lgs. 206/2005)
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Mitigating circumstances
For the IBAN practice, the AGCM took into account measures that Revolut took on its own initiative during the proceedings.
Published
2 Apr 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Mar 2026 The Bank of London Group Limited und Oplyse Holdings Limited (vormals The Bank of London Group Holdings Limited)PRA: £2m fine on The Bank of London and its parent for misleading it about capital United KingdomDisclosure and reporting obligations €2.31m

The PRA fined The Bank of London Group Limited and its financial holding company Oplyse Holdings Limited 2,000,000 GBP. Between October 2021 and May 2024 they failed to meet their capital requirements for an extended period, repeatedly misled the PRA about their actual capital position – including with fabricated documents – and did not properly manage or report a large exposure arising from a loan by the bank to its parent. It was the PRA's first fine for a lack of integrity and its first action against a financial holding company; a penalty of 12 million GBP would have been appropriate.

What organisations can take from it

Only the true capital position counts with the regulator – embellished or fabricated evidence turns a capital problem into an integrity breach.

Relevance to training and awareness

Truthfulness towards the regulator; no embellished capital evidence

Authority / court
Prudential Regulation Authority (PRA), Bank of England
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
PRA Fundamental Rules 1, 3, 4 und 7; PRA Rulebook: Reporting (CRR) Part Kap. 3 Art. 5 und Art. 7, Large Exposures (CRR) Part Art. 393–395, Notifications 2.3, Related Party Transaction Risk 2.1 und 2.3, Definition of Capital 7A; ss. 206 und 192Y FSMA 2000
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Culpability
intentional
Mitigating circumstances
Because serious financial hardship was demonstrated, the PRA reduced the penalty from 12 million GBP to 2 million GBP; the firms settled with the PRA.
Published
24 Mar 2026

Original amount 2,000,000 GBP, converted at the ECB reference rate of 23 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Mar 2026 Stanleybet Malta LimitedMalta: 225,730 EUR against betting operator Stanleybet over lack of customer checks in betting shops MaltaCustomer due diligence €225,730

Malta's Financial Intelligence Analysis Unit (FIAU) imposed 225,730 EUR, a penalty payment of 2,000 EUR per day and a follow-up directive on the licensed gambling operator, which works through a network of independently operated betting shops in an EU member state. The company was unable to link customers' cumulative deposits across different shops and only checked customers from a single deposit of 2,000 EUR upwards, so the threshold could be circumvented. The company has appealed.

What organisations can take from it

Thresholds must be aggregated per customer across all channels and branches – otherwise the system invites structuring.

Relevance to training and awareness

Recognising structured deposits below the checking threshold

Authority / court
Financial Intelligence Analysis Unit (FIAU)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Regulation 21 PMLFTR; Verstöße gegen Regulations 5(5)(a)(ii), 7, 9(1) PMLFTR und FIAU Implementing Procedures
Action
Fine
Status of proceedings
under appeal
Sector
Other
Published
16 Apr 2026
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Mar 2026 Region SyddanmarkRegion Syddanmark: GDPR fine over exposed research database halved on appeal DenmarkData breaches and data security €66,919

In December 2024 the Kolding City Court fined the Region Syddanmark (Region of Southern Denmark) 1,000,000 DKK for two breaches of the duty to ensure appropriate data security. On 23 March 2026 the Vestre Landsret (Western High Court) upheld only the first charge – in a research and clinical database, logged-in users could access PDF documents of more than 23,000 registered persons, including health data of minors in psychiatric care, by changing the URL – and reduced the fine to 500,000 DKK; it acquitted the region of the charge concerning patient data in a presentation on its website.

What organisations can take from it

Access rights must be checked server-side for every document; an editable URL is not access control.

Relevance to training and awareness

Access control in web applications (manipulable URLs)

Authority / court
Retten i Kolding; Vestre Landsret (auf Anzeige der Datatilsynet)
Area of law
Data protection · Data breaches and data security
Legal basis
Art. 32 Abs. 1, Art. 83 Abs. 4 lit. a und Abs. 9 DSGVO; databeskyttelseslovens § 41 stk. 1 nr. 1, stk. 3 og 6
Action
Fine
Status of proceedings
reduced
Sector
Public sector
Culpability
negligent
Repeat case
yes

Original amount 500,000 DKK, converted at the ECB reference rate of 23 Mar 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Mar 2026 Gesundheitsdienstleister (in der Entscheidung anonymisiert)Hungarian GP practice: 500,000 HUF for 47 EESZT queries without legal basis HungaryData subject rights and transparency €1,274

A general practitioner who had no longer been treating the complainant since January 2023 accessed his health data (findings, prescriptions) on the national e-health platform EESZT a total of 47 times via his practice software until August 2024 and did not respond to an access request. The Hungarian data protection authority (Nemzeti Adatvédelmi és Információszabadság Hatóság, NAIH) found infringements of Art. 5(2), 6(1), 9(2), 12(2) and 15(1) GDPR, ordered compliance with the access request and imposed 500,000 HUF.

What organisations can take from it

Every access to electronic health records is logged and must be linked to treatment – even if it is triggered by practice staff.

Relevance to training and awareness

Access to health data and access requests

Authority / court
Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH)
Area of law
Data protection · Data subject rights and transparency
Legal basis
DSGVO Art. 5 Abs. 2, 6 Abs. 1, 9 Abs. 2, 12 Abs. 2, 15 Abs. 1
Action
Fine
Status of proceedings
final
Sector
Healthcare
Published
20 Mar 2026

Original amount 500,000 HUF, converted at the ECB reference rate of 20 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Mar 2026 Brown Thomas Arnotts LimitedCCPC: Brown Thomas Arnotts admits incorrect prior prices online – charity donation ordered IrelandMisleading advertising and pricing €1,000

The CCPC found that the retailer had not stated the correct prior price for price reductions on brownthomas.com and arnotts.ie during the 2024/2025 winter sales. The company pleaded guilty in January 2026; in March 2026 the court ordered a donation of €1,000 to a charity and struck out the charges without conviction.

What organisations can take from it

In discount promotions the stated prior price must be the lowest price in the prescribed reference period – online shops included.

Authority / court
Dublin District Court (Anklage: Competition and Consumer Protection Commission, CCPC)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Regulation 5A European Communities (Requirements to Indicate Product Prices) Regulations 2002 (S.I. No. 639/2002), geändert durch S.I. No. 597/2022
Action
Other
Status of proceedings
final
Sector
Retail and e-commerce
Published
5 Jul 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Mar 2026 Conclusive Financial Limited (auch „PCP Refunds“)FCA orders Conclusive to remove misleading adverts for motor finance claims United KingdomMisleading advertising and pricing Order

The FCA directed the claims management company Conclusive Financial Limited, which also trades as “PCP Refunds”, with immediate effect to remove adverts for motor finance compensation claims and to refrain from similar adverts in future. The adverts used, without permission, edited video clips of the founder of a well-known consumer finance website as well as the FCA logo, presented the firm's authorised status as a mark of quality, cited an unsubstantiated average refund of 1,846 GBP and did not adequately explain the fees charged for its “No Win, No Fee” service.

What organisations can take from it

Financial promotions must not borrow trust from celebrities or regulators' logos, nor promise unsubstantiated average amounts.

Relevance to training and awareness

Compliant advertising on social media; no use of celebrities or regulators' logos

Authority / court
Financial Conduct Authority (FCA)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
s. 137S FSMA 2000; CMCOB 3.2.1R, 3.2.7R und 3.2.9R
Action
Order
Status of proceedings
unknown
Sector
Financial services and insurance
Published
14 Apr 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Mar 2026 Singtel Optus Pty LtdOptus: unlisted numbers of 41,278 customers published in the phone directory AustraliaData breaches and data security Order

Singtel Optus asked customers who ported their number to Optus whether they wanted to appear in the phone directory, but between October 2015 and September 2019 it did not act on requests for an unlisted number, so that 41,278 affected customers remained published in the White Pages. The Privacy Commissioner found a breach of APP 11.1 because Optus did not remove a risk of errors it had been aware of throughout the period with reasonable steps such as regular system reconciliations, and declared that the company must not repeat this conduct. The regulator intends to decide on compensation separately in a representative complaint concerning the same conduct.

What organisations can take from it

Known sources of error in legacy systems and in disclosures to third parties must be eliminated through regular reconciliations rather than tolerated for years.

Relevance to training and awareness

Reliably implementing customers' privacy choices across systems and service providers

Authority / court
Office of the Australian Information Commissioner (OAIC)
Area of law
Data protection · Data breaches and data security
Legal basis
Privacy Act 1988 (Cth) s 13(1), APP 11.1; Erklärung nach s 52(1A)(a)
Action
Order
Status of proceedings
unknown
Sector
Telecoms, IT and software
Published
11 Jun 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Mar 2026 Colas Rail Asia Sdn Bhd (Colas-Gruppe)Colas Rail Asia: CJIP of 29.7 million EUR over bribery in metro contracts in Malaysia FranceBribery of public officials €29.7m

The Malaysian subsidiary of Colas Rail paid large, undocumented sums via intermediaries in connection with public contracts for urban rail lines in Kuala Lumpur (Kelana Jaya extension, MRT2). Following an internal investigation, Colas Rail self-reported the matter in 2017; the CJIP (Convention judiciaire d'intérêt public, a French deferred prosecution agreement) provides for a public interest fine of 29,745,974 EUR and a three-year compliance programme monitored by the French Anti-Corruption Agency (AFA) (costs of up to 1.9 million EUR).

What organisations can take from it

Undocumented payments to intermediaries on foreign projects must be stopped early by the finance and compliance functions – self-reporting after an internal investigation is rewarded.

Relevance to training and awareness

Intermediaries and consultants in public tenders

Authority / court
Parquet national financier (PNF); Validierung durch den Präsidenten des Tribunal judiciaire de Paris
Area of law
Bribery and corruption · Bribery of public officials
Legal basis
Art. 41-1-2 Code de procédure pénale (CJIP); Bestechung ausländischer Amtsträger
Action
Fine
Status of proceedings
final
Sector
Construction and real estate
Employees
10,000 or more
Culpability
intentional
Mitigating circumstances
Self-report (criminal complaint filed by Colas Rail on 31 May 2017) following an internal forensic investigation.
Liability of senior managers
The CJIP does not address the criminal liability of natural persons.
Published
19 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Mar 2026 Balt USA LLC (Balt-Gruppe)Balt USA: CJIP in France over payments to a hospital physician FranceBribery of public officials €1.77m

In parallel with the US declination, the PNF concluded a CJIP with the US subsidiary of the French medical technology manufacturer for 1,765,493 EUR (after crediting the US disgorgement) and a three-year AFA compliance programme. The case arose from Balt SAS's voluntary self-disclosure of 22 May 2023 concerning conduct at the acquired company Blockade Medical.

What organisations can take from it

Acquisitions require anti-corruption due diligence on the target company – otherwise legacy misconduct by its management becomes a group risk.

Relevance to training and awareness

Benefits to hospital physicians, integration of acquired companies

Authority / court
Parquet national financier (PNF); Validierung durch den Präsidenten des Tribunal judiciaire de Paris
Area of law
Bribery and corruption · Bribery of public officials
Legal basis
Art. 41-1-2 Code de procédure pénale (CJIP); aktive und passive Bestechung von Amtsträgern
Action
Fine
Status of proceedings
final
Sector
Healthcare
Employees
250 to 999
Culpability
intentional
Mitigating circumstances
Voluntary self-disclosure to the PNF and the DOJ; coordinated resolution with crediting.
Liability of senior managers
The CJIP does not address the criminal liability of natural persons.
Published
19 Mar 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Mar 2026 Mavera ABMavera: SEK 14.3m for exclusivity clauses with insurance medical advisers SwedenAbuse of market power €1.32m

The Konkurrensverket (Swedish Competition Authority) found that Mavera AB abuses its dominant position by applying, since 1 January 2021, exclusivity clauses in contracts with companies providing insurance medical advice that prohibit advising competing businesses. The authority imposed a competition damages fee (konkurrensskadeavgift) of 14,300,000 SEK and ordered the company to stop applying the clauses and to inform its contractual partners within six weeks; the order is backed by a conditional fine (vite) of 30,000,000 SEK. Mavera has appealed to the Patent- och marknadsdomstolen (Patent and Market Court). The decision is not final.

What organisations can take from it

Exclusivity ties imposed by a dominant customer on service providers can keep competitors out of the market and carry high competition law risk.

Relevance to training and awareness

Exclusivity clauses used by dominant companies

Authority / court
Konkurrensverket
Area of law
Competition law · Abuse of market power
Legal basis
2 kap. 7 § konkurrenslagen (2008:579); Art. 102 AEUV; 3 kap. 1 § och 3 kap. 5 § första stycket 1 KL
Action
Fine
Status of proceedings
under appeal
Sector
Financial services and insurance
Published
19 Mar 2026

Original amount 14,300,000 SEK, converted at the ECB reference rate of 19 Mar 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Mar 2026 Busy Bees Nurseries LimitedBusy Bees: £485,374 in minimum wage arrears owed to 9,056 nursery staff United KingdomMinimum wage and undeclared work €561,854

The UK Department for Business and Trade publicly named the nursery operator Busy Bees Nurseries Limited in round 23 of the National Minimum Wage Naming Scheme. According to investigations by HM Revenue & Customs (HMRC), the company had paid a total of 9,056 workers less than the statutory minimum wage between April 2017 and October 2022 and had to repay £485,374.05 – on average around £54 per person. According to the ministry, the 389 employers named in this round also received penalties totalling around £12.6 million; the amount per company is not published.

What organisations can take from it

Where many employees earn close to the minimum wage, regularly checking payroll against the applicable minimum rates is a must – small shortfalls per person add up to large arrears and public naming.

Relevance to training and awareness

Minimum wage compliance in payroll

Authority / court
Department for Business and Trade (DBT) und HM Revenue & Customs (HMRC), National Minimum Wage Naming Scheme
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
Britisches Mindestlohnrecht (National Minimum Wage / National Living Wage); National Minimum Wage Naming Scheme
Action
Order
Status of proceedings
unknown
Sector
Other
Employees
1,000 to 9,999
Published
19 Mar 2026

Original amount 485,374.05 GBP, converted at the ECB reference rate of 19 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Mar 2026 Apple Distribution International LimitedOFSI: GBP 390,000 settlement penalty for Apple Distribution International over payments to an app developer United KingdomBreaches of sanctions and embargoes €451,452

On 19 March 2026 OFSI imposed a monetary penalty of GBP 390,000 on Ireland-based Apple Distribution International Limited by way of settlement. According to OFSI's findings, the company, which pays out revenues to software developers on an app marketplace, instructed two payments totalling GBP 635,618.75 in June and July 2022 from a UK bank account to a Russian app developer owned by a designated entity, and did not cancel the instructions. OFSI identified reliance on developers' self-declarations and on third-party data, among other things, as causes. The company had voluntarily disclosed the payments on 4 October 2022. The settlement followed a notice of intent of 11 November 2025 and was reached under the settlement process introduced in February 2026; OFSI made no findings against the parent company. Source: Office of Financial Sanctions Implementation (OFSI), HM Treasury, "Imposition of monetary penalty: Apple Distribution International Limited", 30 March 2026, https://www.gov.uk/government/publications/imposition-of-monetary-penalty-apple-distribution-international-limited. Contains public sector information licensed under the Open Government Licence v3.0 (https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/).

