GRC Report Staff

Spain Moves to Demystify DORA With 74-Question Industry Guide

Spain’s securities regulator, the Comisión Nacional del Mercado de Valores, has recently published a detailed set of 74 frequently asked questions aimed at helping financial firms interpret and apply the EU’s Digital Operational Resilience Act.

China Issues New Anti-Monopoly Guidelines Targeting Algorithmic Pricing & Platform Exclusivity

China’s market regulator on Friday released new anti-monopoly guidelines for internet platforms aimed at curbing collusion and unfair pricing practices, as authorities continue tightening oversight of the country’s digital economy.

Complyance Secures $20 Million Series A to Expand Agent-Based AI for Enterprise GRC

Complyance has raised $20 million in a Series A funding round led by GV, with continued backing from Creandum, HV Capital, Speedinvest, and Everywhere Ventures. The company also said new angel investors include members of security and GRC leadership teams at organizations such as Anthropic and Mastercard.

UK Regulator Hits Adult Site With £800,000 Fine as Online Safety Act Age Checks Take Effect

Ofcom has fined Kick Online Entertainment £800,000 after finding the company failed to put in place age checks to stop children from accessing pornographic content, in breach of duties under the Online Safety Act.

EPA Reverses 2009 Endangerment Finding in Major Shift for U.S. Climate Regulation

In a massive shift in federal climate policy, the U.S. Environmental Protection Agency finalized a rule repealing the 2009 Greenhouse Gas Endangerment Finding and rolling back federal greenhouse gas emission standards for light, medium, and heavy-duty vehicles.

Sanctions Controls Under Strain as Finland’s Regulator Targets Payment Providers

In a recent supervision release, Sweden's Financial Supervisory Authority (FIN-FSA) published a summary of its updated sanctions risk assessment covering sectors supervised under the Anti-Money Laundering Act. The previous summary was issued in autumn 2024.

EDPB Charts Next Phase of GDPR Oversight With Focus on Clarity, Consistency & Cross-Regulatory Coordination

The European Data Protection Board has set out how it intends to navigate the next phase of Europe’s digital rulebook, adopting its 2026–2027 work program to make GDPR compliance easier to understand, ensure enforcement is more consistent across borders and strengthen cooperation in an increasingly crowded regulatory landscape.