The European Data Protection Board is attempting to answer some of the questions that have lingered around the GDPR almost since the regulation took effect. When is data truly anonymous? What obligations apply when developers scrape the web to train generative AI? And how should organizations think about personal data on blockchain networks?
There is an understated honesty in the way the Monetary Authority of Singapore begins its latest sustainability report. Before it speaks of new guidance, larger investment pools or cleaner buildings, it acknowledges something that has become increasingly difficult for policymakers to ignore: the climate transition has become harder, not easier. Geopolitical tensions have reordered priorities. Funding is less certain. Energy security has reclaimed a place near the top of government agendas. Yet the physical risks associated with a warming planet have shown little interest in waiting for political consensus to return.
Nearly two-thirds of the small and medium-sized businesses surveyed by the European Union’s cybersecurity agency had heard of the Cyber Resilience Act. Knowing that a law exists, however, is not the same as knowing what to do about it.
The Dutch central bank has fined payment institution CCV Netherlands €2.65 million after finding that deficiencies in its transaction monitoring system persisted for more than two years, leaving thousands of merchant profiles improperly processed and potentially suspicious activity inadequately examined. De Nederlandsche Bank announced the penalty Monday, saying CCV failed to adequately and continuously monitor transactions as required under the Netherlands’ Anti-Money Laundering and Anti-Terrorist Financing Act, known by its Dutch abbreviation, Wwft.
Edwards Lifesciences paid $115 million for JC Medical in July 2024, an amount that landed just beneath the $119.5 million threshold that would have required the transaction to be reported to federal antitrust authorities. It was close, but close does not count in a statute governed by arithmetic. The Federal Trade Commission says the math was incomplete.
The Dutch Data Protection Authority has published two documents on Monday. One provides GDPR guidance for developers of generative AI models. The other offers a practical checklist for organizations that want to purchase, implement and use the technology.
For 208 business days, Deutsche Bank’s reports to Australia’s corporate regulator placed hundreds of thousands of derivatives transactions on the wrong side of the ledger. The problem was in the “direction” fields, mandatory entries showing whether the bank was acting as the effective buyer or seller at a specified price. Deutsche Bank reported those fields inaccurately for 264,574 over-the-counter derivatives transactions between Oct. 21, 2024, and Aug. 15, 2025, according to the Australian Securities and Investments Commission.