GRC Report Staff

A new ECB working paper finds that fixed-rate versus variable-rate loan systems cause materially different lending and failure-risk responses to policy rate changes, but only when banks are near regulatory capital thresholds. The findings support closer coordination between monetary and macroprudential policy and favor gradual rate adjustments, with implications for how supervisors calibrate capital buffers across euro area jurisdictions.

ESMA's annual cross-border review found that retail client numbers receiving cross-border investment services rose 47% year-on-year to 15.5 million, while the number of passporting firms grew modestly. For compliance teams at firms providing cross-border investment services, this signals heightened regulatory attention on passporting activity and retail investor protection across Member States.

The Dutch Authority for the Financial Markets (AFM) published a personal blog by a senior official calling on financial institutions to take greater responsibility for consumer financial resilience, including by considering opt-out "automatic saving" defaults. The blog is not binding regulation, but it signals supervisory thinking on behavioral design and consumer outcomes. Compliance teams should treat it as an early indicator of potential expectations on product design and choice architecture.

In a keynote at PostTrade 360°, Klaus Löber, Chair of the ESMA CCP Supervisory Committee, set out ESMA's post-trade agenda: EMIR 3 active account implementation, margin and anti-procyclicality work, stress testing, CSD integration, DORA implementation, and simplification without deregulation. The speech is not binding, but it signals supervisory priorities that clearing members, CCPs, CSDs, and reporting entities should anticipate in their compliance and resilience planning.

The Spanish Data Protection Agency (AEPD) issued a favorable opinion on a bill creating the Electronic Judicial Office of Navarre, which implements Law 18/2011 on information technology use in the administration of justice. The AEPD recommends considering links to its own Electronic Office and to that of the General Council of the Judiciary, reflecting the division of supervisory competences over data protection. Compliance teams should note the emphasis on applying personal data security measures to information processed through judicial electronic portals.

The UK Serious Fraud Office secured a combined 15 years and nine months in prison for three former Ethical Forestry Limited directors who defrauded more than 3,000 investors, many of them pensioners, of GBP $70 million over seven years. The case shows continued enforcement focus on pension-linked investment fraud, deceptive cold-calling, and misleading "green" investment claims. Compliance teams should treat it as a reminder to strengthen fraud detection, due diligence on investment products, and customer protection controls.

The Norway Financial Supervisory Authority has listed a warning about fraudulent activities carried out under the name of Gablau Invest Sàrl, a purported Luxembourg company. The warning originates from Luxembourg's CSSF. Compliance teams should treat the entity as a potential investment fraud risk and update screening and client-protection controls.