Finanstilsynet (Norway FSA) has issued a warning about "Swift TradeX," referencing a prior warning from the UK Financial Conduct Authority (FCA). The notice signals a cross-border investor protection concern and a likely unauthorized or fraudulent investment offering. Compliance teams should treat the name as a high-risk counterparty indicator and update screening controls accordingly.
The Spanish Data Protection Agency's legal office (Gabinete Jurídico) reviewed a draft protocol governing student and resident access to patient information and identified three data protection concerns. These were the unclear legal basis for patient refusal of student presence, overly vague limits on clinical record access, and missing file-creation requirements for a student register. Although the report applies the now-superseded LOPD (Organic Law 15/1999), it shows how regulators assess health data access, consent, and governance, which remains relevant for organizations handling sensitive data.
The Norway Financial Supervisory Authority (Finanstilsynet) has issued a warning about "Nexdiltd," described as a clone of an FCA-registered firm, and has referenced the related UK Financial Conduct Authority (FCA) warning. Compliance teams should treat this as a fraud and impersonation alert and screen customers, counterparties, and payment flows for links to the entity.
The Spanish Data Protection Agency (AEPD) concluded in a 2016 legal opinion that a city council cannot authorize a fishermen's society to install video surveillance cameras in public-domain lagoons. Capturing images in public places is reserved to the Security Forces and Corps under Organic Law 4/1997, with authorization granted by the Government Delegate. Compliance teams should note the strict limits on private video surveillance of public spaces and the broad treatment of images, voice, and license plates as personal data.
On September 3, 2026, the Warsaw Voivodeship Administrative Court upheld the Polish data protection authority's October 2025 reprimand of a Sejm member who disclosed a resident's personal data during a live-streamed parliamentary inspection. The court found no legal basis for the disclosure and held that it was not necessary for the stated purpose. Compliance teams should treat this as confirmation that a legitimate public function does not override the necessity and data minimization requirements of data protection law.
Hundreds of Metropolitan Police officers and staff used an unapproved third-party platform to share personal information about suspected shoplifters, including children, over an 18-month period without adequate data protection safeguards or oversight, according to findings released by the UK's Information Commissioner's Office (ICO).
Financial market infrastructures are expected to maintain sufficient equity-backed liquid assets to withstand losses arising from their business operations. An international assessment found problems with how some of those institutions were applying that requirement, prompting further work by two of the financial system's principal standard-setting bodies.
Access Login