GRC Report Staff

Japan's Financial Services Agency (FSA) issued a formal written warning against Izakaya Limited, a Hong Kong-based entity operating the "IZAKA-YA" platform, for providing cryptoasset exchange services to Japanese residents without the required registration. This action underscores the FSA's continued enforcement focus on unregistered offshore crypto platforms targeting domestic consumers and signals heightened scrutiny of cross-border digital asset service providers.

EIOPA has submitted technical advice to the European Commission proposing targeted harmonization of national insurance guarantee schemes (IGS) across the EU, covering eligible policies, activation triggers, claims timelines, funding, and coordination with resolution authorities. While not yet binding legislation, this advice will shape a future legislative proposal and signals a direction of travel that insurers and IGS administrators across the EU should begin monitoring closely.

The ECB blog contrasts the 2026 inflation surge—driven almost entirely by energy supply shocks from the Middle East conflict—with the 2021-22 episode, which combined demand, fiscal, monetary, and supply factors. This distinction explains the ECB's more measured, data-dependent policy stance today versus the forceful tightening seen in 2022, which compliance and risk teams should factor into interest rate and economic scenario planning.

The Deutsche Bundesbank has issued updated auction rules, effective September 1, 2026, governing the issuance of European Financial Stability Facility (EFSF) Bonds and Bills via its ESM/EFSF Bidding System (EBS). Compliance teams at eligible credit institutions and investment firms must review membership eligibility criteria, minimum activity thresholds, and bidding mechanics to maintain or obtain "ESM/EFSF Market Group" status and ensure uninterrupted market access.

HKICL has identified multiple fraudulent websites impersonating its brand and Faster Payment System (FPS) services, using fake "Buyer Online Protection" schemes to steal personal data, banking credentials, and funds. Financial institutions should alert customers, strengthen fraud detection for FPS transactions, and ensure staff can direct affected customers to proper verification and reporting channels.

The Dutch Data Protection Authority (DPA) reviewed a draft regulation on the Smoking Cessation Programme Scheme and identified a single but significant deficiency: the draft fails to specify which categories of personal data healthcare providers must exchange when declaring mutually provided services. This matters for compliance teams because it reinforces the DPA's consistent expectation that any legal basis permitting data sharing, particularly data touching on health information, must meet strict legal certainty standards under GDPR.

The Deutsche Bundesbank will reopen two existing Bubill lines on September 7, 2026, increasing the January 2026 issue (ISIN DE000BU0E378) by EUR 2 Billion and the June 2026 issue (ISIN DE000BU0E428) by EUR 3 Billion, for a combined EUR 5 Billion supplementary issuance. Compliance teams at institutions participating in the Federal Emissions Bidding Group must ensure bidding procedures, timelines, and minimum nominal amounts are strictly observed to avoid tender non-compliance.