GRC Report Staff

Norway FSA Republishes UK FCA Warning on Unauthorized Firm Legacy Trading Global

The Norway Financial Supervisory Authority (Finanstilsynet) has posted a warning about Legacy Trading Global, based on a notice originally issued by the UK Financial Conduct Authority (FCA). The source material is limited, but it signals a probable unauthorized or fraudulent investment solicitation that compliance teams should add to their screening and client-protection controls.

FCA Sets Holiday Service Pause for UK Listings Review and Official List Activity Through January 202

The FCA will pause document allocation, responses, and listing hearings from December 21, 2026 to January 4, 2027 inclusive, with normal activity resuming January 5, 2027. Those days will not count toward standard turnaround times, and revised timetables and early cutoffs apply to Final Terms and Outstanding Conditions. Compliance and deal teams should plan transaction timetables now to avoid missed windows and stale financial information.

Norway FSA Relays Central Bank of Ireland Warning on Cloned Firm Carrowmore Financial Services

The Norway Financial Supervisory Authority has published a warning that references a Central Bank of Ireland notice on "Carrowmore Financial Services (CLONE)," an unauthorized firm that appears to be impersonating a legitimate entity. Compliance teams should treat the name as a fraud and impersonation red flag and update screening and customer-warning controls. The source material is brief, so teams should consult the original Irish notice for specifics.

BaFin Warns Against Unauthorized Deposit Offers on Three Websites and Associated Email Domains

BaFin has warned against bi-ventures(.)de, biventures-kundenportal(.)de, and berlinventures(.)com, along with emails from the associated domains, for offering overnight and fixed-term deposit accounts without authorization. The warning is issued under Section 37 Paragraph 4 of the Banking Act. Compliance teams should treat it as a fraud typology and screening input, because it signals impersonation and unauthorized deposit-taking risk affecting customers, counterparties, and payment flows.

German Data Protection Commissioner Urges Genuine Patient Choice as ePA Research Data Use Begins

The BfDI has issued recommendations, based on a survey of 1,500 insured persons, urging the German Federal Government to strengthen transparency and granular user controls in the electronic patient file (ePA). From the end of October 2026, pseudonymized medication list data can be extracted for research unless insured persons object. Compliance teams at organizations handling German health data should treat this as a signal of regulatory expectations on consent, control, and transparency.

HKMA Links Green Fintech, Data Infrastructure, and Sustainable Finance Taxonomy to Combat Greenwashi

In his opening remarks at the 2026 Green Fintech Symposium, HKMA Chief Executive Eddie Yue presented a strategy that combines digital data infrastructure (the Commercial Data Interchange and Project CargoX), the next phase of the Hong Kong Taxonomy for Sustainable Finance, and market-led green fintech innovation. The speech sets no new binding requirements, but it signals supervisory priorities on greenwashing, transition-washing, and data-driven climate risk assessment. Compliance teams should treat the Taxonomy as the expected reference standard for sustainability claims and classifications.

HKMA Outlines SME Sustainable Finance Push as Hong Kong Taxonomy Phase 2B Consultation Opens

HKMA Deputy Chief Executive Darryl Chan said Hong Kong is expanding sustainable finance access for SMEs through a Phase 2B Hong Kong Taxonomy consultation, a broader green debt grant scheme, and a free greenhouse gas emissions calculator. The speech is not binding, but it signals supervisory priorities. Compliance teams should watch the taxonomy consultation, which will shape how transition and adaptation activities are classified and disclosed.