Finland: Data Protection Authority investigation into MLU BV (Yango) for alleged violations of General Data Protection Regulation data transfer provisions

Progress

Current status
in force
08 May 2026 in force

Scope

Implementers
Finland
Netherlands
Norway
Policy Area
Data governance
Policy Instrument
Cross-border data transfer regulation
Regulated Economic Activity
platform intermediary: other
Government Branch
executive
Government Body
data protection authority
Implementation Level
supranational

Timeline of events

08 May 2026
in force

Data Protection Authority issued fine of EUR 100 million against MLU (Yango) and ordered cessation of data transfers to Russia in absence of GDPR compliance

On 8 May 2026, the Dutch Data Protection Authority (Autoriteit Persoonsgegevens, AP) announced a fine of EUR 100 million against MLU B.V. and an order requiring MLU to cease transferring personal data of persons in Norway and Finland to Russia via t…

Event type investigation
Action type ruling
Government branch executive
Government body data protection authority