GRC Report Staff

The Norway Financial Supervisory Authority has issued a warning alerting consumers and firms to a clone entity fraudulently using the identity of an FCA-authorized firm under the domain gsbcapital.pro. This is a cross-border replication of a UK Financial Conduct Authority (FCA) warning, highlighting the ongoing risk of clone firm scams targeting investors across jurisdictions. Compliance teams should treat this as an operational and reputational risk alert rather than a new regulatory requirement.

The Dutch Data Protection Authority has completed its mandatory GDPR Article 36(4) legislative review of the draft Data Governance Regulation Implementation Regulation and raised no objections. This clears a key regulatory checkpoint for the decree's progression, signaling that the Dutch government's approach to implementing the EU Data Governance Regulation aligns with GDPR principles and fundamental rights protections.

The European Banking Authority has published an updated Article 31 record under the EU Data Protection Regulation (EUDPR), detailing how it processes and shares staff nationality data with EU Member State authorities for geographical balance reporting. While primarily an internal HR governance document, it serves as a model for data privacy documentation practices that compliance teams at regulated entities should note, particularly regarding transparency and data subject notification obligations.

Japan's Financial Services Agency has issued a consumer alert warning of "secondary damage" scams in which fraudsters target victims of failed real estate specified joint enterprise investments, falsely promising recovery of lost funds in exchange for fees or purchase of additional investment products. Compliance teams at financial institutions and real estate joint venture operators should note the heightened regulatory scrutiny on the sector and ensure customer-facing staff can recognize and redirect potential victims to appropriate consumer protection channels.

In her keynote at the European Capital Markets Dialogue, outgoing ESMA Chair Verena Ross outlined a vision for the "next chapter" of European supervision centered on simplification, outcome-focused regulation, and deeper EU-level supervisory integration. While not introducing binding requirements, the speech signals the direction of future ESMA policy and the ongoing Market Integration and Supervision Package (MISP) negotiations, which compliance teams should monitor closely.

At the G20 finance ministers meeting in Asheville, Bundesbank President Joachim Nagel noted stronger-than-expected German GDP growth driven by exports and fiscal expansion, while warning of rising inflation near 3 percent and growing debt levels. Compliance teams should monitor the upcoming ECB Governing Council meeting in Berlin for potential monetary policy signals affecting rate-sensitive products, lending, and capital planning.

The Bank of England's latest payment and settlement statistics show RTGS total settlement values reached £902,018 Million daily average in Q2 2026, with CHAPS volumes and values continuing their upward trend. Compliance teams at participating institutions should review the data for operational risk benchmarking, particularly regarding service availability incidents and settlement delays disclosed across RTGS infrastructure, CREST, and retail net settlement systems.