Authority / court
HM Treasury, Office of Financial Sanctions Implementation (OFSI)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Russia (Sanctions) (EU Exit) Regulations 2019, reg. 12; Geldbuße nach s. 146 Policing and Crime Act 2017 (Settlement)
Action
Fine
Status of proceedings
final
Sector
Telecoms, IT and software
Published
30 Mar 2026

Original amount 390,000 GBP, converted at the ECB reference rate of 19 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Mar 2026 Míla hf.Iceland: Míla pays 200 million ISK for breaching merger conditions IcelandMerger control €1.39m

The telecoms infrastructure company Míla hf. admitted in a settlement with Samkeppniseftirlitið (Icelandic Competition Authority) that from October 2023 to December 2024 it had breached the conditions of the September 2022 settlement on its acquisition by Ardian: the frequency and scope of its contacts with Síminn were liable to weaken Síminn's incentive to buy wholesale services from Míla's competitors beyond its contractual purchase obligation. Míla pays a fine of 200,000,000 ISK and accepts additional conditions; at the same time, some conditions were limited, owing to changed market conditions, to areas where Míla has significant market power.

What organisations can take from it

Merger conditions also apply to day-to-day sales contact; companies subject to them must check and document customer outreach and sales activities against the conditions.

Relevance to training and awareness

Complying with merger conditions in day-to-day business, especially in contact with major customers

Authority / court
Samkeppniseftirlitið
Area of law
Competition law · Merger control
Legal basis
Verstoß gegen Fusionsauflagen (Art. 4 und 8 eines früheren Vergleichs); Vergleich nach Art. 17f Abs. 1 Samkeppnislög Nr. 44/2005 (isländisches Wettbewerbsgesetz)
Action
Fine
Status of proceedings
final
Sector
Telecoms, IT and software
Published
19 Mar 2026

Original amount 200,000,000 ISK, converted at the ECB reference rate of 18 Mar 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Mar 2026 Double J SmallwoodsDouble J Smallwoods sawmill: 601,250 NZD after two serious injuries New ZealandWorkplace safety and accidents €304,230

In June 2024 timber kicked back from an inadequately guarded stack saw at the Gisborne sawmill and seriously injured a worker's arm; seven weeks later another worker was crushed between two forklifts and suffered spinal and pelvic fractures. WorkSafe (New Zealand's workplace health and safety regulator) found systemic failings in machine guarding, risk assessment, traffic management, training and maintenance; the company had not notified the first incident and had not acted on earlier formal directions to fix the risks. On 18 March 2026 the Gisborne District Court imposed a fine of 601,250 NZD and 100,754 NZD in reparation.

What organisations can take from it

Regulatory directions and first incidents call for immediate action – failing to notify incidents and leaving risks unaddressed invites further injuries.

Relevance to training and awareness

Machine guarding, workplace traffic management and incident notification

Missing or inadequate training played a role in the decision.

Authority / court
Gisborne District Court (Anklage: WorkSafe New Zealand)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Health and Safety at Work Act 2015, ss 36(1)(a), 48(1), 48(2)(c)
Action
Fine
Status of proceedings
unknown
Sector
Manufacturing and mechanical engineering
Published
30 Mar 2026

Original amount 601,250 NZD, converted at the ECB reference rate of 18 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Mar 2026 Nova Scotia PowerNova Scotia Power: commitments to the Privacy Commissioner after ransomware attack CanadaData breaches and data security Other

Following a cyber attack in spring 2025 in which data of about 375,000 current and 540,000 former customers was exfiltrated, including bank account, driver's licence and social insurance numbers, Nova Scotia Power signed a compliance letter to the Privacy Commissioner of Canada. The company commits to delete customers' social insurance numbers and, by 31 October 2026, to submit an independent security assessment – including employee training and notification processes – and to report on implementing its recommendations; only then will the investigation be discontinued. According to the letter, the starting point was an employee clicking a link in a pop-up on a compromised website, which installed malware.

What organisations can take from it

A single click on a fake pop-up can expose hundreds of thousands of customer records – training, limited admin rights and prompt notification belong together.

Relevance to training and awareness

Fake update pop-ups and malware

Missing or inadequate training played a role in the decision.

Authority / court
Office of the Privacy Commissioner of Canada (OPC)
Area of law
Data protection · Data breaches and data security
Legal basis
Personal Information Protection and Electronic Documents Act (PIPEDA); Einstellung nach Paragraph 12.2(1)(c) bei Erfüllung der Zusagen
Action
Other
Status of proceedings
unknown
Sector
Energy and utilities
Published
25 Mar 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Mar 2026 Morellato S.p.A.AGCM fines Morellato €25.9m for online resale price maintenance and marketplace ban ItalyCartels and collusion €25.9m

The AGCM found that, within its selective distribution system for jewellery and watches, Morellato set its retailers' online resale prices and prohibited them from using third-party marketplaces and intermediation platforms from 20 July 2018 to 23 December 2025; by way of retaliation, Morellato blocked orders (Art. 101(1) TFEU). The fine amounts to 25,895,043 EUR.

What organisations can take from it

Manufacturers may not dictate retailers' online selling prices or impose blanket bans on platform sales, and using supply stops as leverage aggravates the infringement.

Relevance to training and awareness

Resale price maintenance and platform bans in online distribution

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Competition law · Cartels and collusion
Legal basis
Art. 101 Abs. 1 AEUV; Art. 15 Legge n. 287/1990
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Mitigating circumstances
Because treating the marketplace ban as a restriction of competition was novel, the AGCM calculated the fine solely on the basis of the online resale price maintenance.
Published
31 Mar 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Mar 2026 W International LLC; W International SC LLC; Precision Metal Equipment Handling LLCW International pays 10.5 million USD for overpriced welding tables for Air Force and Navy USAOther €9.11m

The metal fabrication companies allegedly knowingly overcharged the Air Force and the Navy for welding tables for the modernisation of a large welding facility; the project was financed in part with funds under the Defense Production Act. The settlement under the False Claims Act amounts to 10.5 million USD (a joint payment with a further settling party); a former employee received 1,863,750 USD as a whistleblower.

What organisations can take from it

Price information provided to public contracting authorities must be calculated on a sound basis; internal whistleblowers regularly bring such cases to the authorities.

Authority / court
U.S. Department of Justice (Civil Division) / USAO District of South Carolina
Area of law
Other
Legal basis
False Claims Act (31 U.S.C. §§ 3729 ff.)
Action
Other
Status of proceedings
final
Sector
Steel and metals
Liability of senior managers
Measures against individuals are not reported here.
Published
17 Mar 2026

Original amount 10,500,000 USD, converted at the ECB reference rate of 17 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Mar 2026 Alecta Tjänstepension ÖmsesidigtAlecta: warning and SEK 50m over risk control in Heimstaden investments SwedenOrganisational requirements €4.67m

Finansinspektionen (FI, Swedish Financial Supervisory Authority) issued the occupational pension provider Alecta a warning and the statutory maximum administrative fine of 50,000,000 SEK. For investments of around 26.5 billion SEK in Heimstaden Bostad AB between October 2019 and August 2023, Alecta had – with the exception of one investment occasion – not sufficiently identified the risk of loss arising from the articles of association and shareholder agreements, nor ensured that it could manage that risk; the assets were therefore not invested in the way that best served the beneficiaries' interests. FI classified the breaches as serious but refrained from revoking the licence in view of the measures taken.

What organisations can take from it

Anyone investing client money must analyse and document the contractual risks (influence, exit, reinvestment obligations) before each tranche.

Relevance to training and awareness

Risk control and prudence in large investments of pension assets

Authority / court
Finansinspektionen (FI)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
6 kap. 20 § försäkringsrörelselagen (2010:2043) in der Fassung vor dem 1.1.2016; 6 kap. 1–3 §§ lagen (2019:742) om tjänstepensionsföretag; 15 kap. 1, 2 och 16 §§ LTF
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Repeat case
no
Mitigating circumstances
Alecta replaced several senior executives, made staffing changes in asset management and strengthened its board; FI therefore considered a warning rather than licence revocation sufficient.
Published
18 Mar 2026

Original amount 50,000,000 SEK, converted at the ECB reference rate of 17 Mar 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Mar 2026 Trustpilot Group Plc, Trustpilot A/S, Trustpilot S.r.l.Trustpilot: 4 million EUR fine for inadequate verification of the authenticity of reviews ItalyFake reviews €4m

According to the AGCM, the review platform did not adequately check whether reviews – including those labelled as "verified" – were genuine, and allowed companies to invite specifically selected customers to leave reviews via paid services, which undermined the representativeness of the star ratings. In addition, information on how the platform works and on paid services was lacking; the authority also saw dark pattern elements in this.

What organisations can take from it

Anyone who advertises with verified reviews must actually carry out the verification and disclose the selective collection of reviews.

Authority / court
Autorità Garante della Concorrenza e del Mercato (AGCM)
Area of law
Consumer protection and online retail · Fake reviews
Legal basis
Artt. 20, 21, 22 e 23, comma 1, lett. bb-ter Codice del Consumo
Action
Fine
Status of proceedings
unknown
Sector
Media and online platforms
Published
23 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Mar 2026 Syndicat National des Moniteurs du Ski Français (SNMSF)Ski instructors’ union SNMSF: EUR 3.4 million for exclusivity duty of ESF instructors FranceCartels and collusion €3.4m

From 12 May 2006 to 4 February 2025, the model agreement of France’s largest ski instructors’ union prohibited instructors of the Écoles du Ski Français from teaching for competing ski schools or their own clients and threatened exclusion for breaches; the Autorité de la concurrence (French Competition Authority) regarded this as a restriction of competition by object on the market for ski tuition. It imposed EUR 3.4 million, for the first time in an ordinary procedure calculated on the basis of the members’ turnover, and ordered the union to amend the rules, publish the decision and, if it cannot pay, call on its members for contributions.

What organisations can take from it

Professional associations are also liable under competition law for statutes and model rules that forbid their members from working for competitors.

Relevance to training and awareness

Anti-competitive rules in professional associations

Authority / court
Autorité de la concurrence
Area of law
Competition law · Cartels and collusion
Legal basis
Art. 101 Abs. 1 AEUV; Art. L. 420-1 Code de commerce; Bemessung nach Art. L. 464-2 Code de commerce (Umsetzung der ECN+-Richtlinie)
Action
Fine
Status of proceedings
under appeal
Sector
Other
Published
17 Mar 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Mar 2026 Balt SAS / Balt USA LLCMedical technology: DOJ declination for Balt SAS after bribery of a hospital physician USABribery of public officials €1.05m

Through sham consultancy agreements, fictitious invoices and purported bonus payments, around 602,000 USD in bribes flowed from 2017 to 2023 via a Belgian consultant to a physician in a senior position at a French public hospital, so that the hospital would purchase embolisation coils from Balt. The DOJ declined to prosecute on account of voluntary self-disclosure, cooperation and remediation (declination of 17 March 2026); Balt is disgorging 1,214,797 USD in profits.

What organisations can take from it

Physicians at public hospitals are public officials – consultancy agreements with them require documented services and approval by the compliance function.

Relevance to training and awareness

Benefits to physicians in the public healthcare sector, sham consultancy agreements

Authority / court
U.S. Department of Justice (Criminal Division, Fraud Section)
Area of law
Bribery and corruption · Bribery of public officials
Legal basis
FCPA; Corporate Enforcement and Voluntary Self-Disclosure Policy (Declination)
Action
Disgorgement of profits
Status of proceedings
final
Sector
Healthcare
Culpability
intentional
Mitigating circumstances
Voluntary self-disclosure (including to the French national financial prosecutor's office, PNF), full cooperation, timely remediation, disciplinary measures, parallel resolution in France.
Liability of senior managers
Measures against individuals are not reported here.
Published
19 Mar 2026

Original amount 1,214,797 USD, converted at the ECB reference rate of 17 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Mar 2026 TradeStation Securities, Inc.OFAC: USD 1.11 million settlement with TradeStation over securities trading for customers in Iran, Syria and Crimea USABreaches of sanctions and embargoes €963,196

Online broker TradeStation Securities, Inc. of Florida is paying USD 1,110,661 under a settlement with OFAC for 481 apparent violations of multiple sanctions programmes. According to OFAC's findings, following several failures in compliance controls, customers in Iran, Syria and Crimea were able to execute 481 securities trades worth a total of USD 4,442,645 via the mobile app between June 2021 and June 2022. OFAC treated the apparent violations as non-egregious and voluntarily self-disclosed and credited significant remedial measures; the base penalty was USD 2,221,322. Source: U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), enforcement release "TradeStation Securities, Inc. Settles with OFAC for $1,110,661 Related to Apparent Violations of Multiple Sanctions Regulations", 17 March 2026, https://ofac.treasury.gov/media/935351/download?inline; summarised in our own words.

Authority / court
U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Iranian Transactions and Sanctions Regulations, 31 C.F.R. § 560.204; Syrian Sanctions Regulations, 31 C.F.R. § 542.207; Ukraine-/Russia-Related Sanctions Regulations, 31 C.F.R. § 589.207 (481 mutmaßliche Verstöße); Vergleich nach den Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
17 Mar 2026

Original amount 1,110,661 USD, converted at the ECB reference rate of 17 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Mar 2026 Hakrinbank N.V.; Finabank N.V.; De Surinaamsche Bank N.V.OM: settlements with three Surinamese banks over negligent money laundering NetherlandsCustomer due diligence €415,000

Hakrinbank N.V., Finabank N.V. and De Surinaamsche Bank N.V. concluded transactions (out-of-court settlements) with the Openbaar Ministerie (OM, Dutch Public Prosecution Service) over suspected negligent money laundering (schuldwitwassen) in 2018 and are paying a total of 415,000 EUR (Hakrinbank 166,000 EUR, Finabank and De Surinaamsche Bank 124,500 EUR each). The trigger was the seizure at Schiphol Airport in April 2018 of 19.5 million EUR in cash belonging to the three banks and bound for Hong Kong; the OM accused them of not having adequately checked the origin of the cash in Suriname, in particular who the customers of the bureaux de change among their clients were. The OM found no intent; it took into account the age of the case and the lesser seriousness of negligent money laundering, and the seized money will be returned.

What organisations can take from it

Banks that accept cash from bureaux de change and ship it internationally must include their customers’ customers in checks on its origin.

