GRC Report Staff

Ceratizit to Pay $54.4 Million to Settle Allegations of Evaded Customs Duties

Ceratizit USA, a Charlotte, North Carolina–based distributor of tungsten carbide products, has agreed to pay $54.4 million to resolve allegations that it violated the False Claims Act by knowingly evading U.S. customs duties on imports from China, the Department of Justice announced Thursday.

Croatia’s Data Protection Authority Fines Bank €1.5 Million Over Mobile Banking Privacy Violations

Croatia’s Personal Data Protection Agency has imposed an administrative fine of €1.5 million on a bank for multiple violations of the General Data Protection Regulation, following findings that the institution unlawfully collected extensive personal data from users of its mobile banking application.

OCC Proposes Simplified CRA Strategic Plan to Ease Compliance Burden on Community Banks

The Office of the Comptroller of the Currency on Wednesday released proposed guidance aimed at reducing regulatory burden for community banks by simplifying how they can comply with the Community Reinvestment Act.

Korea’s Privacy Regulator Pivots Toward Prevention as AI Reshapes the Data Landscape

The Personal Information Protection Commission (PIPC) recently unveiled its policy directions for 2026, laying out a sweeping plan to move Korea’s privacy regime away from after-the-fact penalties and toward a more preventive, risk-based approach designed for an AI-embedded society. The roadmap was presented on December 2 at the Sejong Convention Center during a joint reporting session with the Ministry of Science and ICT, the Korea Aerospace Administration, and the Korea Media and Communications Commission.

FCA Backs Overhaul of UK Benchmarks Rules as Government Consults on New Regime

The Financial Conduct Authority has welcomed the UK government’s move to reform the country’s benchmarks framework, signaling support for a shift away from the EU-era Benchmarks Regulation toward a more targeted, UK-specific regime.

Data Brokers Face Renewed Scrutiny from California Before Registration Deadline

California’s privacy regulator is sharpening its focus on data brokers that may be obscuring their identities or relying on corporate affiliations to sidestep registration requirements, as a new consumer deletion platform prepares to go live in 2026.

Australian Regulators Step In After Deloitte Review Flags Risk Management Gaps at Bendigo Bank

Australia’s banking and financial crime regulators have moved to tighten oversight of Bendigo and Adelaide Bank after an independent Deloitte review uncovered serious shortcomings in how the lender manages money laundering and broader non-financial risks.