Each record states what the source establishes—and what it does not. Only confirmed records contribute to counts and penalty totals.
shown by original currency
46 records shown
No records match these filters.
The court upheld findings that Amazon’s advertising processing lacked a valid legitimate-interest basis and that its transparency was insufficient. It annulled the 2021 decision’s fine and compliance order on procedural grounds.
View caseThe FTC’s case concerned design practices that enrolled customers in Prime without clear consent and made cancellation unnecessarily difficult.
View caseThe Commission had concerns that tying Teams to Microsoft 365 and Office 365 gave Teams a distribution advantage and that limited interoperability made it harder for competing communication tools to compete. Microsoft offered suite versions without Teams, pricing differences, switching rights, interoperability and data-portability measures.
View caseReporting on a complaint involving a school account says the authority found that tracking cookies were placed without valid consent and that access rights were not handled correctly.
View caseThe CMA investigated concerns that Amazon was not doing enough to detect and remove fake reviews, identify suspicious behaviour or sanction reviewers and sellers involved. The undertakings also address catalogue abuse, where reviews for one product can be attached to another product listing.
View caseThe Commission found that Meta’s binary model required Facebook and Instagram users either to consent to combining personal data for personalised advertising or pay for an ad-free service. It did not offer the less-personalised but otherwise equivalent service required by the Digital Markets Act.
View caseOSHA’s multi-site investigation concerned hazardous working conditions associated with lower-back and other musculoskeletal disorders at ten Amazon facilities. The cases were scheduled for hearings before the Occupational Safety and Health Review Commission.
View caseA Facebook design flaw allowed attackers to obtain access tokens affecting about 29 million accounts. The regulator found failures in breach notification, documentation and data protection by design.
View caseThe Commission found that Meta tied Facebook Marketplace to Facebook, giving the classified-ads service a distribution advantage that competitors could not match. It also found that Meta imposed unfair conditions allowing it to use advertising data generated by rival classified-ad providers for Marketplace’s benefit.
View caseThe regulator examined LinkedIn’s legal bases for processing members’ data for behavioural analysis and targeted advertising. It found failures involving lawfulness, fairness and transparency.
View caseMeta notified the regulator that some social-media user passwords had been stored in plaintext on internal systems. The inquiry assessed notification, documentation and security obligations.
View caseCalifornia’s Civil Rights Department alleged that employees who used parental, disability, pregnancy, medical or family-care leave received lower bonuses and unfavourable reviews that could affect pay, stock awards and promotion. Microsoft denied the allegations and agreed to settle after a multi-year investigation.
View caseTexas alleged that Facebook’s former Tag Suggestions feature captured facial geometry from photographs without the disclosures and consent required by state biometric-privacy law. The state brought the first case under its Capture or Use of Biometric Identifier Act.
View caseThe board reviewed the 2023 compromise of Microsoft Exchange Online and described operational and strategic security decisions that allowed the intrusion to succeed and remain undetected.
View caseAn NLRB administrative law judge found that Amazon retaliated against workers for union support or protected concerted activity by changing assignments, increasing supervision and dismissing employees early. The decision also addressed interrogation, confiscation of union literature and appeals to racial prejudice.
View caseThe CMA investigated whether Meta could use data from businesses advertising on its platforms to gain an unfair advantage when developing and improving products that competed with those businesses, including Facebook Marketplace.
View caseThe EDPB found an ongoing infringement involving processing for behavioural advertising on the basis of contract and legitimate interests across the European Economic Area.
View caseThe government alleged that Amazon retained children’s voice recordings indefinitely, disregarded deletion requests and used retained data to improve Alexa’s algorithms.
View caseThe FTC alleged that Ring gave employees and contractors broad access to customers’ videos and failed to implement basic security measures, enabling account takeovers and harassment.
View caseThe FTC charged that Microsoft collected personal information from children under thirteen during Xbox account creation before notifying parents and obtaining verifiable consent. The complaint also addressed incomplete parental notices, disclosures to game publishers and retention of children’s data after an account-creation process was abandoned.
View caseThe Irish regulator found that Meta Ireland continued transferring Facebook users’ personal data to the United States without safeguards that addressed the risks identified by the Court of Justice of the EU.
View caseThe Commission had preliminary concerns that Amazon used non-public seller data for its own retail decisions and may have favoured its retail or logistics operations in access to the Buy Box and Prime. Amazon offered changes covering seller-data use, offer ranking, a second Buy Box offer and non-discriminatory Prime access.
View caseCNIL found that Bing placed an advertising cookie on users’ devices without valid consent when they visited the search engine. It also found that the site offered a one-click route to accept cookies but no equally direct route to refuse them.