Relevance to training and awareness

Checking the origin of cash shipments and customers of bureaux de change

Authority / court
Openbaar Ministerie (OM), Arrondissementsparket Noord-Holland
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Schuldwitwassen (fahrlässige Geldwäsche nach niederländischem Strafrecht); Transaktion des OM
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Culpability
negligent
Mitigating circumstances
No intent established; age of the case; the banks have since implemented improvements in cash controls, KYC and governance.
Published
17 Mar 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Mar 2026 Forestry Corporation of NSWForestry Corporation of NSW: AUD 450,000 over illegally felled giant and hollow trees AustraliaEmissions and permits €276,549

In June and July 2020 contractors of the state-owned forestry corporation felled six giant trees and three hollow-bearing trees in Wild Cattle Creek State Forest near Coffs Harbour that should have been retained under the Coastal Integrated Forestry Operation Approval. On the EPA’s prosecution, the Land and Environment Court convicted the corporation and found harm to koala habitat and cultural harm to the Gumbaynggirr people; following a restorative justice conference, the AUD 450,000 penalty goes to the Yurruungga Aboriginal Corporation for remediation projects. The corporation must also commission an independent audit of its procedures and publish the conviction.

What organisations can take from it

Anyone contracting out forestry work remains responsible for identifying protected trees and must align planning and training accordingly.

Relevance to training and awareness

Marking and protecting trees to be retained in forestry work carried out by contractors

Missing or inadequate training played a role in the decision.

Authority / court
NSW Environment Protection Authority (EPA NSW) / Land and Environment Court of NSW
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Coastal Integrated Forestry Operation Approval (NSW)
Action
Fine
Status of proceedings
unknown
Sector
Public sector
Repeat case
yes
Published
16 Mar 2026

Original amount 450,000 AUD, converted at the ECB reference rate of 16 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

13 Mar 2026 Macquarie Securities (Australia) LimitedMacquarie Securities: 35 million AUD for years of misreported short sales AustraliaDisclosure and reporting obligations €21.5m

The Supreme Court of New South Wales, on application by the Australian Securities and Investments Commission (ASIC, Australia's corporate, markets and financial services regulator), imposed a penalty of 35 million AUD on the securities dealer because, between December 2009 and February 2024, inadequate systems, processes and controls led it to misreport at least 73 million short sales to the market operator and to omit required regulatory data from orders. The court also found inadequate risk management and misleading conduct, and ordered a compliance programme involving an independent expert.

What organisations can take from it

Regulatory reporting processes need their own regularly tested controls, and individual errors that come to light should be investigated as a possible sign of wider system weaknesses.

Relevance to training and awareness

Accuracy of regulatory reporting (short sale and order data) and escalation of identified reporting errors

Authority / court
Supreme Court of New South Wales (auf Antrag der Australian Securities and Investments Commission, ASIC)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Corporations Act 2001 (Cth) ss 798H(1)(b), 912A(1)(h), 1041H(1); ASIC Market Integrity Rules (Securities Markets) 2017; Geldbuße nach s 1317G(1)
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Employees
50 to 249
Mitigating circumstances
Early acceptance of the contraventions, sustained cooperation with ASIC and contrition; the errors were reported to ASIC once identified and promptly remediated; no previous court findings of similar conduct.
Liability of senior managers
According to the decision, the errors arose at an operational level; ASIC did not allege any involvement of senior management.
Published
16 Mar 2026

Original amount 35,000,000 AUD, converted at the ECB reference rate of 13 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Mar 2026 Associação Portuguesa das Empresas do Setor Privado de Emprego e de Recursos Humanos (APESPE)Portugal: 4.5 million EUR against temporary work association APESPE for no-poach rule PortugalCartels and collusion €4.52m

From 1987 to March 2025, the association of temporary work agencies (around 40 members) obliged its members in its code of ethics not to poach each other’s temporary workers. The Autoridade da Concorrência (Portuguese Competition Authority, AdC) regarded this as an anticompetitive decision by an association in the labour market and imposed 4,519,000 EUR, calculated on the basis of the members’ turnover; the decision can be appealed (date = press release).

What organisations can take from it

An association’s code of ethics can also be a cartel – no-poach agreements between competitors are off limits.

Relevance to training and awareness

No-poach agreements in association rules

Authority / court
Autoridade da Concorrência (AdC)
Area of law
Competition law · Cartels and collusion
Legal basis
Lei da Concorrência (Lei n.º 19/2012), Art. 9.º
Action
Fine
Status of proceedings
unknown
Sector
Other
Published
12 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Mar 2026 Direktmarketing-Unternehmen, UK (anonymisiert)ICO: £130,000 fine for a direct marketing firm over calls to TPS numbers United KingdomMarketing and consent €150,737

In March 2026 the ICO fined a small UK direct marketing company £130,000 and also served an enforcement notice. According to the ICO, over almost eleven months in 2024 the company had staff make more than 230,000 marketing calls to lines that had been on the UK's opt-out register for sales calls (Telephone Preference Service, TPS) for over 28 days, prompting 12 complaints. The ICO treated this as a breach of regulation 21 of PECR.

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Marketing and consent
Legal basis
Regulations 21 und 24 PECR; section 55A DPA 1998
Action
Fine
Status of proceedings
unknown
Sector
Other

Original amount 130,000 GBP, converted at the ECB reference rate of 12 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Mar 2026 Amazon Europe Core S.à r.l.Luxembourg: Cour administrative annuls 746 million EUR fine against Amazon but confirms infringements LuxembourgMarketing and consent overturned

In 2021, the Luxembourg data protection authority (CNPD) had imposed 746 million EUR and an order to bring processing into compliance on account of behavioural online advertising; the Administrative Tribunal (Tribunal administratif) confirmed this on 18 March 2025. On 12 March 2026, the Administrative Court (Cour administrative) confirmed that legitimate interest was not a sound legal basis and that the information was insufficient, but annulled the fine on the basis of more recent CJEU case law on the requirement of culpability; the CNPD is re-examining the sanction.

What organisations can take from it

Personalised advertising cannot be based on legitimate interest – and courts now scrutinise culpability closely when it comes to fines.

Authority / court
Cour administrative (Luxemburg); Verfahren der CNPD
Area of law
Data protection · Marketing and consent
Legal basis
Art. 6 Abs. 1 lit. f, Art. 12 ff. DSGVO
Action
Order
Status of proceedings
overturned
Sector
Retail and e-commerce
Employees
10,000 or more
Mitigating circumstances
Amazon had implemented the compliance order before the hearing.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Mar 2026 National Grid Electricity Transmission plcNational Grid (NGET): 20 million GBP after neglected Harker substation United KingdomOther €23.2m

Between 2016 and 2021, the transmission system operator did not adequately monitor, maintain and repair the civil structures of the 132 kV Harker substation near Carlisle – a hub for electricity exchange between Scotland and England – and thereby also delayed grid connections. NGET accepted the breaches and paid 20 million GBP into the Energy Industry Voluntary Redress Scheme.

What organisations can take from it

Operators of critical networks must systematically inspect even the inconspicuous civil structures of their installations – a maintenance backlog becomes a threat to supply.

Authority / court
Office of Gas and Electricity Markets (Ofgem)
Area of law
Other
Legal basis
Electricity Act 1989, s. 9(2); Standard Licence Condition B7 (Transmission Licence)
Action
Other
Status of proceedings
final
Sector
Energy and utilities

Original amount 20,000,000 GBP, converted at the ECB reference rate of 11 Mar 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Mar 2026 Birks Group Inc.FINTRAC: jeweller Birks sanctioned over missing risk assessment and compliance review CanadaInternal controls €32,755

The nationwide jewellery chain (a dealer in precious metals and stones) received a penalty of 51,562.50 CAD from the Financial Transactions and Reports Analysis Centre of Canada (FINTRAC) because written compliance policies were lacking or not applied, the money laundering risk was not assessed and documented, and the prescribed two-yearly effectiveness review was not carried out. Birks has appealed to the Federal Court.

What organisations can take from it

Jewellers, too, must maintain a documented compliance programme with a risk assessment and regular effectiveness reviews.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
Proceeds of Crime (Money Laundering) and Terrorist Financing Act, Part 1, und zugehörige Verordnungen
Action
Fine
Status of proceedings
under appeal
Sector
Retail and e-commerce
Published
5 May 2026

Original amount 51,562.5 CAD, converted at the ECB reference rate of 11 Mar 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Mar 2026 U K Insurance LimitedPRA: £10.625m fine on U K Insurance for an incorrect Solvency II balance sheet United KingdomDisclosure and reporting obligations €12.3m

The PRA fined U K Insurance Limited, the principal insurance company of the Direct Line Group (part of Aviva since July 2025), 10,625,000 GBP. Because of ineffective controls and staffing and capability issues in its finance and actuarial functions, its Solvency II balance sheet was miscalculated in 2023 and 2024, so that the firm overstated its solvency to the PRA and the market; the error went undetected for a considerable time. It was the first case under the PRA's Early Account Scheme.

What organisations can take from it

Regulatory metrics such as the solvency ratio need effective preventive and detective controls and sufficiently qualified staff.

Relevance to training and awareness

Controls, capability and training in finance and actuarial functions

Missing or inadequate training played a role in the decision.

Authority / court
Prudential Regulation Authority (PRA), Bank of England
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
PRA Fundamental Rule 6; Notifications 6.1; Reporting 2.4 und 3.2 (PRA Rulebook); s. 206 FSMA 2000
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Culpability
negligent
Mitigating circumstances
Participation in the Early Account Scheme with early admissions: 50% discount (otherwise 21.25 million GBP); after discovery management notified the PRA without delay, corrected the published figures and remedied the causes; in the PRA's view the breaches were neither deliberate nor reckless.
Published
11 Mar 2026

Original amount 10,625,000 GBP, converted at the ECB reference rate of 10 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Mar 2026 Barclays PLCBaFin fines Barclays €1.65m over 26 late voting rights notifications GermanyDisclosure and reporting obligations €1.65m

On 10 March 2026 BaFin (German Federal Financial Supervisory Authority) imposed a fine of 1,650,000 EUR on Barclays PLC. Between June 2022 and March 2023 the company had failed in 26 cases to submit voting rights notifications concerning the same issuer on time; the fine punished a breach of the duty of supervision because adequate organisational measures were lacking. The fine is final.

What organisations can take from it

Anyone holding positions in German issuers needs reliable threshold monitoring, or many missed notifications turn into a high fine.

Relevance to training and awareness

Monitoring voting rights thresholds and notifying on time

Authority / court
Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
§ 130 Abs. 1 OWiG i. V. m. § 33 Abs. 1 S. 1, § 34 Abs. 1 S. 1, § 38 Abs. 1 S. 1 und § 39 Abs. 1 WpHG
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Employees
10,000 or more
Liability of senior managers
The fine punished a breach of the duty of supervision under § 130 OWiG (German Administrative Offences Act): the company had not taken adequate organisational measures to prevent the breaches or make them significantly more difficult.
Published
27 Mar 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Mar 2026 Vier Unternehmen eines Bodenaufbereitungskonzerns aus Barneveld (anonymisiert)OM: €1.125m against four soil firms from Barneveld over environmental fraud NetherlandsWaste and hazardous substances €1.13m

The Openbaar Ministerie (OM, Dutch Public Prosecution Service) imposed penalty orders totalling 1,125,000 EUR on four companies from Barneveld that belonged to the same group at the time and are not named in the releases, consisting of 660,000 EUR in fines and 465,000 EUR in confiscation of unlawfully obtained gains. According to the OM, between 2013 and 2016 the firms accepted excessively contaminated sand, cleaned it inadequately or incorrectly and deliberately mixed it with cleaner sand for reuse, in breach of permit conditions and the Wet milieubeheer (Environmental Management Act) and involving forgery. The companies initially lodged an objection (verzet) but withdrew it, so the penalty orders are final (release of 2 July 2026).

What organisations can take from it

In certified recycling chains no stage may bypass acceptance or testing criteria; mixing to conceal contamination turns a permit breach into environmental fraud.

Relevance to training and awareness

Integrity in certified recycling chains for soil and waste

Authority / court
Openbaar Ministerie (OM), Functioneel Parket
Area of law
Environment and sustainability · Waste and hazardous substances
Legal basis
Vorschriften der Umgebungsgenehmigungen (omgevingsvergunningen); Wet milieubeheer; valsheid in geschrift; Strafbefehle des OM
Action
Fine
Status of proceedings
final
Sector
Other
Culpability
intentional
Mitigating circumstances
The companies have adapted or ceased their activities, and measures have been taken within the group.
Published
10 Mar 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Mar 2026 World Anti-Doping Agency (WADA)WADA: compliance agreement with Canada's Privacy Commissioner on athletes' data CanadaData protection Other

The Montreal-based World Anti-Doping Agency (WADA), a foundation under Swiss private law, entered into a compliance agreement under PIPEDA with the Privacy Commissioner of Canada, under which an investigation opened in November 2024 following a complaint is held in abeyance and will be discontinued once the agreement is fulfilled. WADA must ensure that anti-doping organisations use athletes' personal information in the ADAMS system only for anti-doping purposes from 1 January 2027, amend the World Anti-Doping Code and the ADAMS agreements accordingly, document a control mechanism and report quarterly. WADA disputes any contravention and the Commissioner's jurisdiction; if it fails to comply, the Commissioner may apply to the Federal Court for an order.

What organisations can take from it

Operators of data platforms used by partners must enforce, contractually and technically, that partners use the data only for the intended purpose.

Relevance to training and awareness

Purpose limitation on shared data platforms

Authority / court
Office of the Privacy Commissioner of Canada (OPC)
Area of law
Data protection
Legal basis
Personal Information Protection and Electronic Documents Act (PIPEDA), Sections 17.1 und 17.2 (Compliance Agreement)
Action
Other
Status of proceedings
unknown
Sector
Other
Published
17 Mar 2026

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Mar 2026 Alderson Logistics Limited; Supa Shavings (2022) LimitedAlderson Logistics and Supa Shavings: 420,000 NZD for an anti-competitive acquisition without clearance New ZealandMerger control €214,691

In May 2022, without seeking clearance, Alderson Logistics and its associated company Supa Shavings (2022) acquired the businesses of the two largest suppliers of bulk wood shavings used as bedding by chicken and goat farmers in the Waikato, which together held a market share of at least 70 to 80% and were each other's closest competitors. Following a settlement with the Commerce Commission (New Zealand's competition regulator), the High Court imposed an allegedly agreed penalty of 420,000 NZD jointly against both for breaching the prohibition on acquisitions in s 47 of the Commerce Act. It was the first time the Commission had also sought divestment where a breach was admitted; the divestment did not succeed.

What organisations can take from it

Even without a mandatory filing regime, acquisitions between close competitors should be checked under competition law beforehand and notified for clearance where in doubt.

