GRC Report Staff

The Norway Financial Supervisory Authority has issued a warning, echoing a CSSF Luxembourg notice, concerning fraudulent entities misusing the name of iM Global Partner Asset Management S.A. Compliance teams should note that this is an impersonation/clone firm scam rather than an action against the legitimate regulated entity, but it carries reputational and consumer protection risks requiring immediate awareness and client communication.

The Spanish securities regulator (CNMV) has issued a public warning regarding an unauthorized entity operating under the name "Zentrix," which is not licensed to provide investment services in Spain. Note that this alert was logged under the Norway Financial Supervisory Authority jurisdiction, though the source document and link point to the CNMV (Spain), indicating a possible data classification or cross-border alert-sharing discrepancy that compliance teams should verify. This matters because unauthorized entities are frequently linked to fraudulent investment schemes targeting retail investors across multiple jurisdictions.

The Luxembourg financial regulator (CSSF) has issued a public warning regarding the website www.tagmarkets.com, indicating the entity is not authorized to provide financial services in the jurisdiction. This warning has been relayed by the Norway Financial Supervisory Authority, signaling cross-border regulatory attention to this unauthorized provider and the risk it poses to consumers and investors.

APRA and ASIC have jointly launched a consultation on proposed changes to simplify administration under the Financial Accountability Regime (FAR), releasing draft revised Regulator Rules and an updated FAR information paper. Compliance teams at all FAR-covered entities should review the proposals and consider submitting feedback before the October 2, 2026 deadline, as final changes are expected to take effect from early 2027.

The Norway Financial Supervisory Authority has issued a warning regarding "housetrading-financial," a clone firm fraudulently impersonating a legitimate FCA-registered entity in the United Kingdom. Compliance teams should note this as part of an ongoing pattern of clone firm scams targeting investors across jurisdictions, requiring enhanced due diligence and customer protection measures.

The Data Protection Commission has fined the Health Service Executive EUR 645,000 following an inquiry into systemic failures in the storage and retention of paper records containing sensitive medical data, triggered by two 2023 breach notifications. The decision underscores that GDPR security and storage-limitation obligations apply equally to physical records as to digital systems, and highlights breach notification and data subject communication failures as separately sanctionable infringements. Compliance teams, especially in healthcare and other sectors managing legacy paper archives, should treat this as a warning to audit offsite and legacy storage facilities.

The Norway Financial Supervisory Authority (Finanstilsynet) has issued a warning concerning Elevate North Advisors (elevatenorthadvisors.com), an entity also referenced in a related warning published by Switzerland's FINMA. The notice indicates the entity is not authorized to provide financial services in the relevant jurisdictions, posing a direct risk to consumers and counterparties who may engage with it believing it to be a regulated provider.