GRC Report Staff

Norway FSA Republishes Luxembourg CSSF Warning on Fraudulent Gablau Invest Sàrl Activities

The Norway Financial Supervisory Authority has listed a warning about fraudulent activities carried out under the name of Gablau Invest Sàrl, a purported Luxembourg company. The warning originates from Luxembourg's CSSF. Compliance teams should treat the entity as a potential investment fraud risk and update screening and client-protection controls.

Dutch DPA Releases Privacy Statement and Processing Register Templates for SMEs

The Netherlands Data Protection Authority (Autoriteit Persoonsgegevens) has published a downloadable privacy statement template for small and medium-sized enterprises (SMEs) across 10 industries, along with a companion template for a processing register. The templates are voluntary guidance rather than new obligations, but they signal the regulator's baseline expectations for GDPR transparency and record-keeping. Compliance teams should note this benchmark, particularly when assessing SME customers, vendors, and counterparties in the Netherlands.

Norway FSA Republishes Luxembourg CSSF Warning on Fraudulent Misuse of Neventa Management Name

The Norway Financial Supervisory Authority has published a warning that relays a Luxembourg CSSF notice about fraudulent activities by persons misusing the name of Neventa Management. The notice signals a cross-border impersonation fraud risk, and compliance teams should update screening and client-protection controls accordingly.

Norway FSA Republishes Luxembourg CSSF Warning on Fraudsters Misusing Force Management Name

Norway's Financial Supervisory Authority (Finanstilsynet) has circulated a warning that originated with Luxembourg's CSSF. It concerns fraudulent activity by persons misusing the name of the Luxembourg company Force Management. Compliance teams should treat this as a fraud and impersonation alert, screen for exposure, and update monitoring controls.

Spain's Data Protection Agency Closes Octopus Energy Identity Theft Case After Remediation Steps

The AEPD examined a claim that Octopus Energy España allowed a fraudulent online contract in a victim's name, followed by an erroneous delinquency listing of EUR $246. The document provided is a truncated resolution to close proceedings. It shows the regulator weighing identity verification controls, risk analysis, and data accuracy. It also shows the weight a controller's prompt remediation carries. Compliance teams should treat it as a practical benchmark for onboarding fraud controls and credit-reporting governance.

Bank of England Weekly Report Shows Reserve Balances Rising to GBP $643.7 Billion

The Bank of England's weekly report for September 2, 2026 shows reserve balances increased to GBP $643.7 Billion from GBP $640.7 Billion the prior week, driven largely by higher long-term repo lending. This is a routine balance sheet publication, not a new rule, but it offers compliance and treasury teams a data point on sterling liquidity conditions and central bank facility usage.

French Competition Authority Fines Nel Group €2.16 Million Over Abuses at Mayotte Port

France’s competition authority has fined several companies in the Mayotte-based Nel group €2.16 million after finding that the group used its control of the Port of Longoni to exclude an established cargo-handling operator and impose unfair charges on local importers.