GRC Report Staff

UK Privacy Regulator Takes Action Against Metropolitan Police Over Unauthorized Data Sharing

Hundreds of Metropolitan Police officers and staff used an unapproved third-party platform to share personal information about suspected shoplifters, including children, over an 18-month period without adequate data protection safeguards or oversight, according to findings released by the UK's Information Commissioner's Office (ICO).

CPMI & IOSCO Issue Final Guidance on Financial Market Infrastructures’ Business Risks

Financial market infrastructures are expected to maintain sufficient equity-backed liquid assets to withstand losses arising from their business operations. An international assessment found problems with how some of those institutions were applying that requirement, prompting further work by two of the financial system's principal standard-setting bodies.

ESMA Calls for Greater Clarity in Sustainability Impact and Climate Transition Claims

The European Securities and Markets Authority (ESMA) has called on financial firms to be more precise about claims of positive environmental and social impact and climate transition, warning through new guidance that investors need clearer information about what such claims mean and how the promised results will be assessed.

SFC Issues Guidance on Disclosure and Complex Product Treatment for Funds with Private Market Exposu

The Hong Kong SFC has issued a circular requiring management companies of SFC-authorized public funds with direct or indirect private credit or private equity exposure to adopt enhanced offering document disclosures. Funds with 50% or more of NAV in private market assets will be classified as complex products, and the SFC may also designate funds below that level. Compliance teams should begin reviewing existing funds now, as the SFC expects updates as soon as practicable.

Norway FSA Relays CSSF Warning on Fraudsters Misusing Gekko Fund SICAV Name

The Norway Financial Supervisory Authority has published a warning that references a Luxembourg CSSF notice about fraudulent actors misusing the name of Gekko Fund SICAV. Compliance teams should treat this as an impersonation and investment fraud alert and update screening, monitoring, and customer-protection controls accordingly.

Norway FSA Republishes UK FCA Warning on Unauthorized Firm Impound Services Ltd

The Norway Financial Supervisory Authority (Finanstilsynet) has posted a warning about Impound Services Ltd, a United Kingdom-issued notice that links to the UK Financial Conduct Authority (FCA) warnings list. Compliance teams should treat the entity as a high-risk, potentially unauthorized or fraudulent counterparty and screen for any exposure. The source material is sparse, so internal verification against the FCA page is essential.

Norway FSA Relays UK FCA Warning on Blackswan Trading Clone of FCA-Registered Firm

The Norway Financial Supervisory Authority has published a warning that references a UK FCA alert about "Blackswan Trading," a clone of an FCA-registered firm. Clone firms impersonate legitimate authorized entities to defraud investors, so compliance teams should update screening controls and customer-protection messaging.