Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 1,337 cases from 34 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by authority- Samkeppniseftirlitið €11.2m 74 % · 2 cases
- Seðlabanki Íslands – Fjármálaeftirlit (Finanzaufsicht) €3.9m 26 % · 1 case
- Persónuvernd €33,978 0 % · 2 cases
What for?
by area of lawAll areas of law
Who?
by sectorAll sectors
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 1 | €23,891 |
| Q1 2024 | 1 | €10,087 |
| Q2 2024 | 1 | €3.9m |
| Q3 2024 | 0 | — |
| Q4 2024 | 0 | — |
| Q1 2025 | 0 | — |
| Q2 2025 | 0 | — |
| Q3 2025 | 1 | €9.79m |
| Q4 2025 | 0 | — |
| Q1 2026 | 1 | €1.39m |
| Q2 2026 | 0 | — |
| Q3 2026 | 0 | — |
5 cases
18 Mar 2026 Míla hf.Iceland: Míla pays 200 million ISK for breaching merger conditions €1.39m
The telecoms infrastructure company Míla hf. admitted in a settlement with Samkeppniseftirlitið (Icelandic Competition Authority) that from October 2023 to December 2024 it had breached the conditions of the September 2022 settlement on its acquisition by Ardian: the frequency and scope of its contacts with Síminn were liable to weaken Síminn's incentive to buy wholesale services from Míla's competitors beyond its contractual purchase obligation. Míla pays a fine of 200,000,000 ISK and accepts additional conditions; at the same time, some conditions were limited, owing to changed market conditions, to areas where Míla has significant market power.
Merger conditions also apply to day-to-day sales contact; companies subject to them must check and document customer outreach and sales activities against the conditions.
Complying with merger conditions in day-to-day business, especially in contact with major customers
- Authority / court
- Samkeppniseftirlitið
- Area of law
- Competition law · Merger control
- Legal basis
- Verstoß gegen Fusionsauflagen (Art. 4 und 8 eines früheren Vergleichs); Vergleich nach Art. 17f Abs. 1 Samkeppnislög Nr. 44/2005 (isländisches Wettbewerbsgesetz)
- Action
- Fine
- Status of proceedings
- final
- Sector
- Telecoms, IT and software
- Published
- 19 Mar 2026
Original amount 200,000,000 ISK, converted at the ECB reference rate of 18 Mar 2026.
- Sátt Mílu hf. og Samkeppniseftirlitsins (Reykjavík, 18. mars 2026) Decision of an authority
- Samkeppniseftirlitið: Rannsókn á Mílu lokið með stjórnvaldssektum og endurskoðun á skilyrðum (19. mars 2026) Press release of an authority
Checked against the official source on 28 Sep 2026 · Direct link
Report an error
18 Aug 2025 LandsvirkjunIceland: Landsvirkjun fined 1.4 billion ISK for margin squeeze €9.79m
Samkeppniseftirlitið (Icelandic Competition Authority) found that the dominant electricity producer Landsvirkjun, from 2017 to 2021, in many cases bid lower in the tenders of grid operator Landsnet for transmission losses than the price at which it sold wholesale electricity to competitors, so that they could only keep up at a loss (margin squeeze). The authority classified this as an intentional abuse of a dominant position and imposed a fine of 1,400,000,000 ISK; aggravating factors were the long duration and the fact that the conduct increased after Landsvirkjun knew of the investigation.
A dominant company that also supplies its competitors must price its own offers so that these customers can still compete profitably on the downstream market.
Abuse of market power: margin squeeze against competitors who are also customers
- Authority / court
- Samkeppniseftirlitið
- Area of law
- Competition law · Abuse of market power
- Legal basis
- Art. 11 Samkeppnislög Nr. 44/2005 (isländisches Wettbewerbsgesetz) und Art. 54 EWR-Abkommen; Geldbuße nach Art. 37 Samkeppnislög
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Energy and utilities
- Culpability
- intentional
- Published
- 18 Aug 2025
Original amount 1,400,000,000 ISK, converted at the ECB reference rate of 18 Aug 2025.
- Samkeppniseftirlitið: Ákvörðun nr. 29/2025 – Ólögmætur verðþrýstingur Landsvirkjunar á raforkumarkaði (18. ágúst 2025) Decision of an authority
- Samkeppniseftirlitið: Ákvörðun 29/2025 (Übersichtsseite mit Datum und Unternehmen) Decision of an authority
- Samkeppniseftirlitið: Landsvirkjun sektuð vegna alvarlegra brota á samkeppnislögum (18. ágúst 2025) Press release of an authority
Checked against the official source on 28 Sep 2026 · Direct link
Report an error
2 May 2024 an Icelandic commercial bankIceland: commercial bank pays 585 million ISK over anti-money laundering failings €3.9m
The financial supervisory authority of Seðlabanki Íslands (Central Bank of Iceland) concluded proceedings against an Icelandic commercial bank with a settlement in which the bank admitted breaches of Act No. 140/2018 on anti-money laundering, pays 585,000,000 ISK and commits to remedial measures. An on-site inspection in 2022 had found deficiencies in risk assessment, risk classification of business relationships, anonymous transactions, due diligence on foreign financial institutions, enhanced due diligence, business with a high-risk country and ongoing monitoring, including the traceability of cash transactions; some breaches repeated findings from a 2020 inspection.
Findings from a supervisory inspection must be remedied for good, because repeated deficiencies count towards a higher sanction.
