Compliance Radar
Who was sanctioned, and for what?
Fines, court rulings and incidents from Europe and North America: 718 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.
Click a bar to drill down one level.
Where?
by authority- Commissariat aux Assurances (CAA) €3.34m 95 % · 6 cases
- Commission nationale pour la protection des données (CNPD) – formation restreinte €182,000 5 % · 2 cases
- Cour administrative (Luxemburg); Verfahren der CNPD — 0 % · 1 case
What for?
by area of lawAll areas of law
Who?
by sectorAll sectors
When?
per quarter, by date of decision| Period | Cases | Total |
|---|---|---|
| Q3 2023 | 0 | — |
| Q4 2023 | 1 | €790,000 |
| Q1 2024 | 1 | €1.68m |
| Q2 2024 | 0 | — |
| Q3 2024 | 0 | — |
| Q4 2024 | 0 | — |
| Q1 2025 | 1 | €175,000 |
| Q2 2025 | 1 | €7,000 |
| Q3 2025 | 2 | €250,000 |
| Q4 2025 | 1 | — |
| Q1 2026 | 2 | €615,000 |
| Q2 2026 | 0 | — |
| Q3 2026 | 0 | — |
9 cases
12 Mar 2026 Amazon Europe Core S.à r.l.Luxembourg: Cour administrative annuls 746 million EUR fine against Amazon but confirms infringements overturned
In 2021, the Luxembourg data protection authority (CNPD) had imposed 746 million EUR and an order to bring processing into compliance on account of behavioural online advertising; the Administrative Tribunal (Tribunal administratif) confirmed this on 18 March 2025. On 12 March 2026, the Administrative Court (Cour administrative) confirmed that legitimate interest was not a sound legal basis and that the information was insufficient, but annulled the fine on the basis of more recent CJEU case law on the requirement of culpability; the CNPD is re-examining the sanction.
Personalised advertising cannot be based on legitimate interest – and courts now scrutinise culpability closely when it comes to fines.
- Authority / court
- Cour administrative (Luxemburg); Verfahren der CNPD
- Area of law
- Data protection · Marketing and consent
- Legal basis
- Art. 6 Abs. 1 lit. f, Art. 12 ff. DSGVO
- Action
- Order
- Status of proceedings
- overturned
- Sector
- Retail and e-commerce
- Employees
- 10,000 or more
- Mitigating circumstances
- Amazon had implemented the compliance order before the hearing.
- La CNPD obtient la mise en conformité effective des traitements d'Amazon (Arrêt de la Cour administrative du 12 mars 2026) Press release of an authority
- Décision concernant Amazon Europe Core S.À R.L. (Tribunal administratif, 18 mars 2025) Press release of an authority
- Justice Luxembourg – Arrêt de la Cour administrative du 12 mars 2026 (n° 52757C du rôle), Amazon/CNPD Court press release
- Justice Luxembourg – Jugement du tribunal administratif du 18 mars 2025, Amazon/CNPD Court press release
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
20 Jan 2026 Cardif Lux Vie S.A.Cardif Lux Vie: 615,000 EUR over deficiencies in money laundering questionnaires and customer files €615,000
An on-site inspection in 2023 revealed that the life insurer in some cases did not handle the mandatory money laundering risk assessment questionnaires in compliance with the rules, that the employees responsible lacked sufficiently precise instructions and that customer files contained many incorrect answers. The Commissariat aux Assurances (Luxembourg insurance supervisory authority, CAA) imposed 615,000 EUR.
Risk questionnaires are only as good as the guidance given to those who complete them – clear work instructions and training are part of this.
Money laundering risk assessment by employees
- Authority / court
- Commissariat aux Assurances (CAA)
- Area of law
- Money laundering and terrorist financing · Customer due diligence
- Legal basis
- Loi modifiée du 12 novembre 2004 (LBC/FT), Art. 2-1, 8-4, 8-5; Règlement CAA 20/03
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Mitigating circumstances
- Close cooperation with the CAA during and after the inspection; remediation plan for all deficiencies submitted promptly.
- Published
- 1 Jul 2026
- CAA – Sanction administrative Cardif Lux Vie S.A. (01.07.2026) Decision of an authority
- CAA – Sanctions et autres mesures administratives Enforcement database of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
13 Oct 2025 Finamore S.A.Finamore: licence of insurance broker withdrawn over serious deficiencies Other
The Commissariat aux Assurances (Luxembourg insurance supervisory authority, CAA) withdrew the broking firm’s licence (effective from 1 December 2025), among other things for using unregistered intermediaries, lacking internal expertise, insufficiently protected confidential data, economically unexplained payment flows with affiliated companies, incomplete or false information provided to the supervisory authority and deficient customer information.
False information to the supervisory authority and unregistered distribution partners can cost the business its existence – not just a fine.
- Authority / court
- Commissariat aux Assurances (CAA)
- Area of law
- Capital markets and financial supervision · Organisational requirements
- Legal basis
- Loi modifiée du 7 décembre 2015 sur le secteur des assurances, Art. 303 Abs. 3 lit. c
- Action
- Other
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Published
- 29 May 2026
- CAA – Sanction administrative FINAMORE S.A. (29.05.2026) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
23 Jul 2025 Condor Courtiers & Conseillers S.à r.l.Condor Courtiers & Conseillers: licence withdrawn for using unlicensed introducers Other
Following an on-site inspection in 2024, the Commissariat aux Assurances (Luxembourg insurance supervisory authority, CAA) withdrew the broker’s licence (effective 15 September 2025): there was no effective management by approved managers, unlicensed ‘introducers’ were de facto selling insurance, and the broker’s licence, together with its sub-intermediary network, was improperly made available to third parties.
A distribution licence is not transferable – anyone who ‘rents it out’ to third parties or lets introducers sell risks having it withdrawn.
