Finnish online retailer Verkkokauppa.com has been ordered to pay a fine of almost €800,000 to the state due to deficiencies in its handling of personal data. The Supreme Administrative Court (KHO) rejected the company’s appeal against the penalty. The fine stems from a March 2024 decision by the Data Protection Ombudsman, which found Verkkokauppa.com’s practice of requiring customer registration before purchases violated the General Data Protection Regulation (GDPR). Specifically, the requirement was deemed non-compliant with GDPR standards. The KHO upheld the original ruling, confirming the substantial financial penalty. This case highlights the importance of adhering to data protection regulations in e-commerce. Verkkokauppa.com will now be required to fulfill the financial obligation to the state.