South Korea's privacy regulator received 432 data breach reports in the first six months of 2026, nearly matching the 447 recorded throughout the whole of last year. The increase has prompted a substantial overhaul of how the country intends to investigate breaches, particularly those involving companies responsible for the personal information of millions of people.
In an Irish Independent interview, EBA Chair François-Louis Michaud argued that well-capitalized European banks should be less cautious about lending. He ruled out framing the debate as one of lower capital requirements and pointed instead to a more coherent, simplified, and predictable rulebook. Compliance teams should treat this as a directional signal rather than binding guidance, since it previews supervisory priorities on simplification, climate risk, ICT resilience, and the Savings and Investments Union.
The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about "gfo-xx (Clone)," a suspected clone of a UK FCA-authorized firm, based on a UK FCA warning. Compliance teams should treat this as a fraud and impersonation alert and update screening, client-protection, and monitoring controls accordingly.
The UK Competition and Markets Authority (CMA) has concluded its consultation and published final revised guidance on assessing rivalry-enhancing efficiencies in mergers, now incorporated into its updated Merger Assessment Guidelines. Compliance and legal teams advising on UK transactions should review the final text, because it changes how efficiency arguments are framed and evidenced in merger reviews.
Norway's Financial Supervisory Authority (Finanstilsynet) has published a warning about a clone of an FCA-registered firm, "hanbury_financial_p1lanning (Clone)," which links to a corresponding UK Financial Conduct Authority (FCA) warning. Clone firms use the identity of authorized firms to defraud consumers, so compliance teams should strengthen counterparty verification and fraud-monitoring controls.
In a keynote speech, a Bundesbank executive board member outlined Europe's need for greater financial and technological independence amid elevated geopolitical risk, and announced concrete supervisory and market-infrastructure steps. These include the end of dual large-loan reporting, the digital euro, and the first Wholesale CBDC availability through the Pontes Initial Launch this year. The speech is not binding, but it signals supervisory priorities on third-party dependency, payments resilience, and reporting simplification.
OSFI will hold its third Quarterly Release Day on September 10, 2026, followed by a virtual Industry Day on September 24, 2026. The sessions cover the final Capital Adequacy Requirements (CAR) Guideline 2027, the final crypto-asset capital and liquidity guideline, Guideline E-15 peer review expectations, AI-driven cyber threats, and Data Collection Modernization. Compliance teams at federally regulated institutions should register and prepare questions, since these topics carry near-term implementation obligations.
Access Login