GRC Report Staff

Norway Regulator Flags Clone Entity "Aseviaventure" Operating Without Authorization

The Norway Financial Supervisory Authority has issued a warning identifying "Aseviaventure" as a cloned entity, originally flagged by Spain's CNMV, which is operating without proper authorization. Compliance teams should treat this as a boiler-room/clone-firm risk indicator and ensure this entity name is screened against client and counterparty records.

Warning Issued Over Fraudulent Use of Clearstream Banking S.A. Name

The Luxembourg financial regulator (CSSF) has issued a public warning alerting market participants to fraudulent activities by unauthorized persons misusing the name of Clearstream Banking S.A. Compliance teams should treat any unsolicited communications referencing Clearstream with heightened scrutiny and verify authenticity through official channels before engaging.

BaFin Warns Against Unauthorized Crypto Services Offered on 37mh.com

BaFin has issued a public warning against the website 37mh(.)com, which is offering cryptocurrency services in Germany without the required authorization and falsely claiming BaFin supervision. This serves as a reminder to compliance teams of ongoing enforcement against unlicensed crypto operators and the importance of verifying regulatory claims made by third parties or counterparties.

Norway and Spain Regulators Warn of Clone Firm "IBROKERGM" Impersonating Licensed Broker

The Norway Financial Supervisory Authority, referencing an alert from Spain's CNMV, has issued a warning identifying "IBROKERGM" as a clone entity falsely claiming association with an authorized financial services provider. Compliance teams should treat this as an active consumer-protection and fraud-prevention alert requiring immediate screening against client and counterparty databases.

Norway Regulator Warns of Clone Firm Impersonating FCA-Authorized gsbcapital.pro

The Norway Financial Supervisory Authority has issued a warning alerting consumers and firms to a clone entity fraudulently using the identity of an FCA-authorized firm under the domain gsbcapital.pro. This is a cross-border replication of a UK Financial Conduct Authority (FCA) warning, highlighting the ongoing risk of clone firm scams targeting investors across jurisdictions. Compliance teams should treat this as an operational and reputational risk alert rather than a new regulatory requirement.

Dutch DPA Issues No-Objection Opinion on Data Governance Regulation Implementation Decree

The Dutch Data Protection Authority has completed its mandatory GDPR Article 36(4) legislative review of the draft Data Governance Regulation Implementation Regulation and raised no objections. This clears a key regulatory checkpoint for the decree's progression, signaling that the Dutch government's approach to implementing the EU Data Governance Regulation aligns with GDPR principles and fundamental rights protections.

EBA Publishes Record of Processing Activity for Staff Data Shared with Member States

The European Banking Authority has published an updated Article 31 record under the EU Data Protection Regulation (EUDPR), detailing how it processes and shares staff nationality data with EU Member State authorities for geographical balance reporting. While primarily an internal HR governance document, it serves as a model for data privacy documentation practices that compliance teams at regulated entities should note, particularly regarding transparency and data subject notification obligations.