GRC Report Staff

Japan's Financial Services Agency promulgated a partial amendment to the designation of sustainability disclosure standards under Article 19-9, Paragraph 5 of the Cabinet Office Ordinance on Disclosure of Corporate Information, and it took effect on the day of publication. The FSA received only four public comments, which suggests limited contention. Compliance teams should review the attachments to determine whether disclosure obligations or internal reporting frameworks are affected.

The European Central Bank released its routine weekly consolidated financial statement of the Eurosystem, reflecting balance sheet positions as at 11 September 2026. The provided content contains only the reference date, with no figures or policy changes. It creates no new compliance obligations, but it remains a useful input for liquidity and market monitoring.

On September 15, 2026, the SEC approved FINRA Rule 3290, as modified by Partial Amendment No. 1. The rule replaces Rules 3270 (Outside Business Activities) and 3280 (Private Securities Transactions) with a single framework that narrows reportable activity to investment-related activities. Compliance teams at member firms will need to revise policies, procedures, and surveillance to reflect the new scope, categories, and assessment factors.

The Hong Kong Monetary Authority (HKMA) allotted HKD $64.979 Billion of 91-day and HKD $14 Billion of 182-day Exchange Fund Bills on September 15, 2026, with accepted average yields of 2.83% and 3.02%. This is a routine market operation and not a new compliance requirement. It does show strong demand and the current short-term HKD rate environment, which matters for treasury, liquidity, and market risk monitoring.

BaFin has warned the public about festgeldlotse(.)de, whose unknown operators are suspected of offering financial and securities services without authorization while falsely claiming a link to Munich-based TFD KVG GmbH. BaFin confirms this is identity theft and that the named firm has no connection to the site. Compliance teams should treat the warning as a fraud-typology and brand-impersonation alert and update their controls accordingly.

The Austrian Financial Market Authority (FMA) fined a management board member of an issuer EUR 18,000 under the Market Abuse Regulation (MAR) for failing to notify a personal transaction within three business days. The decision is final and was resolved through an accelerated procedure. It shows that regulators enforce managers' transaction (PDMR) reporting deadlines strictly, even for single late filings by individuals.

The HKMA has alerted the public to fraudulent websites and internet banking login screens impersonating four Hong Kong banks: The Bank of East Asia, Shanghai Commercial Bank, Chong Hing Bank, and Fubon Bank (Hong Kong). The alert restates that banks do not send SMS or emails with embedded hyperlinks for transactions and do not request sensitive credentials. Compliance teams should treat it as a prompt to review fraud controls, customer communications, and incident response procedures.