Relevance to training and awareness

Competition law review of acquisitions without a filing obligation

Authority / court
High Court Auckland (Klage: Commerce Commission)
Area of law
Competition law · Merger control
Legal basis
Commerce Act 1986, s 47
Action
Fine
Status of proceedings
final
Sector
Food and agriculture
Published
9 Mar 2026

Original amount 420,000 NZD, converted at the ECB reference rate of 9 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Mar 2026 Werbendes Unternehmen aus dem Sektor Finanz- und Versicherungsprodukte (anonymisiert)BNetzA: €50,000 fine on financial products seller posing as an advice centre on the phone GermanyMarketing and consent €50,000

The Bundesnetzagentur (Federal Network Agency) fined a company marketing financial and insurance products 50,000 EUR for unlawful telephone advertising. The calls were particularly intrusive, callers falsely claimed to be an independent advice centre and presented sales calls as service calls; the company has appealed.

What organisations can take from it

Anyone marketing by phone must not disguise either their own identity or the promotional purpose of the call.

Relevance to training and awareness

Consent and proof of consent for telephone marketing

Authority / court
Bundesnetzagentur (BNetzA)
Area of law
Data protection · Marketing and consent
Legal basis
UWG – Verbot unerlaubter Telefonwerbung gegenüber Verbraucherinnen und Verbrauchern
Action
Fine
Status of proceedings
under appeal
Sector
Financial services and insurance

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Mar 2026 Canaccord Genuity LLCFinCEN: 80 million USD against Canaccord Genuity over AML and correspondent banking deficiencies USACustomer due diligence €69.2m

The US Financial Crimes Enforcement Network (FinCEN) imposed 80 million USD on the broker-dealer, which admitted wilful BSA infringements: no effective AML programme, no due diligence on correspondent accounts of foreign financial institutions and failure to file suspicious activity reports in connection with securities fraud. Remedial measures that had been promised were not implemented for years.

What organisations can take from it

Implement remedial measures promised in writing to the supervisory authority genuinely and swiftly – years of delay aggravate the later sanction.

Authority / court
Financial Crimes Enforcement Network (FinCEN)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Bank Secrecy Act (BSA)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Culpability
intentional
Published
6 Mar 2026

Original amount 80,000,000 USD, converted at the ECB reference rate of 6 Mar 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Mar 2026 Fleurette Properties LtdCommodities holding Fleurette: 25.8 million EUR strafbeschikking over bribery in Congo NetherlandsBribery of public officials €25.8m

According to the Dutch Public Prosecution Service (OM), the top holding company of a mining, oil and gold group, which was based in the Netherlands from 2010 to 2017, participated together with others in bribing public officials of the DR Congo in order to obtain licences for cobalt and copper mines. On 6 March 2026, the OM issued a strafbeschikking (prosecutorial penalty order) imposing a fine of 25.8 million EUR, which Fleurette accepted.

What organisations can take from it

In the commodities sector, licences and concessions are the main target for bribery – holding companies share liability for payments made by their subsidiaries.

Relevance to training and awareness

Award of licences in the commodities sector, payments to public officials

Authority / court
Openbaar Ministerie (OM); Ermittlungen FIOD Anti-Corruptie Centrum
Area of law
Bribery and corruption · Bribery of public officials
Legal basis
Buitenlandse ambtelijke omkoping (Wetboek van Strafrecht); OM-strafbeschikking
Action
Fine
Status of proceedings
final
Sector
Steel and metals
Culpability
intentional
Published
10 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Mar 2026 ΚΟΜΠΑ Μονοπρόσωπη Ε.Π.Ε. und HAPPY DOG Α.Ε. ΖωοτροφώνGreece: around 482,500 EUR against pet food importers for resale price maintenance GreeceCartels and collusion €482,498

Two importers of dog and cat food monitored their retailers’ consumer prices on price comparison portals and asked them to adjust them to their price lists; the retailers complied. In a settlement procedure (Decision 901/2026), the Επιτροπή Ανταγωνισμού (Hellenic Competition Commission) imposed 387,498 EUR on KOMPA and 95,000 EUR on Happy Dog; the case began with a tip-off via the authority’s anonymous whistleblowing platform.

What organisations can take from it

Recommended prices must not be enforced through monitoring and calls to retailers – and authorities’ whistleblowing channels make such practices visible.

Relevance to training and awareness

Prohibition of resale price maintenance in sales

Authority / court
Επιτροπή Ανταγωνισμού (Hellenic Competition Commission)
Area of law
Competition law · Cartels and collusion
Legal basis
Art. 1 Gesetz 3959/2011; Art. 101 AEUV
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Mitigating circumstances
Settlement procedure with reduced fines
Published
6 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Mar 2026 Allin IP DX LLCAllin IP DX: 980,000 USD after self-disclosure over paid referral marketers USACommercial bribery €843,519

Between January and June 2023, the Sarasota laboratory paid independent marketers to steer laboratory samples from Medicare beneficiaries to it. It self-disclosed the conduct, cooperated extensively and paid 980,000 USD.

What organisations can take from it

Early self-disclosure limits the damage – but this requires the compliance function to actually get to see problematic sales contracts.

Relevance to training and awareness

Success-based remuneration of sales partners

Authority / court
U.S. Attorney's Office, Middle District of Florida
Area of law
Bribery and corruption · Commercial bribery
Legal basis
Anti-Kickback Statute (42 U.S.C. § 1320a-7b(b)); False Claims Act (31 U.S.C. §§ 3729 ff.)
Action
Other
Status of proceedings
final
Sector
Healthcare
Mitigating circumstances
Voluntary self-disclosure, detailed disclosure and cooperation.

Original amount 980,000 USD, converted at the ECB reference rate of 5 Mar 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Mar 2026 SIA "SS"Classifieds portal ss.lv blocked users of competitor – fine of 186,781 EUR LatviaAbuse of market power €186,781

From March 2020 to May 2021, the operator of ss.lv/ss.com (market share over 60%) deleted advertisements and blocked accounts of users – mainly car dealers and estate agents – who also advertised on the competing platform pp.lv; anyone wishing to register with an inbox.lv address additionally had to provide a different e-mail address. The Konkurences padome (Latvian Competition Council) considered this an abuse of a dominant position (Art. 102 TFEU), imposed 186,780.65 EUR and required objective criteria for dealing with customers.

What organisations can take from it

Market-leading platforms must not punish users for multi-homing – internal moderation rules need objective criteria.

Relevance to training and awareness

Competition law limits in dealing with competitors’ customers

Authority / court
Konkurences padome (Lettischer Wettbewerbsrat)
Area of law
Competition law · Abuse of market power
Legal basis
Art. 102 AEUV
Action
Fine
Status of proceedings
unknown
Sector
Media and online platforms
Published
18 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Mar 2026 Stonehage Fleming Luxembourg S.A.Stonehage Fleming Luxembourg: EUR 56,000 for late suspicious activity reports LuxembourgSuspicious activity reports €56,000

The CSSF fined the specialised financial services provider, whose domiciliation business was inspected, EUR 56,000 (around 2% of annual turnover). In four cases involving adverse media on possible corruption or drug trafficking, the company reported to the FIU only after the CSSF asked and incompletely; in six further cases with indications of corruption, bribery and tax offences no report was made at all.

What organisations can take from it

Adverse media on clients requires the firm's own investigation and, if suspicion remains, a complete report – not only when the supervisor asks.

Relevance to training and awareness

Investigating adverse media and reporting completely and on time

Authority / court
Commission de Surveillance du Secteur Financier (CSSF)
Area of law
Money laundering and terrorist financing · Suspicious activity reports
Legal basis
Art. 2-1(1) i. V. m. Art. 8-4(1), (2)(f) und (3)(a) Loi modifiée du 12 novembre 2004 (LBC/FT); verletzt u. a. Art. 5(1)(a); Règlement CSSF 12-02
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Mitigating circumstances
Limited scope of the inspection; findings acknowledged, action plan and remedial measures.
Published
9 Jun 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Mar 2026 Loblaw Companies LimitedOPC: Loblaw must change retention of PC Optimum data after account deletion CanadaData subject rights and transparency Other

During a wave of boycotts in 2024, Loblaw did not process deletion requests in time and retained purchase and usage data from the loyalty programme (more than 17 million members) even after accounts were closed, without demonstrating effective anonymisation. Loblaw undertook to the Office of the Privacy Commissioner of Canada (OPC) to have the anonymisation independently reviewed and to carry out annual deletions.

What organisations can take from it

Companies that continue to use data as anonymous after account deletion must be able to demonstrate the re-identification risk – IP addresses are often enough to link data to a person.

Authority / court
Office of the Privacy Commissioner of Canada (OPC)
Area of law
Data protection · Data subject rights and transparency
Legal basis
PIPEDA
Action
Other
Status of proceedings
unknown
Sector
Retail and e-commerce
Employees
10,000 or more
Published
5 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Mar 2026 Santander Bank Polska S.A. (heute Erste Bank Polska S.A.)Santander Bank Polska: PLN 21.1m for failings in securities and treasury business PolandOrganisational requirements €4.95m

The KNF imposed eight fines totalling PLN 21,100,000, among other things for cooperating with unauthorised third parties in client transactions (PLN 2m and 4m), transactions with clients outside the target market (PLN 2.5m), missing cost information on currency hedging transactions (PLN 1m), a non-compliant remuneration system (PLN 0.5m), the execution of orders relating to „Oprocentowanie Nie Wyższe Niż“ (PLN 7m), ineffective internal control and compliance functions (PLN 4m) and failure to archive client correspondence (PLN 0.1m). Following a request for reconsideration, the KNF upheld the fines on 28 August 2026; an action before the administrative court is possible.

What organisations can take from it

Banks must verify the authority of persons acting for clients and equip their compliance function so that it actually detects such gaps.

Relevance to training and awareness

An effective compliance function and dealing with client representatives in treasury business

Authority / court
Komisja Nadzoru Finansowego (KNF)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Art. 83b Abs. 3, Art. 83c Abs. 1 und 4, Art. 83e Abs. 1 ustawa o obrocie instrumentami finansowymi; § 8 Abs. 1 i. V. m. § 26 Nr. 1 Verordnung des Finanzministers vom 24.09.2012; Art. 9c Abs. 1 Nr. 4 und Art. 88k Abs. 6a Prawo bankowe
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance

Original amount 21,100,000 PLN, converted at the ECB reference rate of 4 Mar 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Mar 2026 Aramex New Zealand Holdings LimitedAramex: 700,000 NZD for customer allocation in a reseller agreement New ZealandCartels and collusion €355,800

In 2021 the courier company concluded an agreement with a competitor acting as reseller that allocated customers and fixed prices, and gave effect to the non-compete clause on one occasion; the wording had been copied from an older Fastway template. In civil proceedings brought by the Commerce Commission (ComCom, New Zealand's competition authority), the High Court on 4 March 2026 approved the jointly proposed penalty, allegedly of 700,000 NZD (starting point 1 million NZD, 30% reduction).

What organisations can take from it

Contract templates should be reviewed regularly for competition law risks before they are copied for new partners.

Relevance to training and awareness

Competition law review of contract templates

Authority / court
High Court Auckland (Klage: Commerce Commission)
Area of law
Competition law · Cartels and collusion
Legal basis
Commerce Act 1986, s 30
Action
Fine
Status of proceedings
final
Sector
Transport, logistics and shipping
Culpability
negligent
Repeat case
no
Mitigating circumstances
No previous warnings or contraventions, voluntary provision of documents and interviews, early admission and remorse, new agreements without the clause and a new competition law compliance programme in New Zealand and Australia.
Liability of senior managers
The agreement was prepared from a template by the national sales manager; a more senior employee signed it without reviewing its content.
Published
4 Mar 2026

Original amount 700,000 NZD, converted at the ECB reference rate of 4 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Mar 2026 Schaeffler AGSchaeffler: deviation of quarterly figures from market expectations disclosed too late GermanyDisclosure and reporting obligations €180,000

The automotive supplier's business figures for the first quarter of 2024 deviated significantly from market expectations; this inside information was not disclosed without delay by means of an ad hoc announcement. BaFin imposed a fine.

What organisations can take from it

Make a comparison of internal figures with the analyst consensus a fixed part of the quarterly process, so that significant deviations are immediately assessed for ad hoc disclosure obligations.

Relevance to training and awareness

Recognising inside information in deviations from market expectations (controlling/IR)

Authority / court
Bundesanstalt für Finanzdienstleistungsaufsicht (BaFin)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 17 Abs. 1 UAbs. 1 MAR
Action
Fine
Status of proceedings
final
Sector
Automotive
Published
26 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Mar 2026 Walmart Inc.FTC and eleven states: 100 million USD against Walmart over Spark driver pay USAMisleading advertising and pricing €86.2m

According to the FTC and eleven states, Walmart misled the drivers of its Spark Driver delivery service about base pay, incentives and tips, so that they lost tens of millions of dollars in earnings. The court order comprises judgments of 100 million USD: 89 million USD for the FTC (of which 10 million USD is paid and 16,175,302 USD goes into a driver fund, the remainder suspended because of back payments already made) and 11 million USD for the states. The authority allegedly made the findings set out here; this account is not based on a final judgment.

What organisations can take from it

Earnings claims made to drivers and freelancers are advertising claims and must match what is actually paid out.

Relevance to training and awareness

Truthful earnings claims towards gig workers

Authority / court
Federal Trade Commission (FTC) mit elf Bundesstaaten (AZ, CA, CO, IL, MI, NC, OK, PA, SC, UT, WI)
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Section 5 FTC Act; Gramm-Leach-Bliley Act (15 U.S.C. §§ 6801–6809, 6821–6827); Verbraucherschutzgesetze der klagenden Bundesstaaten
Action
Disgorgement of profits
Status of proceedings
final
Sector
Retail and e-commerce
Employees
10,000 or more
Published
26 Feb 2026

Original amount 100,000,000 USD, converted at the ECB reference rate of 3 Mar 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Mar 2026 John Wood Group PLCJohn Wood Group: incorrect financial results published – almost 13 million GBP United KingdomDisclosure and reporting obligations €14.9m

The energy services company published incorrect results for the 2022 and 2023 financial years and for the first half of 2024; accounting judgements were influenced by the desire to maintain previously reported figures, and systems and controls were inadequate. The UK Financial Conduct Authority (FCA) imposed a fine of 12,993,700 GBP (18,562,500 GBP without the 30 % discount).

What organisations can take from it

Accounting judgements must not be geared to figures already communicated – this is a control failure, not a calculation error.

Authority / court
Financial Conduct Authority (FCA)
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Listing Rule 1.3.3R; Listing Principle 1
Action
Fine
Status of proceedings
final
Sector
Energy and utilities
Employees
10,000 or more
Mitigating circumstances
30 % discount for early settlement and acceptance of the findings
Published
4 Mar 2026

Original amount 12,993,700 GBP, converted at the ECB reference rate of 3 Mar 2026.

Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

3 Mar 2026 BNF Bank p.l.c.Malta: 69,000 EUR against BNF Bank over late reporting to the bank account register MaltaMoney laundering and terrorist financing €69,000

Following the introduction of a new core banking system in April 2025, the bank was unable, until September 2025, to submit the mandatory weekly data deliveries to the Centralised Bank Account Register (CBAR) on time. The Financial Intelligence Analysis Unit (FIAU) imposed 69,000 EUR.

