GRC Report Staff

Poland's data protection authority (UODO) reported a 363% increase in total administrative fines and a 61% jump in complaints in 2025, signaling intensified enforcement activity. Compliance teams operating in Poland should note the sharp rise in breach notifications (51% increase) and inspections (52% increase), reflecting heightened regulatory scrutiny and public awareness of data protection rights.

APRA and ASIC jointly convened superannuation CEOs in June 2026 to discuss frontier AI, cyber risk, operational resilience, and crisis preparedness. While no new formal requirements were introduced, the roundtable signals heightened regulatory focus on these themes, which compliance teams should factor into ongoing risk and governance reviews.

BaFin has issued a public warning against trade-lend(.)com, operated by Tradeshow Limited, for providing unlicensed cryptocurrency exchange services disguised as loan offerings. This action underscores ongoing regulatory scrutiny of unauthorized crypto activity in Germany and serves as a reminder for compliance teams to monitor third-party and counterparty due diligence processes.

The Dutch Data Protection Authority (DPA) has shared an implementation and enforceability test on the AI Regulation Implementation Act with Parliament, outlining a multi-year funding estimate (2027–2031) needed to adequately supervise AI under the EU AI Act. Compliance teams operating in the Netherlands should note the DPA's expanded role as a market surveillance authority for AI, with supervisory capacity expected to scale alongside rapid AI adoption and increasing system complexity.

BaFin has issued a public warning against zentrumpro(.)com for suspected unauthorized provision of financial and cryptocurrency services in Germany. This action underscores ongoing regulatory scrutiny of unlicensed online financial operators and serves as a reminder for compliance teams to monitor regulatory warning lists as part of third-party and fraud risk management.

The CFTC has recorded certification of a new Designated Contract Market (DCM) product from FEX, a binary option-style event contract tied to copper futures price forecasts. This filing is relevant to compliance teams at firms trading, clearing, or offering access to CFTC-regulated derivatives, as it expands the universe of certified products subject to CFTC oversight.

MAS has published a consultation paper proposing amendments to the Payment Services Act 2019 to formalize its Single-Currency Stablecoin (MAS-SCS) framework, covering licensing, value stability, capital, redemption, and disclosure requirements. Compliance teams at financial institutions engaging with stablecoins, digital payment tokens, or tokenized asset markets in Singapore should review the proposals closely, as they will determine who can market stablecoins as "MAS-regulated" and set new safeguards for issuers and intermediaries. Comments are due by October 16, 2026.