GRC Report Staff

EBA Report Sheds Light on Progress & Lingering Gaps in ESG Risk Data

In a spirited effort to demystify the world of environmental, social, and governance (ESG) risks, the European Banking Authority (EBA) has unveiled a report that reads like both a celebration and a call to action. Amid the complexities of modern finance, the report reveals tangible progress in making ESG data more available and accessible, yet it reminds us that the puzzle is far from complete.

DeepSeek Suspends Service in Korea to Address Privacy Concerns

DeepSeek, the China-based AI chatbot service, is currently navigating a tricky regulatory landscape as privacy concerns grow across the globe. After being hit with privacy scrutiny in South Korea and facing an enforcement action in Italy over data protection practices, DeepSeek is working to address key concerns to avoid further disruptions to its operations.

Spanish Financial Watchdog Publishes Results of 2024 Review on Money Laundering Risk Assessments

Spain’s Comisión Nacional del Mercado de Valores (CNMV) has released the results of its 2024 review on how entities under its supervision assess risks related to money laundering. The review, conducted as part of Spain’s broader push to meet new European regulations, uncovered several shortcomings in the way entities approach money laundering risk assessments, calling attention to critical areas that require improvement.

OCC Cracks Down on Banks & Employees in February 2025 Enforcement Actions

The Office of the Comptroller of the Currency (OCC) is keeping a close watch on both banks and their employees with its February enforcement actions. The agency has taken action against several banks and individuals for serious compliance failures and misconduct. It’s not just about issuing penalties, it’s about ensuring lasting change and reinforcing accountability across the banking industry.

YAPP USA Pays $14.2 Million to Settle False Claims Act Allegations

YAPP USA Automotive Systems Inc. has agreed to pay $14.2 million after being accused of falsely certifying its eligibility for a Paycheck Protection Program (PPP) loan. The company, a subsidiary of State Development and Investment Corp. Ltd., a Chinese state-owned entity, applied for and received a $9.6 million loan under the PPP, which was later forgiven by the Small Business Administration (SBA). However, the U.S. government says the company did not meet the necessary criteria to qualify.

DOJ Takes Action on False Claims, Holding Healthcare Providers & Contractors Accountable

When you think of government contracts, the last thing that might come to mind is a mix-up of payments or a cybersecurity breach, especially when it comes to protecting our nation’s military families. But that’s exactly what’s behind two of the most recent enforcement actions by the Department of Justice (DOJ), resulting in settlements worth more than $40 million. These cases serve as a strong reminder of the serious responsibility companies take on when they sign contracts to serve the public, particularly when it involves taxpayer funds and sensitive data.

The ESAs Take the Next Step in Overseeing Critical Third-Party Service Providers Under DORA

The European Supervisory Authorities (ESAs) are paving the way for a stronger oversight framework. Their latest initiative is a clear and deliberate step towards tackling third-party risk, particularly concerning critical ICT service providers, under the EU’s Digital Operational Resilience Act (DORA).