What organisations can take from it

Test regulatory reporting chains in advance of IT migrations – migration problems do not excuse missed deadlines.

Authority / court
Financial Intelligence Analysis Unit (FIAU)
Area of law
Money laundering and terrorist financing
Legal basis
Reg. 4(2), 8 Centralised Bank Account Register Regulations (S.L. 373.03)
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Mitigating circumstances
The bank continuously attempted to upload reports
Published
6 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Mar 2026 Northern Isga FoundationFINTRAC: CAD 91,162.50 penalty on Northern Isga Foundation for 4 violations of anti-money laundering obligations CanadaInternal controls €57,009

According to FINTRAC, Northern Isga Foundation is a non-profit charitable organisation based in Glenevis, Alberta, that receives a portion of a casino's revenues and is therefore a reporting entity. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 91,162.50 on the foundation on 2 March 2026. According to FINTRAC's findings, made during a compliance examination, the foundation committed 4 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned written compliance policies and procedures, assessing and documenting money laundering and terrorist financing risks, the compliance training programme and the prescribed review of the compliance programme. According to FINTRAC, the foundation has appealed the decision to the Federal Court. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on Northern Isga Foundation", published 26 March 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-03-26-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
PCMLTFA s. 9.6(1); PCMLTF Regulations 156(1)(b), 156(1)(c), 156(1)(d), 156(1)(e), 156(1)(f); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
under appeal
Sector
Other
Published
26 Mar 2026

Original amount 91,162.5 CAD, converted at the ECB reference rate of 2 Mar 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Mar 2026 Nordic Cleaning ApSNordic Cleaning: fine for leaving access request unanswered despite an order DenmarkData subject rights and transparency €8,031

Despite repeated follow-ups by the trade union, the cleaning company did not respond to a union member’s access request and also failed to comply with the order of the Danish Data Protection Agency (Datatilsynet) to decide on the request. Datatilsynet reported the company; the case was closed on 2 March 2026 with a fine notice of 60,000 DKK.

What organisations can take from it

Access requests and orders from authorities need a fixed intake channel and a responsible person – ignoring them leads straight to a criminal complaint.

Relevance to training and awareness

Handling access requests (Art. 15 GDPR)

Authority / court
Anklagemyndigheden (Bødeforelæg) auf Anzeige der Datatilsynet
Area of law
Data protection · Data subject rights and transparency
Legal basis
DSGVO Art. 15; Nichtbefolgung einer Anordnung der Datatilsynet; databeskyttelsesloven
Action
Fine
Status of proceedings
final
Sector
Other

Original amount 60,000 DKK, converted at the ECB reference rate of 2 Mar 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

2 Mar 2026 Suomen Numerokeskus OySuomen Numerokeskus: 5,000 EUR – call recordings only played by phone instead of provided as a copy FinlandData subject rights and transparency €5,000

Following six complaints, the Tietosuojavaltuutetun toimisto (Office of the Data Protection Ombudsman) found that the company did not provide a copy to customers who requested recordings of their sales calls in order to dispute invoices, offering only to let them listen via customer service, and in some cases deleted recordings. In addition to a reprimand, a fine of 5,000 EUR was imposed.

What organisations can take from it

Access means a copy: anyone who records calls must be able to provide the recording to data subjects in a suitable form.

Relevance to training and awareness

Right of access to call recordings

Authority / court
Tietosuojavaltuutetun toimisto – seuraamuskollegio (Datenschutzbeauftragter, Sanktionsgremium)
Area of law
Data protection · Data subject rights and transparency
Legal basis
DSGVO Art. 15 Abs. 1 und 3
Action
Fine
Status of proceedings
unknown
Sector
Telecoms, IT and software
Published
25 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

27 Feb 2026 MBaer Merchant Bank AGFINMA withdraws MBaer Merchant Bank's licence over serious anti-money laundering deficiencies SwitzerlandInternal controls Order

Following enforcement proceedings, the Swiss Financial Market Supervisory Authority (FINMA) found serious, systematic deficiencies in anti-money laundering due diligence, organisation and risk management; the bank enabled clients to circumvent official asset freezes and executed transactions for sanctioned persons. FINMA had withdrawn the bank's licence and ordered its liquidation; with the withdrawal of the appeal before the Federal Administrative Court, the orders took effect on 27 February 2026. The day before, FinCEN had proposed designating the bank as an institution of primary money laundering concern.

What organisations can take from it

Systematic anti-money laundering and sanctions deficiencies can cost a bank its licence – not just money.

Authority / court
Eidgenössische Finanzmarktaufsicht (FINMA)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
Schweizer Geldwäschereirecht und Bankenaufsichtsrecht (laut FINMA)
Action
Order
Status of proceedings
final
Sector
Financial services and insurance
Employees
50 to 249
Published
27 Feb 2026
Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Feb 2026 Teledyne FLIR LLCTeledyne FLIR: thermal imaging cameras incorrectly assessed and supplied to Entity List address USAExport control and dual-use goods €846,453

The manufacturer of militarily relevant thermal imaging technology admitted 19 violations to the US Commerce Department's Bureau of Industry and Security (BIS): incorrect de minimis calculations for cameras that went to China via Sweden, pricing arranged with a Chinese drone manufacturer to circumvent the licence requirement, missing records and eight deliveries in 2024 to a Hong Kong address on the Entity List that the screening software did not detect.

What organisations can take from it

Actively incorporate new forms of listing, such as address-only entries, into screening; do not rely solely on the software provider.

Relevance to training and awareness

De minimis calculation, address-based Entity List entries in screening

Authority / court
U.S. Department of Commerce, Bureau of Industry and Security (BIS)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Export Administration Regulations, §§ 734.4 (De minimis), 744.16, 764.2(a), (b), (h), (i)
Action
Fine
Status of proceedings
final
Sector
Defence and security
Mitigating circumstances
Voluntary self-disclosures for some of the violations
Published
26 Feb 2026

Original amount 1,000,000 USD, converted at the ECB reference rate of 26 Feb 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

26 Feb 2026 All FAB Precision Sheetmetal, Inc.Sheet metal fabricator: second amputation on the same press brake – Cal/OSHA $212,850 USA, CAWorkplace safety and accidents €180,168

In June 2025, an employee in San Jose lost a finger on a press brake without guarding – identical to an accident in June 2024 for which the business had already been fined $43,500. The California Division of Occupational Safety and Health (Cal/OSHA) imposed $212,850 (including a wilful repeat violation); the employer appealed.

What organisations can take from it

After an accident, retrofitting the machine is mandatory – an identical second accident will be treated as wilful.

Authority / court
California Division of Occupational Safety and Health (Cal/OSHA)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
California Code of Regulations, Title 8 (Maschinenschutz)
Action
Fine
Status of proceedings
under appeal
Sector
Steel and metals
Culpability
intentional
Repeat case
yes
Published
26 Feb 2026

Original amount 212,850 USD, converted at the ECB reference rate of 26 Feb 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Feb 2026 Vizocom ICTVizocom: blueprints for military antenna sent to China and copies supplied to the US Navy USAExport control and dual-use goods €317,971

The Californian dealer had won a Navy contract for 450 VHF/UHF antennas from a US manufacturer, but in 2019 uploaded the export-controlled production specifications of the purely military antenna without a licence to the portal of a Chinese manufacturer, had the antennas produced there for 6 USD each and supplied them to the Navy with false manufacturer information for 165,109.50 USD. The Bureau of Industry and Security (BIS, the export control agency of the US Department of Commerce) imposed 374,474 USD in 20 instalments and a denial of export privileges suspended for five years.

What organisations can take from it

Do not send specifications of military goods to foreign manufacturers without a licence – even uploading a drawing to a supplier portal is an export.

Relevance to training and awareness

Technical drawings and specifications as export-controlled technology

Authority / court
U.S. Department of Commerce, Bureau of Industry and Security (BIS)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Export Administration Regulations, 15 C.F.R. § 764.2(a), §§ 742.4, 742.6 (ECCN 3E611)
Action
Fine
Status of proceedings
final
Sector
Defence and security
Culpability
intentional
Liability of senior managers
Measures against individuals are not reported here.
Published
25 Feb 2026

Original amount 374,474 USD, converted at the ECB reference rate of 24 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

24 Feb 2026 Amazon Italia Logistica S.r.l.Garante halts records on illness and strikes at Amazon Italia Logistica ItalyEmployee data Order

During an inspection at the Passo Corese logistics centre (around 1,800 employees), the Garante (Italian data protection authority) found that, after return-to-work interviews, information on illnesses, participation in strikes, trade union activities and family circumstances of employees – irrelevant to their professional aptitude – was recorded in free-text fields of a platform linked to time recording and accessible to many managers. With immediate effect it ordered the definitive restriction of processing of these entries – also at all other sites using the platform – and of four cameras at the entrances to toilets and break areas; the investigation was continuing.

What organisations can take from it

Notes from staff interviews may only contain job-relevant information – health, strike participation and private life do not belong in HR systems.

Relevance to training and awareness

Documenting staff interviews and sensitive employee data

Authority / court
Garante per la protezione dei dati personali
Area of law
Data protection · Employee data
Legal basis
Art. 5 Abs. 1 lit. a, c und e, Art. 6, 9 und 88 DSGVO; Art. 113 Codice privacy (D.Lgs. 196/2003); Maßnahme nach Art. 58 Abs. 2 lit. f DSGVO
Action
Order
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Employees
10,000 or more
Published
24 Feb 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Feb 2026 Reddit, Inc.ICO: £14.47 million fine for Reddit over processing children's data without age checks United KingdomData protection €16.6m

The ICO fined Reddit, Inc. £14,472,500. The regulator found that the platform did not use any robust age assurance and therefore had no lawful basis for processing the personal data of children under 13. The ICO also found that Reddit had not carried out a data protection impact assessment on the risks to children before January 2025. The ICO found infringements of Articles 5(1)(a), 6, 8 and 35 UK GDPR.

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection
Legal basis
Art. 5(1)(a), 6, 8 und 35 UK GDPR; section 155 DPA 2018
Action
Fine
Status of proceedings
unknown
Sector
Media and online platforms

Original amount 14,472,500 GBP, converted at the ECB reference rate of 23 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Feb 2026 Yorkshire Water Services LimitedYorkshire Water: 733,333 GBP fine for repeated sewage discharges into park brook United KingdomEmissions and permits €839,630

Between October 2018 and August 2019, untreated sewage entered a brook in Pools Brook Country Park on three occasions – due to a burst rising main, a blockage caused by wet wipes and a failing pipe coupling; during the first incident, fish died in the park lake. Yorkshire Water had already pleaded guilty in January 2024 and had not attended any of the interviews; the court imposed a fine of 733,333 GBP plus costs. According to the annual accounts filed with the UK companies register for financial year 2026, the company had around 4,481 employees.

What organisations can take from it

After a first incident, the cause at the site must be remedied permanently; repeated discharges from the same pipe lead to high fines.

Authority / court
Derby Crown Court (Anklage: Environment Agency)
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Regulations 12(1)(b) und 38(1)(a) Environmental Permitting (England and Wales) Regulations 2016
Action
Fine
Status of proceedings
unknown
Sector
Energy and utilities
Employees
1,000 to 9,999
Culpability
negligent
Repeat case
yes
Published
23 Feb 2026

Original amount 733,333 GBP, converted at the ECB reference rate of 23 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Feb 2026 COFIDIS SA (Zweigniederlassung Slowakei)NBS: EUR 160,000 fine for the COFIDIS branch over 23 anti-money laundering failings SlovakiaInternal controls €160,000

The NBS (National Bank of Slovakia) fined the French bank COFIDIS 160,000 EUR in respect of its Slovak branch for 23 breaches found in an on-site inspection that began in May 2021. The anti-money laundering programme was outdated and incomplete (among other things it lacked current details of the money laundering officer, clear rules on when standard and when enhanced due diligence applies, the branch's own risk assessment and record-keeping requirements); in 2020 only 5 of 27 staff were trained, and 6 of 7 newly hired staff with AML tasks were not trained within three months. The branch also failed to verify customers' identity adequately for online products and electronic signing, did not identify politically exposed persons, did not monitor third-party payments into loan accounts, did not report refusals of unusual transactions to the financial intelligence unit and submitted inaccurate customer data to the NBS.

What organisations can take from it

An AML programme must be updated every year, and new staff with AML duties need their training within the statutory deadline.

Relevance to training and awareness

AML training for existing and new staff

Missing or inadequate training played a role in the decision.

Authority / court
Národná banka Slovenska (NBS)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
§ 10, § 12, § 14, § 17, § 19, § 20 Abs. 1 bis 3, § 20a Zákon č. 297/2008 Z. z. (AML-Gesetz); § 27 Abs. 2, § 42 Abs. 2, § 50 Abs. 1 lit. d Zákon č. 483/2001 Z. z. (Bankengesetz)
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Feb 2026 VersaBankFINTRAC: CAD 42,075 penalty on VersaBank for 2 violations of anti-money laundering obligations CanadaCustomer due diligence €26,082

According to FINTRAC, VersaBank is a bank based in London, Ontario. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 42,075 on the company on 23 February 2026. According to FINTRAC's findings, the company committed 2 violations of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violations concerned written compliance policies and procedures and enhanced measures for high-risk situations. Specifically, according to FINTRAC, the bank failed in at least seven instances to correctly identify elevated or high-risk clients and apply enhanced due diligence. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on VersaBank", published 5 May 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-05-05-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
PCMLTFA s. 9.6(1), 9.6(3); PCMLTF Regulations 156(1)(b), 157; Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Published
5 May 2026

Original amount 42,075 CAD, converted at the ECB reference rate of 23 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

23 Feb 2026 Chevalier (Construction) Company LimitedHong Kong: HKD 80,000 fine for Chevalier (Construction) for breaching a noise permit Hong KongEmissions and permits €8,683

Chevalier (Construction) was fined HKD 80,000 in January 2026 because on 23 February 2025 the company carried out prescribed construction work in breach of the conditions of its construction noise permit. It was the heaviest single fine among the 34 convictions reported by the Environmental Protection Department for January 2026.

What organisations can take from it

A noise permit only protects a site as long as its conditions on hours and equipment are actually observed.

Relevance to training and awareness

Complying with noise permit conditions on construction sites

Authority / court
Kwun Tong Magistrates' Courts, Hongkong (Anklage: Environmental Protection Department)
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Noise Control Ordinance (Bauarbeiten entgegen den Bedingungen einer Construction Noise Permit)
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Published
23 Feb 2026

Original amount 80,000 HKD, converted at the ECB reference rate of 23 Feb 2026.

Sources

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Feb 2026 BofA Securities Europe SABofA Securities Europe: €6.2m ECB penalty for misreporting market risk EU levelDisclosure and reporting obligations €6.2m

According to the ECB decision, BofA Securities Europe SA reported risk-weighted assets for market risk that were too low, and hence incorrect capital ratios, for six quarters (31 December 2022 to 31 March 2024), because it used its internal model for sovereign bond options although its permission did not cover them. The ECB classified the breach as intentional and severe and took remedial action into account as mitigating.

