GRC Report Staff

Poland Fines Biedronka Nearly $29 Million Over Misleading “Free Voucher” Promotions

Poland’s competition regulator has issued a big enforcement decision against the country’s largest supermarket chain, Biedronka, after finding that the retailer misled customers with its widely advertised “100% moneyback as a voucher” promotions.

EU Strengthens Financial Crime Defenses With High-Risk Country Changes

The European Commission has updated its list of high-risk jurisdictions that pose strategic threats to the integrity of the EU financial system due to shortcomings in anti-money laundering and counter-terrorist financing (AML/CFT) regimes. Bolivia and the British Virgin Islands are the latest to join the list, meaning banks and other EU-regulated entities must apply enhanced vigilance to any dealings connected to those jurisdictions.

Treasury Steps Up Crackdown on U.S. Firms Linked to Sanctioned Russian Oligarchs

The U.S. Treasury is intensifying its effort to choke off any remaining financial lifelines available to sanctioned Russian elites, and American firms are increasingly in the crosshairs. This week, the Department’s Office of Foreign Assets Control (OFAC) unveiled two separate enforcement actions totaling more than $18 million, signaling that even indirect or obscured connections to Kremlin-aligned wealth will draw scrutiny.

UK Regulator Rebukes Post Office After Horizon Victims’ Information Published Online

The Information Commissioner’s Office (ICO) has issued a formal reprimand to Post Office Limited after its communications team mistakenly uploaded an un-redacted legal settlement document to the organization’s corporate website. The file (containing the names, home addresses, and postmaster status of 502 individuals involved in the landmark group litigation) was left publicly accessible for nearly eight weeks between April and June 2024.

South Korea Orders Starbucks & Elevate to Fix Data Practices as Namuwiki Faces Criminal Complaint

South Korea’s data protection watchdog says Starbucks and its third-party auditor mishandled workers’ personal data and now both companies are being ordered to fix it. The Personal Information Protection Commission (PIPC) resolved to issue correction orders and compliance recommendations to Starbucks Corporation and Elevate Hong Kong Holdings Limited, following a probe into how the two handled personal information linked to Starbucks’ Ethical Sourcing Program in Korea.

Brussels Opens Antitrust Investigation Into Meta’s WhatsApp AI Restrictions

The European Commission has launched a formal antitrust investigation into whether Meta is unfairly limiting third-party artificial intelligence providers’ access to WhatsApp, potentially shutting out competitors to its own “Meta AI” service.

Scammers Exploit Southern Phone Weaknesses as Regulator Issues Record Penalty

Southern Phone is facing tough scrutiny after paying US $1,607,600 (AUD 2,500,560) in penalties, the highest fine the Australian Communications and Media Authority has ever issued for this type of failure, for giving scammers an easy path to take over customers’ mobile numbers.