View caseThe inquiry followed the publication of a dataset containing Facebook users’ personal data that had been scraped from the service. The DPC examined whether Facebook Search, Messenger Contact Importer and Instagram Contact Importer had been designed and configured in line with data-protection-by-design and default requirements.
View caseThe inquiry examined Instagram settings and the public disclosure of email addresses and phone numbers belonging to child users, including users of business accounts.
View caseThe Justice Department alleged that Meta’s housing-ad system discriminated in who received advertisements based on race, colour, religion, sex, disability, family status and national origin. The case addressed both advertiser targeting options and the effects of Meta’s delivery algorithms.
View caseThe DPC examined twelve Facebook data-breach notifications received during a six-month period in 2018. It found that Meta Platforms Ireland failed to put appropriate technical and organisational measures in place that would allow it to readily demonstrate how it protected EU users’ data in the context of those breaches.
View caseDuring its review of Facebook’s acquisition of Giphy, the CMA found repeated failures to comply with an initial enforcement order intended to keep the businesses separate while the merger was investigated. The failures included inadequate compliance reporting and changing a compliance officer without prior consent.
View caseWashington alleged that the Sold by Amazon programme replaced price competition between Amazon and participating third-party sellers with prices set by Amazon. The state said the programme could raise prices and steer customers towards Amazon’s own products.
View caseCNIL found that visitors to facebook.com in France could accept cookies immediately but could not refuse them with comparable ease. Refusal required several additional actions, which the authority found affected users’ freedom of consent.
View caseCalifornia alleged that Amazon’s warehouse notices did not adequately tell workers and local health agencies how many COVID-19 cases had occurred or provide required information about protections and safety plans. The case concerned the state’s worker right-to-know law.
View caseConsumer Reports compared workplace communication policies and identified broad collection and use terms that employees may be unable to negotiate.
View caseThe DPC investigated how WhatsApp Ireland explained its processing to users and non-users, including the information it provided about data shared between WhatsApp and other Facebook companies. The European Data Protection Board resolved objections among supervisory authorities and instructed the DPC to reassess the proposed fine.
View caseThe FTC alleged that Amazon reduced its own contribution to driver pay after promising drivers they would receive all customer tips, and failed to make the change clear.
View caseCNIL found that Amazon Europe Core placed advertising cookies on visitors’ devices before consent and provided inadequate information about their purpose. The authority also found that the mechanism offered to people arriving through an advertisement did not provide valid prior consent.
View caseOFCCP compliance reviews identified hiring-rate disparities affecting Asian applicants for engineering, specialist and developer roles and Black and Hispanic applicants for software-engineering roles at Microsoft facilities in four states. The agency alleged that the selection practices violated federal-contractor equal-opportunity requirements.
View caseThe FTC alleged that Facebook violated a 2012 privacy order by misleading users about control over their personal information and the handling of facial-recognition settings and phone numbers.
View caseA government-commissioned data protection impact assessment documented risks in diagnostic data sent by enterprise versions of Office and proposed measures for public-sector use.
View caseDuring the 2014 review of Facebook’s WhatsApp acquisition, Facebook told the Commission that reliable automated matching of Facebook and WhatsApp user identities could not be established. The Commission later found that technical matching was possible in 2014 and that relevant staff were aware of that possibility.
View caseThe Commission’s preliminary view was that clauses in Amazon’s publisher agreements could reduce incentives for competing e-book platforms to differentiate through price, release terms, promotions or business models. Amazon offered not to enforce or introduce the clauses and to let publishers terminate affected contracts.
View caseA federal court found that Amazon billed account holders for in-app purchases made by children without obtaining informed consent. The purchase flows appeared in games and other apps used by children and, during parts of the relevant period, allowed charges without a password.
View caseMicrosoft had committed to show Windows users in the EEA a screen offering a choice of web browsers. The Commission found that the screen was not displayed to approximately 15.3 million Windows 7 Service Pack 1 users between May 2011 and July 2012.
View caseThe European Commission imposed a periodic penalty after finding that Microsoft had not made interoperability information available to competitors on reasonable terms, as required by the 2004 antitrust decision. Microsoft challenged the amount before the General Court.
View caseThe Commission found that Microsoft abused its dominant position by refusing to supply and authorise the use of interoperability information needed by competing work-group server operating systems, and by tying Windows Media Player to Windows.
View caseThe FTC alleged that Microsoft made false or misleading statements about privacy and security in Passport, Passport Wallet and Kids Passport. The complaint addressed undisclosed collection, claims about purchase security and failures to implement reasonable procedures for preventing, detecting and auditing unauthorised access.
View caseAfter trial and appeal, liability remained for Microsoft’s unlawful maintenance of its operating-system monopoly through exclusionary conduct affecting middleware and browser competition. The 2002 final judgment resolved the federal and settling-state remedy proceedings.
View case