What organisations can take from it

Internal models may only be used within the approved scope; extensions must be applied for with the supervisor in advance.

Relevance to training and awareness

Using internal models only within the approved scope

Authority / court
Europäische Zentralbank (EZB), Bankenaufsicht
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 430 Abs. 1 Buchst. a VO (EU) Nr. 575/2013 (CRR); Art. 18 Abs. 1 VO (EU) Nr. 1024/2013
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Culpability
intentional
Mitigating circumstances
Remedial action to prevent future breaches.
Published
27 Mar 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Feb 2026 BVwG reduces FMA penalty against private bank over unclarified beneficial owners AustriaCustomer due diligence €356,000

From 2017 to 2020, an Austrian bank specialising in private and investment banking had not adequately examined the ownership and control structure of an offshore holding client despite the lack of evidence on shareholders, trust arrangements and beneficial owners. The Austrian Federal Administrative Court (Bundesverwaltungsgericht, BVwG) confirmed the infringement but reduced the additional penalty imposed by the Financial Market Authority (Finanzmarktaufsicht, FMA) in its penalty decision of 17 December 2024 from 476,000 to 356,000 EUR (total penalty 436,000 EUR less FMA penalties already paid), because the FMA had taken the seriousness of the offence into account twice and the bank had cooperated, admitted its errors and terminated the client relationship; an appeal on points of law has been permitted.

What organisations can take from it

For offshore holdings with trustees, prove the beneficial owner with supporting documents – a self-declaration is not enough.

Relevance to training and awareness

Identifying beneficial owners in holding and trust structures

Authority / court
Bundesverwaltungsgericht (BVwG); Straferkenntnis der Finanzmarktaufsicht (FMA) vom 17.12.2024
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
§ 9 Abs. 1 erster Satz i. V. m. § 6 Abs. 1 Z 2 FM-GwG; § 35 Abs. 1 und 3 i. V. m. § 34 Abs. 1 Z 2 und Abs. 2 FM-GwG; § 22 Abs. 9 FMABG (Zusatzstrafe)
Action
Fine
Status of proceedings
reduced
Sector
Financial services and insurance
Culpability
negligent
Mitigating circumstances
Reduction by the court because the wrongfulness of the offence had been counted twice, cooperation, admission of the facts and of guilt, and termination of the client relationship

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Feb 2026 Clarence Colliery Pty LtdClarence Colliery: 543,500 AUD after mine water entered the Wollangambe River AustraliaEmissions and permits €325,508

Clarence Colliery Pty Ltd, a subsidiary of Centennial Coal Company, was sentenced by the Land and Environment Court of NSW after pleading guilty to five offences under the Protection of the Environment Operations Act 1997, after untreated mine water with elevated nickel and zinc levels from the coal mine near Lithgow entered the Wollangambe River in December 2023 and April 2024. The offences comprised two water pollution offences, a licence breach, non-compliance with a prevention notice and a pollution incident response plan that had not been tested for 269 days. The court imposed fines totalling 543,500 AUD and ordered 86,500 AUD for rehabilitation of Long Swamp; in addition, the EPA's legal and investigation costs of 170,000 AUD and 15,548 AUD are payable.

What organisations can take from it

Pollution incident response plans must be tested regularly; here the failure was penalised separately for the first time.

Relevance to training and awareness

Regularly testing pollution incident response plans

Authority / court
NSW Environment Protection Authority (EPA NSW)
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Protection of the Environment Operations Act 1997 (NSW) s 120(1) (zwei Fälle), s 64(1), s 97(1), s 153E; Zahlungsanordnung nach s 250(1)(e)
Action
Fine
Status of proceedings
unknown
Sector
Energy and utilities
Repeat case
yes
Mitigating circumstances
Early guilty pleas (25% discount).
Published
23 Feb 2026

Original amount 543,500 AUD, converted at the ECB reference rate of 20 Feb 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Feb 2026 SC Hayat Dent SRLDental clinic Hayat Dent obstructs investigation of data leak – 2,000 EUR RomaniaData protection €1,999

The clinic’s managing director himself reported that a former employee had copied contact details and patient records of all patients and poached them for a new clinic. In the subsequent investigation, the clinic did not fully answer the requests of the Romanian data protection authority (ANSPDCP) despite a reprimand and an order; the authority therefore imposed 10,190 lei (2,000 EUR). Date = publication of the press release; according to the authority, the investigation was concluded in February 2026.

What organisations can take from it

Offboarding processes must block data access immediately – and anyone reporting an incident must also support its investigation.

Relevance to training and awareness

Taking patient data when leaving; cooperation with the supervisory authority

Authority / court
Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
Area of law
Data protection
Legal basis
Art. 58 Abs. 1, Art. 83 Abs. 5 lit. e DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Healthcare
Published
20 Feb 2026

Original amount 10,190 RON, converted at the ECB reference rate of 20 Feb 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

20 Feb 2026 The Commissioner of Police for the City of London (City of London Police)ICO: reprimand for City of London Police over late subject access responses United KingdomData subject rights and transparency Reprimand or warning

The ICO issued a reprimand to the City of London Police. The ICO found that between 1 April 2023 and 31 July 2025 the police force had failed to answer subject access requests within the statutory deadline. The ICO found this breached Article 12(3) UK GDPR and section 45(3) of the Data Protection Act 2018.

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 12(3) UK GDPR; section 45(3) DPA 2018; Art. 58(2)(b) UK GDPR
Action
Reprimand or warning
Status of proceedings
unknown
Sector
Public sector

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Feb 2026 Restaurant Partner Polska sp. z o.o. (Betreiberin der Plattform Glovo)Glovo Poland: 5.9 million PLN for copies of identity documents without legal basis PolandData subject rights and transparency €1.4m

Since 2019, the delivery platform had required scans or photos of its users’ identity cards and passports in cases of suspected fraud, relying on legitimate interests. The Prezes Urzędu Ochrony Danych Osobowych (President of Poland’s data protection authority, UODO) regarded this as processing without a legal basis and a breach of data minimisation, imposed 5,898,064 PLN and ordered the processing to stop and the data to be erased.

What organisations can take from it

Fraud prevention does not justify copies of identity documents – only those authorised by law may capture documents in full.

Relevance to training and awareness

Copying identity documents and data minimisation

Authority / court
Prezes Urzędu Ochrony Danych Osobowych (UODO)
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 5 Abs. 1 lit. a und c, Art. 5 Abs. 2, Art. 6 Abs. 1 DSGVO (DKN.5112.33.2022)
Action
Fine
Status of proceedings
final
Sector
Media and online platforms
Published
16 Mar 2026

Original amount 5,898,064 PLN, converted at the ECB reference rate of 19 Feb 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

19 Feb 2026 AZOP: 100,000 EUR against estate agent over ID copies and old files CroatiaData subject rights and transparency €100,000

An estate agency (name not published) kept 11,887 brokerage contracts from 2010 to 2019, together with 914 copies of identity cards, passports and bank cards, without a legal basis, although the managing director stated that no card copies were collected. The Croatian data protection authority (Agencija za zaštitu osobnih podataka, AZOP) also criticised irregular and inadequate data protection training for employees and imposed 100,000 EUR (date of publication; exact date of the decision not stated).

What organisations can take from it

Make copies of identity documents and cards only with a legal basis, destroy old files on time and train employees regularly.

Relevance to training and awareness

Data minimisation for ID copies, retention periods

Missing or inadequate training played a role in the decision.

Authority / court
Agencija za zaštitu osobnih podataka (AZOP)
Area of law
Data protection · Data subject rights and transparency
Legal basis
Art. 5 Abs. 1 lit. c und e, Art. 6 Abs. 1, Art. 32 Abs. 4 DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Construction and real estate
Culpability
negligent
Mitigating circumstances
No damage to data subjects was found.
Published
19 Feb 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Feb 2026 Somers Forge LimitedSomers Forge: 750,000 GBP after fatal accident on a 20-metre lathe United KingdomWorkplace safety and accidents €859,697

In December 2023, a machinist was caught by a lathe and fatally injured while finishing a rotating workpiece with emery cloth. The forge had not prohibited manual work with emery cloth, had not prevented access to moving parts and had not carried out a risk assessment; the Health and Safety Executive (HSE) prosecution resulted in a fine of 750,000 GBP plus 38,314 GBP in costs. According to the annual accounts filed with the UK companies register for financial year 2025, the company had around 136 employees.

What organisations can take from it

Expressly prohibit dangerous habitual practices on machine tools and safeguard against them with guarding and instruction.

Relevance to training and awareness

Safe working on rotating machinery

Authority / court
Health and Safety Executive (Walsall Magistrates' Court)
Area of law
Health and safety and employment law · Workplace safety and accidents
Legal basis
Health and Safety at Work etc. Act 1974, s. 2(1)
Action
Fine
Status of proceedings
final
Sector
Steel and metals
Employees
50 to 249
Published
18 Feb 2026

Original amount 750,000 GBP, converted at the ECB reference rate of 18 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Feb 2026 Périphériques et Matériels de Contrôle SAS (Groupe Carrus)Betting terminal manufacturer PMC: CJIP over payments to an official in Mali FranceBribery of public officials €499,150

From 2008 to 2011, the Paris-based supplier of betting and gaming terminals made unjustified payments of 78,972 EUR to an official of a majority state-owned company in Mali, with which it had a supply contract awarded without a tender. The case was triggered by a report from TRACFIN (the French financial intelligence unit). Public interest fine of 499,150 EUR (including 335,000 EUR already seized) and a three-year AFA compliance programme.

What organisations can take from it

Managers of state-controlled companies are also public officials – even small private payments to them create a risk of criminal liability for medium-sized companies.

Relevance to training and awareness

Payments to heads of state-owned companies abroad

Authority / court
Parquet national financier (PNF); Validierung durch den Präsidenten des Tribunal judiciaire de Paris
Area of law
Bribery and corruption · Bribery of public officials
Legal basis
Art. 41-1-2 Code de procédure pénale (CJIP); Bestechung ausländischer Amtsträger und Geldwäsche
Action
Fine
Status of proceedings
final
Sector
Telecoms, IT and software
Employees
50 to 249
Culpability
intentional
Liability of senior managers
The CJIP does not address the criminal liability of natural persons.
Published
18 Feb 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Feb 2026 Check24 GmbHBundeskartellamt: Check24 drops best-price clauses towards energy suppliers GermanyAbuse of market power Order

The Bundeskartellamt (Federal Cartel Office) declared binding commitments by Check24 GmbH under which the comparison website gives up price parity clauses when brokering electricity and gas contracts: energy suppliers may offer their tariffs more cheaply via other websites and their own sales channels without the contractual relationship, commission or ranking depending on it (no 'dimming'). In its preliminary assessment the authority had concerns under Articles 101 and 102 TFEU and Sections 1, 19 and 20 of the German Competition Act (GWB).

What organisations can take from it

Leading brokerage platforms should avoid best-price clauses; indirect levers such as a worse ranking also count as parity requirements.

Relevance to training and awareness

Best-price and parity clauses in brokerage contracts

Authority / court
Bundeskartellamt
Area of law
Competition law · Abuse of market power
Legal basis
§ 32b Abs. 1 GWB (Verpflichtungszusagen); Bedenken nach Art. 101, 102 AEUV, §§ 1, 19, 20 GWB (Az. B8-40/25)
Action
Order
Status of proceedings
unknown
Sector
Media and online platforms
Published
24 Feb 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

18 Feb 2026 Fraser Health Authority, Provincial Health Services Authority, Vancouver Coastal HealthBritish Columbia: 36 hospital staff accessed records of Lapu-Lapu Day victims without authorisation Canada, BCData breaches and data security Other

Following the tragedy at the Lapu-Lapu Day festival in 2025, 36 employees of three health authorities accessed patient data of 16 admitted persons without authorisation in 71 instances. Those affected were not informed without undue delay; the Information and Privacy Commissioner for British Columbia (OIPC BC) made nine recommendations, including automated access monitoring and deterrent disciplinary measures.

What organisations can take from it

Curiosity is no reason for access: monitor access to the records of high-profile cases in real time and sanction breaches noticeably.

Relevance to training and awareness

Unauthorised viewing of patient records (snooping)

Authority / court
Office of the Information and Privacy Commissioner for British Columbia (OIPC BC)
Area of law
Data protection · Data breaches and data security
Legal basis
Freedom of Information and Protection of Privacy Act (FIPPA) BC, s. 25.1
Action
Other
Status of proceedings
unknown
Sector
Healthcare
Culpability
intentional
Mitigating circumstances
Appropriate safeguards were in place; the authorities responded quickly and accepted all recommendations.
Published
18 Feb 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Feb 2026 REGIS-TR S.A.Trade repository REGIS-TR: deficiencies in organisation and data protection – 1.37 million EUR EU levelOrganisational requirements €1.37m

The Luxembourg trade repository lacked adequate compliance procedures and an appropriate organisational structure, failed to identify operational risks and did not adequately protect the confidentiality and integrity of the reported data. ESMA imposed fines totalling 1,374,000 EUR for negligent infringements under EMIR and SFTR; the case is under appeal.

What organisations can take from it

Market infrastructures must manage operational risks and data access as strictly as banks manage their credit risks.

Authority / court
Europäische Wertpapier- und Marktaufsichtsbehörde (ESMA)
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Verordnung (EU) Nr. 648/2012 (EMIR), Art. 65, 73, Anhang I; Verordnung (EU) 2015/2365 (SFTR), Art. 9
Action
Fine
Status of proceedings
under appeal
Sector
Financial services and insurance
Culpability
negligent
Repeat case
yes

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

17 Feb 2026 BVwG upholds 588,000 EUR FMA penalty against major bank over incorrect risk classification AustriaCustomer due diligence €588,000

The Austrian Federal Administrative Court (Bundesverwaltungsgericht, BVwG) dismissed the appeal of a listed major Austrian bank and upheld the fine of 588,000 EUR (plus 58,800 EUR in procedural costs) imposed by the Financial Market Authority (Finanzmarktaufsicht, FMA) in its penalty decision of 19 November 2024. From 2017 to 2020, the bank had not adequately risk-classified three business relationships and had disregarded sector risks such as gambling and precious metals trading as well as cash intensity; an appeal on points of law has been permitted.

What organisations can take from it

Customers from gambling or precious metals trading with a high share of cash belong in a higher risk class – otherwise the enhanced obligations are missing.

Relevance to training and awareness

Risk classification of cash-intensive high-risk sectors

Authority / court
Bundesverwaltungsgericht (BVwG); Straferkenntnis der Finanzmarktaufsicht (FMA) vom 19.11.2024
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
§ 6 Abs. 5 i. V. m. § 34 Abs. 1 Z 2 und § 35 Abs. 1–3 FM-GwG
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

16 Feb 2026 Carillion plc (in liquidation)FCA: Public censure for Carillion plc over misleading market information United KingdomMarket abuse and insider dealing Reprimand or warning

The FCA publicly censured the former construction and services group Carillion plc. The regulator found that between July 2016 and July 2017 the company published misleading information, breaching the prohibition of market manipulation and listing requirements; in July 2017 Carillion had to announce a provision of £845 million. Because the company has been in liquidation since January 2018, no fine was imposed; the FCA stated it would otherwise have been £37.91 million.

