GRC Report Staff

CFTC Awards More Than $1.8 Million to Two Whistleblowers in Investor Fraud Cases

Two whistleblowers who helped expose fraud harming investors are set to receive more than $1.8 million, after the Commodity Futures Trading Commission said their information played a meaningful role in successful enforcement actions.

CNIL Fines Mobius Solutions €1 Million Over Deezer Data Breach

France’s data protection authority has fined Mobius Solutions €1 million after finding that the company, acting as a processor for music-streaming platform Deezer, failed to comply with core GDPR obligations tied to subcontracting and data handling.

AMLA Lays the Groundwork for EU-Wide AML Supervision Ahead of 2028 Shift

Europe’s new anti-money laundering authority is beginning to move from blueprint to reality. The Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) on Thursday set out the rules that will underpin its future role as a direct supervisor of the EU’s highest-risk financial institutions, marking a major step toward more unified AML and CFT oversight across the bloc.

Instacart to Pay $60 Million in Consumer Refunds to Settle FTC Deception Case

Instacart has agreed to pay $60 million in consumer refunds to settle a lawsuit brought by the Federal Trade Commission, which alleged that the grocery delivery platform used deceptive advertising, improper subscription practices, and unlawful refund processes that raised costs for shoppers.

ASIC Wraps Up the Year With Heavy Court Outcomes for Macquarie Securities, RM Capital, & ANZ

A decade of misreported market data, years of conflicted advice, and widespread failures affecting tens of thousands of customers all landed before the courts this week, as ASIC secured three major enforcement outcomes against Macquarie Securities, RM Capital, and ANZ. The decisions span institutional trading, advice oversight, and retail banking operations.

Ceratizit to Pay $54.4 Million to Settle Allegations of Evaded Customs Duties

Ceratizit USA, a Charlotte, North Carolina–based distributor of tungsten carbide products, has agreed to pay $54.4 million to resolve allegations that it violated the False Claims Act by knowingly evading U.S. customs duties on imports from China, the Department of Justice announced Thursday.

Croatia’s Data Protection Authority Fines Bank €1.5 Million Over Mobile Banking Privacy Violations

Croatia’s Personal Data Protection Agency has imposed an administrative fine of €1.5 million on a bank for multiple violations of the General Data Protection Regulation, following findings that the institution unlawfully collected extensive personal data from users of its mobile banking application.