GRC Report Staff

The European Union’s three financial supervisory authorities have set out their joint priorities for 2027, with cyber resilience, artificial intelligence and sustainable finance among the principal areas of work. The program comes alongside new guidance from the EU’s securities regulator identifying the financial and sustainability reporting issues that listed companies should address in their 2026 annual reports.

Japan's financial regulator has urged banks to strengthen their cybersecurity defenses following a series of attacks that exposed millions of customer records and prompted a senior government official to describe the situation as a cybersecurity emergency.

Norway's data protection authority has fined Microsoft-owned advertising technology company Xandr approximately $9.6 million (NOK 92 million) for unlawfully processing and sharing sensitive personal information belonging to users of the dating app Grindr.

Poland's consumer protection authority has fined renewable energy installer Nasz Prąd approximately $5.49 million (PLN 21.475 million) after finding 21 unfair provisions in contracts that allowed the company to change equipment specifications, impose substantial penalties on homeowners and remove heating systems over unpaid balances.

The Norway Financial Supervisory Authority (Finanstilsynet) published a warning on Blueberry Capital on September 2, 2026. The warning relays an alert originally issued by Spain's securities regulator, the CNMV. Compliance teams should treat the entity as a potentially unauthorized or high-risk counterparty and screen for any exposure.

Bundesbank President Joachim Nagel indicated in a Le Monde interview that an ECB rate increase at the September 10, 2026 meeting is widely expected, with markets pricing in more than a 95% probability. He declined to offer guidance beyond that meeting, citing energy price swings and volatile financial markets. Compliance and risk teams should treat this as a signal of a tightening cycle and of heightened market, liquidity, and fiscal-policy uncertainty.

The Norway Financial Supervisory Authority (Finanstilsynet) has posted a warning about "Nexura VG," referencing a CSSF (Luxembourg) notice on the website www.nexuravg.com. The notice signals a suspected unauthorized or fraudulent financial services operation. Compliance teams should screen for exposure and update their watchlists.