Authority / court
Financial Conduct Authority (FCA)
Area of law
Capital markets and financial supervision · Market abuse and insider dealing
Legal basis
Art. 15 MAR; Listing Rule 1.3.3R; Listing Principle 1; Premium Listing Principle 2; sections 91 und 123 FSMA 2000
Action
Reprimand or warning
Status of proceedings
final
Sector
Construction and real estate

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Feb 2026 ELKOND HHK, VUKI, Prysmian, NKT, KABEX u. a. (Kabelkartell, 9 Unternehmen und ein Verband)Cable cartel: PMÚ imposes record fines of 97.4 million EUR SlovakiaCartels and collusion €97.4m

Manufacturers and suppliers of copper and aluminium cables coordinated a common calculation of the metal surcharge, which makes up a significant part of the final price; an industry association acted as facilitator. The Protimonopolný úrad Slovenskej republiky (Antimonopoly Office of the Slovak Republic, PMÚ SR) imposed a total of 97,434,800 EUR, the highest amount in a single proceeding; two leniency applicants were not fined (not final). Addressees: ELKOND HHK, a.s.; VUKI a.s.; Prysmian Kablo s.r.o.; Prysmian Kabely, s.r.o.; Kablo Vrchlabí s.r.o.; NKT s.r.o.; PRECON s.r.o.; Tele–Fonika Kabely CZ s.r.o.; KABELOVNA KABEX a. s.; Asociace výrobců kabelů a vodičů ČR a SR (leniency applicants without a fine: ICS Industrial Cables Slovakia, PRAKAB).

What organisations can take from it

A coordinated calculation formula for price components is also price fixing – association work needs competition law support.

Relevance to training and awareness

Price coordination via associations and surcharge formulas

Authority / court
Protimonopolný úrad Slovenskej republiky (PMÚ SR)
Area of law
Competition law · Cartels and collusion
Legal basis
Slowakisches Wettbewerbsschutzgesetz (Kartellverbot)
Action
Fine
Status of proceedings
unknown
Sector
Manufacturing and mechanical engineering
Culpability
intentional
Published
11 Mar 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Feb 2026 DPG Media nv; Mediahuis nv; PPP Belgium bv; bpost nv (Kronzeuge)Press concession: 11.9 million EUR for collusion in newspaper delivery tender BelgiumCartels and collusion €11.9m

So that bpost would obtain the state concession for newspaper delivery for 2023–2027, its competitor PPP refrained from submitting a bid and in return received additional delivery volumes from DPG Media and Mediahuis (bid rigging). In a settlement procedure, the Autorité belge de la Concurrence / Belgische Mededingingsautoriteit (Belgian Competition Authority, BMA) imposed 3,786,574 EUR (DPG Media), 7,788,423 EUR (Mediahuis) and 323,486 EUR (PPP); bpost, as leniency applicant, received full immunity.

What organisations can take from it

Agreements on who participates in a tender are hardcore cartels; leniency applicants benefit.

Relevance to training and awareness

Collusion in public tenders

Authority / court
Autorité belge de la Concurrence / Belgische Mededingingsautoriteit (BMA)
Area of law
Competition law · Cartels and collusion
Legal basis
Code de droit économique Art. IV.1; AEUV Art. 101
Action
Fine
Status of proceedings
final
Sector
Media and online platforms
Mitigating circumstances
Leniency programme (immunity for bpost; reductions of 50% and 40% for DPG Media and Mediahuis respectively) and 10% settlement reduction.
Liability of senior managers
Measures against individuals are not reported here.
Published
13 Feb 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Feb 2026 Severn Trent Water LimitedSevern Trent: £1.5m enforcement undertaking after discharges into Broadway Brook United KingdomEmissions and permits €1.72m

The Environment Agency accepted an enforcement undertaking from Severn Trent Water under which the company pays £1,500,000 to Gloucestershire Wildlife Trust, covers the agency's costs and commits to remedial action. It concerns two unauthorised sewage discharges from the Blackminster treatment works near Evesham into Broadway Brook on 12 June and 20 August 2022 and a breach of permit conditions.

What organisations can take from it

An enforcement undertaking avoids prosecution but can still entail payments running into millions.

Relevance to training and awareness

Operating treatment works in line with the permit

Authority / court
Environment Agency
Area of law
Environment and sustainability · Emissions and permits
Legal basis
Reg. 38(1) und 38(2) Environmental Permitting (England and Wales) Regulations 2010/2016
Action
Other
Status of proceedings
final
Sector
Energy and utilities

Original amount 1,500,000 GBP, converted at the ECB reference rate of 12 Feb 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Feb 2026 IMG Academy, LLCOFAC: USD 1.72 million settlement with IMG Academy over school contracts with two sanctioned individuals USABreaches of sanctions and embargoes €1.45m

School and sports academy IMG Academy, LLC of Bradenton, Florida, is paying USD 1,720,000 under a settlement with OFAC for apparent violations of the counternarcotics sanctions. According to OFAC's findings, between 2019 and 2025 IMG Academy entered into tuition agreements for the children of two individuals on the SDN List because of their ties to a sanctioned Mexican drug cartel and processed the related payments; 89 dealings were involved in total. OFAC treated the apparent violations as non-egregious and not voluntarily self-disclosed because an investigation was already under way when the academy reported them; the settlement amount equals the base penalty. Source: U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC), enforcement release "IMG Academy, LLC Settles with OFAC for $1.7 Million Related to Apparent Violations of Counternarcotics Sanctions", 12 February 2026, https://ofac.treasury.gov/media/935006/download?inline; summarised in our own words.

Authority / court
U.S. Department of the Treasury, Office of Foreign Assets Control (OFAC)
Area of law
Sanctions and export control · Breaches of sanctions and embargoes
Legal basis
Foreign Narcotics Kingpin Sanctions Regulations, 31 C.F.R. § 598.202 (89 mutmaßliche Verstöße); Vergleich nach den Economic Sanctions Enforcement Guidelines, 31 C.F.R. part 501, app. A
Action
Fine
Status of proceedings
final
Sector
Other
Published
12 Feb 2026

Original amount 1,720,000 USD, converted at the ECB reference rate of 12 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Feb 2026 Louis Vuitton BVOM: €500,000 penalty order for Louis Vuitton BV over inadequate customer checks NetherlandsCustomer due diligence €500,000

The Openbaar Ministerie (OM, Dutch Public Prosecution Service) imposed a penalty order of 500,000 EUR on the Dutch Louis Vuitton BV for breaches of the Wwft (Dutch Anti-Money Laundering and Anti-Terrorist Financing Act) because, over a long period, the company did not sufficiently check who the customers were who repeatedly spent large amounts in cash. The case arises from ongoing money laundering proceedings in which, according to the OM, a buyer spent a total of more than 2 million EUR of criminal proceeds under various names on luxury goods in shops such as those of Louis Vuitton between August 2021 and February 2023 and sent the bags to China for resale; a then sales employee allegedly helped her and warned her whenever she was about to spend more than 10,000 EUR a month through one of her customer accounts. The OM settled the matter out of court to free up scarce hearing capacity at the Rechtbank Rotterdam (Rotterdam District Court).

What organisations can take from it

Luxury retailers must spot repeated cash purchases by the same person under different names and make staff aware of attempts to circumvent reporting thresholds.

Relevance to training and awareness

Cash transactions in luxury retail, structuring and staff involvement

Authority / court
Openbaar Ministerie (OM), Landelijk Parket
Area of law
Money laundering and terrorist financing · Customer due diligence
Legal basis
Wet ter voorkoming van witwassen en financieren van terrorisme (Wwft), Kundenprüfung; Strafbefehl des OM
Action
Fine
Status of proceedings
unknown
Sector
Retail and e-commerce
Published
12 Feb 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Feb 2026 UAB „Manado“, MB „Parts ready“Manado and Parts ready: cartel in Vilnius public transport spare parts tender LithuaniaCartels and collusion €41,080

In two tenders by ‘Vilniaus viešasis transportas’ for vehicle spare parts (May–October 2025), the dealers coordinated bids and prices, wrote the bids for each other and sent them from the same computer. The contracting entity reported the suspicion. Following acknowledgement (minus 15%), fines of 17,950 EUR (Manado) and 23,130 EUR (Parts ready). Source: archived copy of the press release.

What organisations can take from it

Even jointly prepared bids by small dealers are a cartel – and contracting entities increasingly recognise such patterns.

Relevance to training and awareness

Competition law in tenders

Authority / court
Konkurencijos taryba (Litauischer Wettbewerbsrat)
Area of law
Competition law · Cartels and collusion
Legal basis
Konkurencijos įstatymas (verbotene Vereinbarungen)
Action
Fine
Status of proceedings
unknown
Sector
Automotive
Mitigating circumstances
Acknowledgement of the infringement (15% reduction)
Published
12 Feb 2026

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

12 Feb 2026 Peter the Chef Fine Food LimitedPeter the Chef Fine Food: four CFIA penalties totalling 41,600 CAD (food safety) Canada, ONOther €25,794

On a single day, the Canadian Food Inspection Agency (CFIA) imposed four administrative monetary penalties on the food manufacturer in Ontario under the Safe Food for Canadians Act (s. 17(1)) and the Safe Food for Canadians Regulations (ss. 49, 88, 90(1)): 13,000, 11,000, 11,000 and 6,600 CAD, totalling 41,600 CAD.

What organisations can take from it

Preventive controls and documentation under food safety law are sanctioned individually – several gaps quickly add up.

Authority / court
Canadian Food Inspection Agency (CFIA)
Area of law
Other
Legal basis
Safe Food for Canadians Act, s. 17(1); Safe Food for Canadians Regulations, ss. 49, 88, 90(1)
Action
Fine
Status of proceedings
final
Sector
Food and agriculture

Original amount 41,600 CAD, converted at the ECB reference rate of 12 Feb 2026.

Sources

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Feb 2026 Applied Materials, Inc. und Applied Materials Korea, Ltd.Applied Materials pays 252 million USD for chip equipment exports to China USAExport control and dual-use goods €212.2m

In 2021 and 2022, Applied Materials and its Korean subsidiary exported ion implanters for semiconductor manufacturing worth around 126 million USD via Korea without a licence to a Chinese company placed on the Entity List in 2020. The penalty imposed by the US Commerce Department's Bureau of Industry and Security (BIS) corresponds to twice the transaction value and thus the statutory maximum; the compliance staff and executives responsible are no longer with the company.

What organisations can take from it

Routing through foreign subsidiaries does not remove the licence requirement; export control needs audits and clear accountability of management.

Relevance to training and awareness

Entity List screening for deliveries via subsidiaries

Authority / court
U.S. Department of Commerce, Bureau of Industry and Security (BIS)
Area of law
Sanctions and export control · Export control and dual-use goods
Legal basis
Export Administration Regulations (Entity List)
Action
Fine
Status of proceedings
final
Sector
Manufacturing and mechanical engineering
Employees
10,000 or more
Liability of senior managers
According to BIS, the responsible compliance staff and senior executives from sales and production are no longer employed.
Published
12 Feb 2026

Original amount 252,500,300 USD, converted at the ECB reference rate of 11 Feb 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Feb 2026 Disney DTC, LLC und ABC Enterprises, Inc. (The Walt Disney Company)California: $2.75 million against Disney over incomplete opt-outs for streaming USA, CACookies and tracking €2.31m

Disney implemented objections to the sale and sharing of data only for individual services or devices rather than across the whole account, continued to disclose data via embedded ad-tech providers and offered no opt-out in connected TV apps. It was the largest CCPA settlement at the time of the agreement with the Attorney General of California.

What organisations can take from it

An opt-out must take effect across all services, devices and integrated third-party providers of an account.

Authority / court
Attorney General of California (California Department of Justice)
Area of law
Data protection · Cookies and tracking
Legal basis
California Consumer Privacy Act (CCPA)
Action
Fine
Status of proceedings
final
Sector
Media and online platforms
Employees
10,000 or more
Published
11 Feb 2026

Original amount 2,750,000 USD, converted at the ECB reference rate of 11 Feb 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

11 Feb 2026 Liga do Futebol Brasileiro (Libra), Clube de Regatas do Flamengo, Sociedade Esportiva Palmeiras u. a. (6 Organisationen)CADE: football league Libra and five clubs pay BRL 559,267.26 for gun jumping BrazilMerger control €90,565

The CADE Tribunal found that the Libra league, as a joint venture of clubs for the joint commercialisation of broadcasting and commercial rights, was notifiable and had been implemented before clearance, and approved a settlement (Acordo em APAC) with Libra and Flamengo, Palmeiras, Santos, São Paulo and Grêmio with an alleged pecuniary contribution of 559,267.26 BRL. The parties must notify the transactions already completed within 60 days and report changes to their commercialisation structures for three years; for the rival league FFU (formerly LFU) no infringement was found because the turnover thresholds were not met. The amount and the facts have not been confirmed against the primary source.

What organisations can take from it

Clubs and associations that market rights jointly may form a notifiable joint venture and must obtain clearance before launch.

Relevance to training and awareness

Joint commercialisation of rights as a notifiable joint venture

Authority / court
Conselho Administrativo de Defesa Econômica (CADE), Tribunal Administrativo
Area of law
Competition law · Merger control
Legal basis
Art. 88 § 3 Lei nº 12.529/2011
Action
Other
Status of proceedings
final
Sector
Media and online platforms
Published
11 Feb 2026

Original amount 559,267.26 BRL, converted at the ECB reference rate of 11 Feb 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Feb 2026 J.P. Morgan SEJ.P. Morgan SE: €12.18m ECB penalty for misreporting risk-weighted assets EU levelDisclosure and reporting obligations €12.2m

The ECB imposed two penalties on J.P. Morgan SE: 10,150,000 EUR because the bank misclassified corporate exposures in 15 quarterly reports (end-2019 to mid-2023) and reported risk-weighted assets for credit risk that were too low, and 2,030,000 EUR because it wrongly excluded transactions from the calculation of credit valuation adjustment (CVA) risk in 21 reporting periods (2019 to 2024). The ECB regarded both as seriously negligent, caused by evident deficiencies in internal processes; as a result, the reported capital ratios were too high.

What organisations can take from it

Classification of exposures for regulatory reporting needs effective controls; otherwise incorrect capital ratios become a sanctions risk.

