GRC Report Staff

California Hits General Motors With Record Privacy Settlement Over Driver Data Sales

California Attorney General Rob Bonta announced Friday that General Motors has agreed to a proposed $12.75 million settlement over allegations the company illegally sold the driving and location data of hundreds of thousands of Californians to third-party data brokers without consumers’ knowledge or consent.

ASIC Warns Financial Sector to Brace for AI-Fueled Cyber Threats

Australia’s corporate regulator has issued one of its biggest cyber warnings yet, cautioning that the rapid rise of frontier artificial intelligence is fundamentally changing the threat landscape and putting pressure on financial institutions to strengthen their defenses before existing weaknesses are exposed at scale.

New AI Privacy Guidelines Put Human-Centered Development at the Core of the Conversation

As organizations continue rushing to integrate artificial intelligence into everything from internal operations to customer-facing services, regulators are trying to address how to move fast without leaving privacy protections behind.

OCC Sees Strong Banks but Growing Pressure From Cyber Threats, CRE Risk, & AI Complexity

The U.S. banking system entered 2026 on solid footing, with stronger earnings, healthy liquidity, and manageable credit exposure helping stabilize the industry after years of economic uncertainty. But beneath those reassuring numbers, federal regulators are increasingly focused on a more complicated reality taking shape across commercial real estate markets, cyber defense systems, fraud networks, and the rapidly evolving world of artificial intelligence.

AMF Expands Reach of Updated Ethics Code for France’s Asset Management Industry

France’s financial markets authority is expanding the reach of a long-standing ethical framework for the asset management sector, a move that reflects how regulatory expectations around governance and professional conduct have evolved since the framework was first introduced more than 15 years ago.

Federal Court Ruling Against Telstra Super Puts Complaint Handling Standards in Spotlight

A Federal Court ruling against Telstra Super has delivered one of the clearest judicial warnings yet to Australia’s financial services sector that poor complaint handling can carry real regulatory consequences. The decision found that Telstra Super failed to comply with mandatory internal dispute resolution requirements after mishandling a substantial number of member complaints over more than a year.

KPMG Says the Old Rules of Model Risk Management Are Starting to Break Down in the AI Era

For years, model risk management inside financial institutions followed a fairly predictable rhythm. Models were reviewed periodically. Validators examined assumptions, tested outcomes, checked documentation, and challenged methodologies that were generally understandable to humans. The systems themselves, while complex at times, were still built on structures that could usually be traced, interpreted, and explained.