- Authority / court
- Commissariat aux Assurances (CAA)
- Area of law
- Capital markets and financial supervision · Organisational requirements
- Legal basis
- Loi modifiée du 7 décembre 2015 sur le secteur des assurances, Art. 273, 274, 283, 286, 303
- Action
- Other
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Published
- 16 Sep 2025
- CAA – Sanction administrative CONDOR COURTIERS & CONSEILLERS S.à r.l. (16.09.2025) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
8 Jul 2025 Barents Reinsurance S.A.Barents Reinsurance: maximum fine of 250,000 EUR over governance deficiencies €250,000
The reinsurer breached the principle of specialisation in reinsurance business, its approved manager was not effectively present on site and had insufficient powers, the governance system including oversight of outsourced functions was inadequate, and orders from a 2019 inspection had not been implemented or only partially. The Commissariat aux Assurances (Luxembourg insurance supervisory authority, CAA) imposed the statutory maximum of 250,000 EUR; the company cooperated.
On-site substance is a supervisory requirement: management, powers and oversight of outsourced functions must genuinely be located in the home country.
- Authority / court
- Commissariat aux Assurances (CAA)
- Area of law
- Capital markets and financial supervision · Organisational requirements
- Legal basis
- Loi modifiée du 7 décembre 2015 sur le secteur des assurances, Art. 49, 71, 81, 274, 303
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Mitigating circumstances
- Cooperation with the CAA during and after the inspection.
- Published
- 8 Aug 2025
- CAA – Sanction administrative BARENTS REINSURANCE S.A. (08.08.2025) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
30 Apr 2025 Luxembourg engineering firm: 7,000 EUR for incomplete record of processing activities €7,000
In an audit campaign on records of processing activities, the Commission nationale pour la protection des données (Luxembourg data protection authority, CNPD) found that an engineering and design consultancy (pseudonymised as ‘Société A’) had omitted mandatory information such as name and contact details, categories of data subjects and data, and retention periods. It imposed 7,000 EUR.
The record of processing activities is the first thing supervisory authorities request – it must be complete, including retention periods.
- Authority / court
- Commission nationale pour la protection des données (CNPD) – formation restreinte
- Area of law
- Data protection
- Legal basis
- DSGVO Art. 30 Abs. 1 lit. a, c, f
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Manufacturing and mechanical engineering
- CNPD – Délibération n° 3FR/2025 du 30 avril 2025 (Société A) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
6 Jan 2025 Luxembourg credit institution: 175,000 EUR for late responses to data subject requests €175,000
Following 47 complaints, the Commission nationale pour la protection des données (Luxembourg data protection authority, CNPD) found that a Luxembourg credit institution (pseudonymised in the decision as ‘Société A’) had not responded to data subjects’ requests on time; the CNPD did not accept the reference to the COVID-19 pandemic. It issued a reprimand (rappel à l’ordre) and imposed 175,000 EUR.
Data subject requests require deadline tracking and a monitored DPO mailbox – staff shortages are no excuse.
Deadlines for data subject requests
- Authority / court
- Commission nationale pour la protection des données (CNPD) – formation restreinte
- Area of law
- Data protection · Data subject rights and transparency
- Legal basis
- DSGVO Art. 12 Abs. 3 und 4
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- CNPD – Délibération n° 1FR/2025 du 6 janvier 2025 (Société A) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
10 Jan 2024 Lombard International Assurance S.A.Lombard International Assurance: 1.68 million EUR over missing overall money laundering risk assessment €1.68m
During an inspection in 2021/2022, the Commissariat aux Assurances (Luxembourg insurance supervisory authority, CAA) found that the life insurer had not prepared an overall assessment of its money laundering risks, that guidance for employees on due diligence obligations (beneficial owners, high-risk countries, PEPs) was inadequate and that it was not checked whether the intermediaries used fulfilled their due diligence obligations. It imposed 1,682,000 EUR.
Without a documented overall risk assessment, a risk-based approach cannot be demonstrated – intermediaries must also be monitored.
Due diligence obligations regarding beneficial owners and PEPs
- Authority / court
- Commissariat aux Assurances (CAA)
- Area of law
- Money laundering and terrorist financing · Internal controls
- Legal basis
- Loi modifiée du 12 novembre 2004 (LBC/FT), Art. 2-1, 2-2, 8-4, 8-5; Règlement CAA 20/03
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Published
- 20 Mar 2024
- CAA – Sanction administrative Lombard International Assurance S.A. (20.03.2024) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link
Report an error
16 Oct 2023 Swiss Life (Luxembourg)Swiss Life (Luxembourg): 790,000 EUR over deficiencies in anti-money laundering €790,000
An inspection in 2021 revealed that the life insurer had not carried out an overall assessment of its money laundering risks and that the guidance for employees on due diligence obligations (beneficial owners, high-risk countries, PEPs) was inadequate. The Commissariat aux Assurances (Luxembourg insurance supervisory authority, CAA) imposed 790,000 EUR.
The overall money laundering risk assessment is the basis of all due diligence obligations and must be in place before new business relationships are entered into.
Customer due diligence in insurance distribution
- Authority / court
- Commissariat aux Assurances (CAA)
- Area of law
- Money laundering and terrorist financing · Internal controls
- Legal basis
- Loi modifiée du 12 novembre 2004 (LBC/FT), Art. 2-1, 2-2, 8-4, 8-5; Règlement CAA 20/03
- Action
- Fine
- Status of proceedings
- unknown
- Sector
- Financial services and insurance
- Published
- 3 Jul 2024
- CAA – Sanction administrative Swiss Life (Luxembourg) (03.07.2024) Decision of an authority
Checked against the official source on 25 Sep 2026 · Direct link