Relevance to training and awareness

Accuracy of supervisory reporting

Authority / court
Europäische Zentralbank (EZB), Bankenaufsicht
Area of law
Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis
Art. 430 Abs. 1 Buchst. a VO (EU) Nr. 575/2013 (CRR); Art. 18 Abs. 1 VO (EU) Nr. 1024/2013
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Culpability
negligent
Mitigating circumstances
The bank identified and reported the breaches itself, cooperated and took remedial action.
Published
19 Feb 2026

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Feb 2026 Strukton Civiel Projecten B.V. und Strukton International B.V. (Strukton-Gruppe)Construction group Strukton pays 10 million EUR out-of-court settlement over bribery on the Riyadh Metro NetherlandsBribery of public officials €10m

To secure a share in the Riyadh Metro project, around 31 million USD was paid between 2013 and 2021 to an agent representing a high-ranking member of the Saudi royal family; the agent payments were understated to the export credit insurer Atradius. Strukton accepted a transaction (out-of-court settlement) of 10 million EUR.

What organisations can take from it

Commissions to agents with ties to ruling families carry the highest risk – and false statements to export credit insurers constitute a second offence.

Relevance to training and awareness

Agent commissions and false statements to export credit insurers

Authority / court
Openbaar Ministerie (OM)
Area of law
Bribery and corruption · Bribery of public officials
Legal basis
Buitenlandse ambtelijke omkoping und valsheid in geschrift (Wetboek van Strafrecht); Transactie nach Art. 74 Sr
Action
Fine
Status of proceedings
final
Sector
Construction and real estate
Culpability
intentional
Mitigating circumstances
Cooperation from mid-2023; compliance programme in place since 2017; the employees involved are no longer with the company.
Published
30 Mar 2026

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

10 Feb 2026 Paxful Holdings Inc.Crypto platform Paxful: 4 million USD penalty after guilty plea to BSA infringements USAInternal controls €3.36m

Following a guilty plea to charges including conspiracy to operate an unlicensed money transmitting business and to violate the AML obligations of the Bank Secrecy Act, the peer-to-peer crypto platform was sentenced to a penalty of 4 million USD. 112.5 million USD would have been appropriate, but the US Department of Justice (DOJ) found an inability to pay; in December 2025, FinCEN had additionally imposed a civil penalty of 3.5 million USD.

What organisations can take from it

Crypto platforms without registration and KYC face criminal liability – up to the limit of their ability to pay.

Authority / court
U.S. Department of Justice
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
Travel Act; Verschwörung zum Betrieb eines nicht lizenzierten Geldtransfergeschäfts und zur Verletzung der AML-Pflichten des Bank Secrecy Act
Action
Fine
Status of proceedings
final
Sector
Financial services and insurance
Culpability
intentional
Mitigating circumstances
Penalty limited from 112.5 million to 4 million USD because of proven inability to pay
Published
11 Feb 2026

Original amount 4,000,000 USD, converted at the ECB reference rate of 10 Feb 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Feb 2026 FIIG Securities LimitedFIIG Securities: 2.5 million AUD for inadequate cyber security ahead of data theft AustraliaSecurity measures and risk management €1.48m

The Federal Court of Australia, on application by the Australian Securities and Investments Commission (ASIC, Australia's corporate, markets and financial services regulator), imposed a penalty of 2.5 million AUD on the fixed-income specialist because between March 2019 and June 2023 it lacked adequate cyber security measures, resources and risk management systems – among other things, there was no multi-factor authentication for remote access, no regular penetration testing and no mandatory security awareness training. In a 2023 attack around 385 GB of confidential data were stolen and some 18,000 clients were notified; the court also ordered a compliance programme with an independent expert.

What organisations can take from it

For licensed financial services firms, cyber security is part of their licence obligations: basic measures such as MFA, patching, monitoring, training and a tested incident response plan must be funded and actually implemented.

Relevance to training and awareness

Cyber security basics: multi-factor authentication, patch management, security awareness training, tested incident response plan

Missing or inadequate training played a role in the decision.

Authority / court
Federal Court of Australia (auf Antrag der Australian Securities and Investments Commission, ASIC)
Area of law
Information security and cyber · Security measures and risk management
Legal basis
Corporations Act 2001 (Cth) s 912A(1)(a), (d) und (h) i. V. m. s 912A(5A)
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Repeat case
no
Mitigating circumstances
Full cooperation, admissions and an agreed statement of facts; no previous contraventions; the known financial losses (remediation costs of around 1.5 million AUD) were largely borne by the company itself.
Published
9 Feb 2026

Original amount 2,500,000 AUD, converted at the ECB reference rate of 9 Feb 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

9 Feb 2026 Kylin International (HK) Co., LimitedSFC: HKD 9m fine for Kylin International over fund management failures Hong KongOrganisational requirements €968,909

The SFC publicly reprimanded Kylin International (HK) and fined it HKD 9 million for failures as investment manager or consultant of six sub-funds of a Cayman Islands fund from August 2018. The SFC found that conflicts of interest arising from six loans by the firm or a director to four sub-funds were neither managed nor disclosed, reconciliations, valuations and audits were missing, investors were wrongly told that the suitability requirement did not apply, KYC and suitability controls were inadequate and anti-money laundering records were missing. The firm ceased its regulated activities at the end of 2023; its licence was revoked at its request in January 2025.

What organisations can take from it

Loans from a manager or its senior management to funds under management are a conflict of interest that must be managed and disclosed to investors.

Relevance to training and awareness

Conflicts of interest and investor information in private fund management

Authority / court
Securities and Futures Commission (SFC), Hongkong
Area of law
Capital markets and financial supervision · Organisational requirements
Legal basis
Section 194 Securities and Futures Ordinance (Cap. 571)
Action
Fine
Status of proceedings
unknown
Sector
Financial services and insurance
Repeat case
no
Mitigating circumstances
Remedial measures after an SFC review in late 2020, cessation of regulated activities and an otherwise clean disciplinary record.
Liability of senior managers
Measures against individuals are not set out here.
Published
9 Feb 2026

Original amount 9,000,000 HKD, converted at the ECB reference rate of 9 Feb 2026.

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

6 Feb 2026 La Société Canadian Tire ltéeCanadian Tire: CAD 1.29m in fines over false reference prices in Quebec Canada, QuébecMisleading advertising and pricing €798,827

From April to October 2021 the Office de la protection du consommateur (OPC, Quebec's consumer protection office) checked the prices of seven advertised products in flyers, online and in three stores in the greater Montréal area: the regular prices cited as the reference were actually charged in only a very small share of sales. Canadian Tire pleaded guilty, for five of the products, to stating false reference prices contrary to s. 225(b) of the Loi sur la protection du consommateur (LPC, Quebec Consumer Protection Act) and must pay fines totalling CAD 1,287,550 including costs on 74 counts.

What organisations can take from it

Was-prices and discount claims must be based on prices at which the goods were actually sold in meaningful volumes.

Relevance to training and awareness

Was-now pricing and discount advertising

Authority / court
Gericht in Montréal (Ermittlung: Office de la protection du consommateur (OPC); Anklage: Directeur des poursuites criminelles et pénales (DPCP))
Area of law
Consumer protection and online retail · Misleading advertising and pricing
Legal basis
Loi sur la protection du consommateur (RLRQ c. P-40.1), Art. 225 b)
Action
Fine
Status of proceedings
final
Sector
Retail and e-commerce
Employees
10,000 or more
Published
6 Feb 2026

Original amount 1,287,550 CAD, converted at the ECB reference rate of 6 Feb 2026.

Sources

Checked against the official source on 3 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

5 Feb 2026 DPD Polska sp. z o.o.DPD Polska: PLN 11.46m in fines, including for missing data processing agreements PolandData processors €2.72m

The UODO (Urząd Ochrony Danych Osobowych, Polish data protection authority) fined the parcel carrier DPD Polska sp. z o.o. a total of PLN 11,461,030. PLN 6,251,471 relates to the company using external hauliers for shipments between its depots without a data processing agreement under Art. 28(3) GDPR, although they had access to the address labels during loading and unloading; PLN 5,209,559 relates to staff not being given effective authorisations to process data and the company's own data protection policy not being implemented (Art. 24, 29, 32 GDPR). The authority classed both infringements as intentional and treated earlier reprimands against the company as aggravating. The decision is not final.

What organisations can take from it

Even pure transport providers can be processors if they have access to personal data such as address labels – an Art. 28 GDPR contract is then mandatory.

Relevance to training and awareness

Recognising data processing by logistics and transport providers

Authority / court
Prezes Urzędu Ochrony Danych Osobowych (UODO)
Area of law
Data protection · Data processors
Legal basis
Art. 28 Abs. 3 i. V. m. Art. 5 Abs. 1 lit. a und Abs. 2 DSGVO; Art. 24 Abs. 1 und 2, Art. 29, Art. 32 Abs. 1 und 4 i. V. m. Art. 5 Abs. 1 lit. f und Abs. 2 DSGVO; Art. 83 Abs. 4 lit. a und Abs. 5 lit. a DSGVO
Action
Fine
Status of proceedings
unknown
Sector
Transport, logistics and shipping
Culpability
intentional
Repeat case
yes
Mitigating circumstances
It was treated as mitigating that, after the proceedings were opened, DPD amended its contracts with the hauliers to include data processing terms and changed its procedure for granting authorisations.
Liability of senior managers
No personal liability was established.
Published
23 Feb 2026

Original amount 11,461,030 PLN, converted at the ECB reference rate of 5 Feb 2026.

Checked against the official source on 28 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Feb 2026 Alco Harvesting LLC dba Bonipak Produce Inc. und verbundene UnternehmenBonipak: $6.175 million for farmworkers over undisclosed paid sick leave USA, CAMinimum wage and undeclared work €5.22m

Following the COVID death of a farmworker in employer-provided housing, the California Labor Commissioner's Office sued the agricultural business in Santa Maria in 2021: more than 10,000 farmworkers, including H-2A seasonal workers, had not been informed of their entitlement to paid sick leave; in addition, there was unpaid travel time as well as overtime and minimum wage violations. The settlement of $6,175,000 (of which $4.2 million goes directly to workers) includes posting and reporting obligations.

What organisations can take from it

Information obligations towards seasonal workers are not a formality – companies that leave workers in the dark about paid sick leave are liable for the consequences.

Authority / court
California Labor Commissioner's Office (Division of Labor Standards Enforcement)
Area of law
Health and safety and employment law · Minimum wage and undeclared work
Legal basis
California Labor Code (Paid Sick Leave, COVID-19 Supplemental Paid Sick Leave, Mindestlohn, Überstunden)
Action
Other
Status of proceedings
final
Sector
Food and agriculture
Published
4 Feb 2026

Original amount 6,175,000 USD, converted at the ECB reference rate of 4 Feb 2026.

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Feb 2026 MediaLab.AI, Inc.ICO: £247,590 fine for Imgur operator MediaLab over children's data without age checks United KingdomData protection €287,361

The ICO fined MediaLab.AI, Inc., which operated the Imgur platform in the UK until 30 September 2025, £247,590. The ICO found that Imgur admitted children under 13, stated to be under parental supervision, and relied on consent as its lawful basis, but it had no way of establishing users' ages and therefore of obtaining the required parental consent. The ICO therefore found there was no valid lawful basis and also found that no data protection impact assessment had been carried out (Articles 5(1)(a), 6, 8 and 35 UK GDPR).

Authority / court
Information Commissioner's Office (ICO)
Area of law
Data protection
Legal basis
Art. 5(1)(a), 6, 8 und 35 UK GDPR; section 155(1)(a) DPA 2018
Action
Fine
Status of proceedings
unknown
Sector
Media and online platforms

Original amount 247,590 GBP, converted at the ECB reference rate of 4 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 2 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Feb 2026 RE/MAX Twin City Realty Inc.FINTRAC: CAD 24,750 penalty on RE/MAX Twin City Realty Inc. for one violation of anti-money laundering obligations CanadaInternal controls €15,336

According to FINTRAC, RE/MAX Twin City Realty Inc. is a real estate brokerage based in Kitchener, Ontario. Canada's anti-money laundering regulator FINTRAC imposed an administrative monetary penalty of CAD 24,750 on the company on 4 February 2026. According to FINTRAC's findings, made during a compliance examination, the company committed one violation of the Proceeds of Crime (Money Laundering) and Terrorist Financing Act (PCMLTFA) and its regulations. As described by the regulator, the violation concerned assessing and documenting money laundering and terrorist financing risks. According to FINTRAC, the penalty has been paid in full and the case is closed. Source: FINTRAC (Financial Transactions and Reports Analysis Centre of Canada), "Administrative monetary penalty on RE/MAX Twin City Realty Inc.", published 5 May 2026, https://fintrac-canafe.canada.ca/pen/amps/pen-2026-05-05-1-eng; summarised in our own words; not an official version and not a reproduction of the original.

Authority / court
Financial Transactions and Reports Analysis Centre of Canada (FINTRAC)
Area of law
Money laundering and terrorist financing · Internal controls
Legal basis
PCMLTFA s. 9.6(1); PCMLTF Regulations 156(1)(c); Verwaltungsgeldbuße nach Teil 4.1 PCMLTFA
Action
Fine
Status of proceedings
final
Sector
Construction and real estate
Published
5 May 2026

Original amount 24,750 CAD, converted at the ECB reference rate of 4 Feb 2026.

Checked against the official source on 28 Sep 2026 · Version 3 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

4 Feb 2026 Amazon.com, Inc., Amazon EU S.à r.l.Bundeskartellamt bans Amazon price controls and orders disgorgement of around 59 million EUR GermanyAbuse of market power Disgorgement of profits

The Bundeskartellamt (Federal Cartel Office) prohibited Amazon from steering third-party sellers' prices on amazon.de through price control mechanisms that deactivate offers deemed too expensive or exclude them from the 'Buy Box'; such mechanisms are now only permitted exceptionally, for instance in cases of price gouging, with transparent rules and notifications. At the same time, for the first time since the 2023 reform, the authority ordered disgorgement of economic benefits: for the period from 7 November 2023 to 31 December 2024 Amazon must pay around 58.8 million EUR (press release: around 59 million EUR; the exact amount is redacted in the public version).

What organisations can take from it

A platform operator that also sells on its platform must not steer sellers' prices through visibility sanctions and risks having the resulting benefits disgorged.

Relevance to training and awareness

Platform operators interfering in sellers' pricing

Authority / court
Bundeskartellamt
Area of law
Competition law · Abuse of market power
Legal basis
§ 19a Abs. 2 S. 1 Nr. 2 GWB, § 19 Abs. 1, Abs. 2 Nr. 1 GWB, Art. 102 AEUV; Vorteilsabschöpfung nach § 34 Abs. 1 GWB (Az. B2-73/20)
Action
Disgorgement of profits
Status of proceedings
unknown
Sector
Retail and e-commerce
Employees
10,000 or more
Culpability
intentional
Published
5 Feb 2026

Checked against the official source on 2 Oct 2026 · Direct link

Report an error

Anonymous: we store only your text, no contact details and no IP address.

Load 20 more of 1165

Ready for training that actually lands?

Try the combination for free: automated administration for you, learning formats that fit your team, with no minimum or credit card.

Start 14-day free trial