GRC Report Staff

BaFin Warns Against Unauthorized Financial Services Offered via rollincapital(.)com Website

BaFin has issued a warning about rollincapital(.)com, whose unknown operators are suspected of offering financial and securities services in Germany without authorization. FINMA, the Swiss regulator, has already issued a corresponding warning. Compliance teams should treat the site as a high-risk counterparty and update screening and fraud controls accordingly.

Dutch DPA Objects to Human Trafficking Directive Decree Over Unregulated Processing Bases

The Dutch Data Protection Authority (AP) has formally objected to the draft decree implementing the revised EU Human Trafficking Directive. It found that the GDPR legal bases of public interest task and legal obligation are not properly established in law. Without further regulation, processing of victims' personal data, including special category and criminal data, could be unlawful. Compliance teams should treat this as a signal of how strictly regulators apply the Article 6(3) requirement.

Swedish FSA Launches Survey on AI Use and Risk Management Across Financial Sector

Finansinspektionen (FI) is surveying a wide range of supervised firms on how they use AI and manage its opportunities and risks. The survey also covers how firms expect the partially applicable EU AI Act to affect them. Compliance teams at Swedish-supervised institutions should expect a data request and treat the exercise as a signal of FI's supervisory priorities.

Norway FSA Publishes Warning on VrenKapstead Referencing UK FCA Alert

The Norway Financial Supervisory Authority (Finanstilsynet) has issued a warning on an entity named VrenKapstead, pointing to a corresponding UK Financial Conduct Authority (FCA) warning. The source content is minimal, so compliance teams should treat this as an unauthorized or suspicious firm alert and screen for exposure while verifying details directly with the FCA.

Bank of England's Pill Backs Active Rate Hikes to 4% Over Wait-and-See Approach

MPC member Huw Pill explained his votes to raise Bank Rate to 4% from the current 3.75%, arguing that waiting for Middle East energy uncertainty to resolve risks falling behind the curve on second-round inflation effects. The speech is not a rule change, but it signals a possible tightening bias and a shift toward scenario-based, underlying-inflation analysis. Compliance and risk teams should reassess rate-sensitive exposures, stress scenarios, and customer-facing disclosures.

CFTC Official Flags Four Global Regulatory Gaps in Autonomous, Tokenized Derivatives Markets

In a speech at George Washington University, CFTC International Affairs Director Mel Gunewardena argued that international regulation has not kept pace with continuous, tokenized, AI-driven markets. He identified four gaps: supervisory cooperation, financial-stability oversight, standard-setting governance, and market safeguards. The speech is not binding, but it signals the CFTC's priorities, including a review of foreign market access to the U.S. and a push for stronger cross-border crisis coordination.

Malta Regulator Calls for Stronger Risk Oversight After Insurance Sector Review

The Malta Financial Services Authority (MFSA) has directed insurance and reinsurance companies to review their risk management arrangements after supervisory inspections uncovered weaknesses in risk assessment procedures, operational incident management, and business continuity planning.