GRC Report Staff

The Netherlands Data Protection Authority (Autoriteit Persoonsgegevens) has published a downloadable privacy statement template for small and medium-sized enterprises (SMEs) across 10 industries, along with a companion template for a processing register. The templates are voluntary guidance rather than new obligations, but they signal the regulator's baseline expectations for GDPR transparency and record-keeping. Compliance teams should note this benchmark, particularly when assessing SME customers, vendors, and counterparties in the Netherlands.

The Norway Financial Supervisory Authority has published a warning that relays a Luxembourg CSSF notice about fraudulent activities by persons misusing the name of Neventa Management. The notice signals a cross-border impersonation fraud risk, and compliance teams should update screening and client-protection controls accordingly.

Norway's Financial Supervisory Authority (Finanstilsynet) has circulated a warning that originated with Luxembourg's CSSF. It concerns fraudulent activity by persons misusing the name of the Luxembourg company Force Management. Compliance teams should treat this as a fraud and impersonation alert, screen for exposure, and update monitoring controls.

The AEPD examined a claim that Octopus Energy España allowed a fraudulent online contract in a victim's name, followed by an erroneous delinquency listing of EUR $246. The document provided is a truncated resolution to close proceedings. It shows the regulator weighing identity verification controls, risk analysis, and data accuracy. It also shows the weight a controller's prompt remediation carries. Compliance teams should treat it as a practical benchmark for onboarding fraud controls and credit-reporting governance.

The Bank of England's weekly report for September 2, 2026 shows reserve balances increased to GBP $643.7 Billion from GBP $640.7 Billion the prior week, driven largely by higher long-term repo lending. This is a routine balance sheet publication, not a new rule, but it offers compliance and treasury teams a data point on sterling liquidity conditions and central bank facility usage.

France’s competition authority has fined several companies in the Mayotte-based Nel group €2.16 million after finding that the group used its control of the Port of Longoni to exclude an established cargo-handling operator and impose unfair charges on local importers.

A bank could raise its fees by as much as 200% after a slight increase in inflation. Another could introduce charges for services that had previously been free. A third reserved the right to alter credit card agreements when it improved its products or expanded its offerings. These were among the contractual provisions challenged by Poland’s Office of Competition and Consumer Protection (UOKiK), which announced penalties totaling approximately $37.7 million (PLN 147.09 million) against four banks on October 15.