GRC Report Staff

Finanstilsynet (Norway FSA) has published a warning about MY.NEXT-CAP.PRO (CLON), referencing a warning originally issued by Spain's securities regulator, the CNMV. The entity is described as a "clone," which typically means it imitates a legitimate authorized firm. Compliance teams should treat it as a potential fraud and impersonation risk and update screening and client-protection controls accordingly.

The ECB's July 2026 bank interest rate statistics show composite borrowing costs broadly unchanged at 3.80% for corporations and 3.54% for households buying homes. Rates on new term deposits rose by 5 basis points for both sectors. This is a statistical release with no new obligations, but it is a useful benchmark for pricing, interest rate risk, and conduct oversight.

The Belgian Financial Services and Markets Authority (FSMA) will hold two in-person continuing education sessions for certified auditors on November 19 and November 24, 2026, covering occupational retirement institutions and collective investment sectors. Registration is free but must be completed by October 21, 2026, through the FSMA Event app. Audit firms and their compliance teams should confirm attendance plans promptly to meet continuing education obligations.

The AEPD announced it will run a dedicated data protection room on November 24, 2026, on the first day of the XX STIC Conference in Madrid. The announcement is not a new rule, but it signals that the regulator wants privacy integrated into cybersecurity, AI, and quantum risk management from the earliest design stages. Compliance teams should treat it as a supervisory-priority indicator and an opportunity to engage.

CFTC Division of Market Oversight Letter 26-24 allows Electron Exchange DCM, LLC (ElectronX) to keep applying the "exclusively self-cleared contracts" reporting framework to its direct participants, even though FCM intermediation is now permitted. ElectronX will report on behalf of direct participants, while FCM clearing members must still meet standard reporting obligations for intermediated accounts. Compliance teams at exchanges, FCMs, and direct traders should review how reporting responsibilities are now allocated.

The Norway Financial Supervisory Authority has published a warning about Robus Umbrella, referencing a Luxembourg CSSF notice concerning the website www.robusumbrella.com. It signals a suspected unauthorized or fraudulent entity operating under a Luxembourg connection. Compliance teams should screen for exposure and update fraud and onboarding controls.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning on "RBC Funds (Lux)," referencing a Luxembourg CSSF notice about the website www.visionfundlu.com. The source content is sparse, but it appears to be a cross-border warning about a suspected fraudulent or unauthorized entity using a Luxembourg fund identity. Compliance teams should treat it as a fraud and impersonation alert and update screening and client-protection controls.