GRC Report Staff

The Data Protection Commission has fined the Health Service Executive EUR 645,000 following an inquiry into systemic failures in the storage and retention of paper records containing sensitive medical data, triggered by two 2023 breach notifications. The decision underscores that GDPR security and storage-limitation obligations apply equally to physical records as to digital systems, and highlights breach notification and data subject communication failures as separately sanctionable infringements. Compliance teams, especially in healthcare and other sectors managing legacy paper archives, should treat this as a warning to audit offsite and legacy storage facilities.

The Norway Financial Supervisory Authority (Finanstilsynet) has issued a warning concerning Elevate North Advisors (elevatenorthadvisors.com), an entity also referenced in a related warning published by Switzerland's FINMA. The notice indicates the entity is not authorized to provide financial services in the relevant jurisdictions, posing a direct risk to consumers and counterparties who may engage with it believing it to be a regulated provider.

DNB and the AFM have published their monthly sanctions alert, detailing regulatory amendments and rectifications affecting sanctions regimes related to ISIS/Al Qaeda, Russia, Ukraine, Belarus, and Libya during August 2026. Dutch financial institutions must assess whether these changes impact their customer base, transactions, or investments and take immediate action if a sanctions hit is identified.

The Hellenic Capital Market Commission (HCMC) has issued a public warning that the online trading platform evrostovaltis-ai.com is not authorized to provide investment or crypto-asset services in Greece. Although this notice was relayed via the Norway Financial Supervisory Authority's alert system, the originating authority and jurisdiction are Greek, highlighting the cross-border nature of unauthorized entity warnings that compliance teams must track across multiple regulators.

The Norway Financial Supervisory Authority has issued a warning regarding sygnumglobal.co, an entity referencing a Swiss issuer that appears to be operating without proper authorization. The warning cross-references a FINMA (Switzerland) warning list entry, suggesting this is a case of potential brand impersonation or unlicensed cross-border financial activity targeting consumers.

The Norway Financial Supervisory Authority has relayed an FCA warning concerning "reclaim-experts.com," a clone firm fraudulently impersonating a legitimate FCA-authorized entity. Compliance teams should treat this as a consumer protection and fraud alert, ensuring customer-facing staff and fraud monitoring systems are updated to recognize this specific threat.

The AFM announced that outgoing director Jos Heuvelman has been named an Officer in the Order of Orange-Nassau in recognition of his decades-long contribution to Dutch and European financial regulation. This is a personnel and ceremonial announcement with no direct regulatory, supervisory, or compliance obligations attached.