CARNIVAL CORP

Carnival Corporation has a documented pattern of significant regulatory violations across multiple domains, demonstrating systemic compliance failures. In 2019, its subsidiary Princess Cruise Lines pleaded guilty to environmental violations and Carnival was ordered to pay a $20 million criminal penalty for dumping plastics, oily water, and other pollution into the ocean, offenses that occurred while the company was on probation for previous environmental crimes.

Separately, the New York State Department of Financial Services imposed a $5 million penalty on Carnival in 2022 for significant cybersecurity failures. The regulator found the company filed improper cybersecurity compliance certifications from 2018 to 2020 in connection with multiple data breach incidents. This pattern of violations—spanning environmental protection and data security—indicates a broader failure of corporate governance and compliance controls. The repeated nature of these incidents, including violations committed during probation, shows a disregard for regulatory obligations.

Carnival Corporation operates a cruise business model that extracts revenue from passengers while systematically externalizing its environmental and regulatory costs onto the public. The company has accumulated over $92 million in environmental penalties, including a $40 million fine in 2016 after pleading guilty to felonies for dumping oily waste into the ocean and a subsequent $20 million criminal penalty in 2019 for violating its probation. In 2019, a federal judge found Carnival guilty of six probation violations, including interfering with court-ordered audits and falsifying compliance records. This pattern demonstrates a business built on shifting the true costs of pollution and regulatory compliance away from the company and onto the communities and ecosystems where it operates.