GRC Report Staff

Microsoft-Owned Xandr Hit With Record $9.6 Million Norwegian Privacy Fine

Norway's data protection authority has fined Microsoft-owned advertising technology company Xandr approximately $9.6 million (NOK 92 million) for unlawfully processing and sharing sensitive personal information belonging to users of the dating app Grindr.

Poland Fines Nasz Prąd $5.49 Million Over Unfair Renewable Energy Contracts

Poland's consumer protection authority has fined renewable energy installer Nasz Prąd approximately $5.49 million (PLN 21.475 million) after finding 21 unfair provisions in contracts that allowed the company to change equipment specifications, impose substantial penalties on homeowners and remove heating systems over unpaid balances.

Norway Financial Supervisory Authority Issues Warning on Blueberry Capital Citing Spanish CNMV Alert

The Norway Financial Supervisory Authority (Finanstilsynet) published a warning on Blueberry Capital on September 2, 2026. The warning relays an alert originally issued by Spain's securities regulator, the CNMV. Compliance teams should treat the entity as a potentially unauthorized or high-risk counterparty and screen for any exposure.

Bundesbank President Signals September ECB Rate Hike Amid Elevated Inflation and Market Volatility

Bundesbank President Joachim Nagel indicated in a Le Monde interview that an ECB rate increase at the September 10, 2026 meeting is widely expected, with markets pricing in more than a 95% probability. He declined to offer guidance beyond that meeting, citing energy price swings and volatile financial markets. Compliance and risk teams should treat this as a signal of a tightening cycle and of heightened market, liquidity, and fiscal-policy uncertainty.

Norway FSA Republishes Luxembourg CSSF Warning on Nexura VG Website

The Norway Financial Supervisory Authority (Finanstilsynet) has posted a warning about "Nexura VG," referencing a CSSF (Luxembourg) notice on the website www.nexuravg.com. The notice signals a suspected unauthorized or fraudulent financial services operation. Compliance teams should screen for exposure and update their watchlists.

Norway FSA Issues Warning on Indylux Capital S.à r.l, Luxembourg Entity Linked to CSSF Notice

The Norwegian Financial Supervisory Authority (Finanstilsynet) has published a warning about Indylux Capital S.à r.l, a Luxembourg-based entity, and references a related Luxembourg CSSF warning about the website www.tresorwacht.com. Compliance teams should treat the entity and associated website as potential unauthorized or fraudulent activity and update screening and client-protection controls accordingly.

SFO Settles Long-Running ENRC Litigation Confidentially After Court Finds Misconduct

The Serious Fraud Office, ENRC, Dechert LLP and David Gerrard have concluded their civil proceedings on confidential terms. The case closes a landmark dispute in which a court found the SFO breached its duties during a bribery and corruption investigation that ended without charges. Compliance teams should treat it as a lasting reference point on how privilege, internal investigations and engagement with enforcement agencies are handled.