GRC Report Staff

The legal fallout from 23andMe's 2023 data breach is now colliding with the company's bankruptcy proceedings. A coalition of 42 state attorneys general announced Tuesday that it has reached an $18 million settlement with the bankruptcy trustee for 23andMe, resolving allegations that the genetic testing company failed to implement reasonable safeguards before a breach that exposed the information of 6.9 million customers worldwide.

A bipartisan coalition of 49 attorneys general has secured more than $29 million from Glenmark Pharmaceuticals to resolve allegations that the company participated in a long-running scheme to inflate the prices of generic prescription drugs, New York Attorney General Letitia James announced Wednesday.

The Canadian Securities Administrators did not set out to measure how many firms had suffered cyber incidents. Instead, it examined something more revealing: whether the safeguards meant to prevent those incidents were keeping pace with the way financial firms now operate.

The Department of Justice announced Wednesday that New York Packaging, which does business as Redi-Bag, and its chief executive, have agreed to resolve allegations that they falsely declared the country of origin of imported polyethylene retail carrier bags, allowing the company to avoid antidumping duties owed to the United States.

Norway's financial sector entered 2026 from a position most regulators would envy. Payment services remained stable throughout the previous year, operational disruptions stayed broadly in line with recent experience, and none of the ICT incidents reported in 2025 threatened financial stability. That stability, however, is not what concerns the Norwegian Financial Supervisory Authority.

The European Data Protection Board is attempting to answer some of the questions that have lingered around the GDPR almost since the regulation took effect. When is data truly anonymous? What obligations apply when developers scrape the web to train generative AI? And how should organizations think about personal data on blockchain networks?

There is an understated honesty in the way the Monetary Authority of Singapore begins its latest sustainability report. Before it speaks of new guidance, larger investment pools or cleaner buildings, it acknowledges something that has become increasingly difficult for policymakers to ignore: the climate transition has become harder, not easier. Geopolitical tensions have reordered priorities. Funding is less certain. Energy security has reclaimed a place near the top of government agendas. Yet the physical risks associated with a warming planet have shown little interest in waiting for political consensus to return.