GRC Report Staff

FTC Begins Enforcing Take It Down Act as Platforms Face 48-Hour Removal Mandate

The Federal Trade Commission has officially begun enforcing the Take It Down Act, setting a start of a new federal requirement forcing online platforms to remove nonconsensual intimate images within 48 hours of receiving a valid request from victims.

France’s Privacy Watchdog Says the Situation Is “Very Worrying” After a Record Year of Data Breaches

France’s data protection authority received more than 20,000 complaints last year, handled over 6,000 data breach notifications, and issued nearly €487 million in fines as cybersecurity incidents and privacy enforcement continued to intensify across the country.

Deloitte Sees Internal Audit Moving Closer to the Center of Enterprise Risk in 2026

The audit profession has spent years talking about becoming more strategic. Deloitte’s latest outlook suggests that conversation is finally starting to turn into something operational.

Beliani Faces €2 Million Penalty in Poland After Ignoring Consumer Protection Probe

Poland’s Office of Competition and Consumer Protection, known as UOKiK, said Thursday it had imposed a nearly $2.17 million (PLN 8.45 million) fine against Beliani after the company allegedly failed to cooperate with an ongoing investigation into its online sales practices.

UK Opens Competition Investigation Into Microsoft’s Expanding Workplace AI Ecosystem

The UK’s Competition and Markets Authority formally opened a Strategic Market Status investigation into Microsoft and the sprawling ecosystem surrounding products like Windows, Word, Excel, Teams, and Copilot. The regulator said it will examine whether Microsoft’s position in business software allows it to limit customer choice or weaken competition across adjacent markets.

Yango Hit With €100 Million Dutch Privacy Fine Over Data Transfers to Russia

The Dutch Data Protection Authority said this week that it has fined MLU BV, the Netherlands-based company behind the European version of the taxi app Yango, €100 million for unlawfully transferring personal data from Norway and Finland to Russia.

Australian Court Finds Coles Supermarkets Misled Shoppers With ‘Down Down’ Discounts

The Australian Federal Court case against Coles Supermarkets Australia was, on paper, about supermarket shelf pricing. In practice, it became something larger and more uncomfortable for corporate compliance teams. Because once a company trains consumers to trust a label, a slogan, or a pricing program, the legal question is no longer just what the numbers technically say. It becomes whether the overall impression being created can survive scrutiny.