GRC Report Staff

EU Hits Temu With €200 Million DSA Fine Over Illegal Product Risks

The European Commission has fined Temu €200 million for violating the European Union's Digital Services Act (DSA), concluding that the online marketplace failed to properly assess and address the risks posed by illegal products offered through its platform.

FCA Finds Stronger Sanctions Controls but the Same Old Weaknesses Behind Breaches

The UK's Financial Conduct Authority (FCA) said this week that firms have made meaningful progress in strengthening sanctions controls since February 2022, when Russia's invasion of Ukraine triggered an unprecedented expansion of sanctions requirements and compliance expectations across the financial sector.

Carnival Discloses Cyberattack Affecting Nearly 6 Million People After Employee Social Engineering Incident

Carnival Corporation has disclosed a cybersecurity incident that exposed personal information belonging to nearly six million individuals after an attacker successfully used social engineering tactics to gain access to an employee account.

CFTC Moves to Block Rhode Island’s Prediction Market Crackdown as Jurisdiction Fight Continues to Spread

The Commodity Futures Trading Commission's battle with state regulators over prediction markets has reached Rhode Island, the latest front in what is becoming one of the most consequential jurisdictional disputes in modern financial regulation. The CFTC moved to intervene in litigation in the U.S. District Court for the District of Rhode Island, seeking to stop the state from applying its gambling laws against a CFTC-registered designated contract market.

Australians Grow More Concerned About Privacy as Trust in AI Companies Falls to 4%, OAIC Survey Finds

Australians are becoming more concerned about privacy even as businesses and governments push deeper into the digital economy, according to a major survey released Thursday that found public trust in artificial intelligence companies has fallen to strikingly low levels.

Norion Bank Fined $8.3 Million Over Anti-Money Laundering Due Diligence Failures

One of the details buried in Sweden’s enforcement notice against Norion Bank is that the regulator specifically examined customers that were legal entities, not just individuals or companies. That distinction tends to matter. Corporate structures are where anti-money laundering programs become less about identity verification and more about whether a bank actually understands who is sitting behind the paperwork.

France’s Privacy Regulator Calls IQVIA’s Bluff With €5 Million Health Data Fine

A French privacy regulator spent part of its week explaining why a pile of health data with the names removed is not the same thing as anonymity. That distinction just cost IQVIA €5 million.France’s data protection authority, the CNIL, announced the sanction against the company, a subsidiary of the healthcare analytics and consulting giant IQVIA, over its handling of two large health data warehouses containing information sourced from pharmacies and doctors across France.