GRC Report Staff

UK Competition Watchdog Fines Wayfair, Appliances Direct & Gold’s Gym £6 Million Over Misleading Sales Tactics

A countdown timer on Wayfair’s website told shoppers that a deal was about to disappear. The furniture retailer advertised products through “Daily Deals” and 24-hour “Flash Deals,” sometimes accompanied by the warning “Here Today, Gone Tomorrow.” Customers who wanted the advertised price were given reason to believe they had little time to decide.

New Zealand Regulators Press Financial Institutions on AI-Driven Cyber Risks

New Zealand's financial regulators have told banks and other regulated institutions to examine whether their cybersecurity arrangements are keeping pace with advances in artificial intelligence, warning that the technology is creating new problems for corporate oversight and increasing dependence on outside technology providers.

South Korea Moves to Accelerate Data Breach Investigations as Reports Surge

South Korea's privacy regulator received 432 data breach reports in the first six months of 2026, nearly matching the 447 recorded throughout the whole of last year. The increase has prompted a substantial overhaul of how the country intends to investigate breaches, particularly those involving companies responsible for the personal information of millions of people.

EBA Chair Urges Banks to Lend More While Signaling Regulatory Simplification and Coherence

In an Irish Independent interview, EBA Chair François-Louis Michaud argued that well-capitalized European banks should be less cautious about lending. He ruled out framing the debate as one of lower capital requirements and pointed instead to a more coherent, simplified, and predictable rulebook. Compliance teams should treat this as a directional signal rather than binding guidance, since it previews supervisory priorities on simplification, climate risk, ICT resilience, and the Savings and Investments Union.

Norway FSA Warns of Clone Firm Impersonating FCA-Authorized Entity gfo-xx

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about "gfo-xx (Clone)," a suspected clone of a UK FCA-authorized firm, based on a UK FCA warning. Compliance teams should treat this as a fraud and impersonation alert and update screening, client-protection, and monitoring controls accordingly.

UK CMA Finalizes Revised Merger Efficiencies Guidance Following Consultation Closure

The UK Competition and Markets Authority (CMA) has concluded its consultation and published final revised guidance on assessing rivalry-enhancing efficiencies in mergers, now incorporated into its updated Merger Assessment Guidelines. Compliance and legal teams advising on UK transactions should review the final text, because it changes how efficiency arguments are framed and evidenced in merger reviews.

Norway FSA Warns of Clone Firm Impersonating FCA-Registered Hanbury Financial Planning

Norway's Financial Supervisory Authority (Finanstilsynet) has published a warning about a clone of an FCA-registered firm, "hanbury_financial_p1lanning (Clone)," which links to a corresponding UK Financial Conduct Authority (FCA) warning. Clone firms use the identity of authorized firms to defraud consumers, so compliance teams should strengthen counterparty verification and fraud-monitoring controls.