Money laundering prevention: risk assessment, enhanced due diligence and cash transactions
- Authority / court
- Seðlabanki Íslands – Fjármálaeftirlit (Finanzaufsicht)
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- Art. 5 Abs. 1, 7 Abs. 1, 10 Abs. 1, 2, 4 Bst. a und 5, 13 Abs. 1 Bst. c, 3 und 4, 15, 21 Abs. 1 Bst. a und 2 sowie 34 Abs. 1 Gesetz Nr. 140/2018 über Maßnahmen gegen Geldwäsche und Terrorismusfinanzierung (damalige Fassung) i.V.m. Verordnung Nr. 745/2019; Geldbuße nach Art. 46 Abs. 1, Vergleich nach Art. 47 Gesetz Nr. 140/2018
- Action
- Fine
- Status of proceedings
- final
- Sector
- Financial services and insurance
- Repeat case
- yes
- Mitigating circumstances
- Willingness to cooperate: the bank took the inspection findings seriously and took the initiative on remediation.
- Published
- 28 Jun 2024
Original amount 585,000,000 ISK, converted at the ECB reference rate of 2 May 2024.
- Seðlabanki Íslands, Nachrichten und Veröffentlichungen (Übersicht) (Entscheidung 2024) Press release of an authority
Checked against the official source on 28 Sep 2026 · Company name anonymised since 2 May 2026 · Direct link
Report an error
12 Mar 2024 an Icelandic operator of a fast-food restaurant chainIceland: fast-food chain operator fined for using CCTV to monitor staff performance €10,087
Persónuvernd (Icelandic Data Protection Authority) fined the operator of a fast-food restaurant chain in Iceland 1,500,000 ISK because the manager of one outlet had used footage from the surveillance cameras to check an employee's work and had produced annotated screenshots for that purpose. The authority found this to be unlawful processing outside the declared purpose of the surveillance and also criticised signs that did not name the controller and inadequate information for employees; it ordered the company to delete the screenshots, put up compliant signs in its outlets, inform employees and keep a record of processing activities.
Footage from security cameras must not be used on the side to monitor staff performance, and anyone with access to it must know what they may use it for.
Workplace video surveillance: no performance monitoring without a separate legal basis
Missing or inadequate training played a role in the decision.
- Authority / court
- Persónuvernd
- Area of law
- Data protection · Employee data
- Legal basis
- Art. 5 Abs. 1 Bst. a–c, Art. 6 Abs. 1, Art. 12 und 13 DSGVO; §§ 8, 9, 14 Abs. 1 und 4 und 17 Gesetz Nr. 90/2018 (isländisches Datenschutzgesetz); Regeln Nr. 837/2006 über elektronische Überwachung; Geldbuße nach § 46 Abs. 3 Gesetz Nr. 90/2018 i.V.m. Art. 83 Abs. 5 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Food and agriculture
- Culpability
- negligent
- Mitigating circumstances
- Only one outlet and relatively few people affected, no proven direct damage, only one documented instance of performance monitoring.
- Liability of senior managers
- The monitoring was carried out by the manager of one outlet; the authority stated that companies must instruct employees who have access to footage. The fine was imposed on the operating company.
- Published
- 20 Mar 2024
Original amount 1,500,000 ISK, converted at the ECB reference rate of 12 Mar 2024.
- Persónuvernd, Entscheidungen (Übersicht) (Entscheidung 2024) Decision of an authority
Checked against the official source on 28 Sep 2026 · Company name anonymised since 12 Mar 2026 · Direct link
Report an error
17 Oct 2023 an Icelandic event hall operatorIceland: event hall operator fined over CCTV surveillance at events €23,891
Persónuvernd (Icelandic Data Protection Authority) fined the operator of an Icelandic event hall 3,500,000 ISK after finding on 7 February 2023 that video surveillance during events held by third parties took place without a legal basis, without a specified legitimate purpose and without adequate information. Weighing heavily was that the cameras also covered rooms where children and young people stayed overnight as well as Covid-19 mass vaccinations, and that the surveillance had affected a very large number of people since at least 2008.
Video surveillance at event venues needs a clearly defined purpose and a legal basis and must not capture sensitive situations such as children staying overnight or healthcare services.
Video surveillance at event venues: purpose, legal basis and sensitive areas
- Authority / court
- Persónuvernd
- Area of law
- Data protection · Video surveillance
- Legal basis
- Art. 5 Abs. 1 Bst. a und b, Art. 5 Abs. 2, Art. 6 Abs. 1 und Art. 13 DSGVO; § 8 Abs. 1 Nr. 1 und 2 und Abs. 2, §§ 9 und 17 Abs. 2 Gesetz Nr. 90/2018 (isländisches Datenschutzgesetz); Geldbuße nach § 46 Abs. 3 Gesetz Nr. 90/2018 i.V.m. Art. 83 Abs. 5 DSGVO
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Other
- Mitigating circumstances
- There was signage, albeit inadequate; the company cooperated with the authority and partly implemented the earlier orders; no financial damage (given little weight by the authority).
- Published
- 17 Oct 2023
Original amount 3,500,000 ISK, converted at the ECB reference rate of 17 Oct 2023.
- Persónuvernd, Entscheidungen (Übersicht) (Entscheidung 2023) Decision of an authority
Checked against the official source on 28 Sep 2026 · Company name anonymised since 17 Oct 2025 · Direct link