GRC Report Staff

ASIC Proposes 10-Year Extension and Strengthening of CFD Consumer Protections

ASIC is consulting on a 10-year extension (to 2037) of its CFD product intervention order, with amendments to modernize the definition of CFDs to capture digital asset-settled products and clarify margin requirements. CFD issuers and industry stakeholders have a short four-week window to respond, making prompt internal review essential for affected firms.

ASIC Proposes 10-Year Extension and Amendments to CFD Product Intervention Order

ASIC is consulting on a proposal to extend the CFD Product Intervention Order (PIO) for a further 10 years and introduce targeted amendments addressing margin calculation, inducements, record-keeping, and digital asset settlement. CFD issuers and brokers should review the proposed changes closely, as they tighten margin requirements for CFDs over options and multi-position netting, and expand the PIO's scope to capture digital-asset-settled derivatives with CFD-like characteristics. Feedback is due by 9 November 2026, giving firms a limited window to assess operational and compliance impacts.

EBA Board Addresses AI Cyber Risk, 2027 Stress Test, and Work Program Priorities

The EBA Board of Supervisors' June 2026 minutes reveal heightened supervisory focus on frontier AI-related cyber risk, NBFI interlinkages, and approval of the 2027 EU-wide stress test methodology, including a new climate risk module. These discussions signal upcoming supervisory actions and reporting expectations that compliance teams at EU banks should begin preparing for now.

DNB to Host In-Person Information Meeting on Personal Background Checks in November 2026

DNB is hosting an in-person information session on November 5, 2026, to explain its personal background assessment process for individuals subject to fit-and-proper reviews at financial institutions. Compliance and HR teams involved in candidate nominations or assessments should register by November 2 to secure attendance and submit questions in advance.

AMF and ACPR Flag Gaps in Product Governance and Advice on Financial and Life Insurance Products

Following around sixty joint audits conducted between 2020 and 2024, the AMF and ACPR have published a report identifying recurring weaknesses in product governance and client advisory practices among financial and life insurance distributors in France. While the findings are not a comprehensive market assessment, they highlight significant compliance gaps—particularly around target market definition, client information collection, and advice documentation—that firms should address ahead of the EU Retail Investment Strategy directive expected by end-2026.

Danish DPA Responds to Revised Draft AI Authorization Act for Public Sector Data Processing

The Danish Data Protection Agency (Datatilsynet) has submitted a consultation response on the revised draft of the AI Authorization Act, which would give public authorities a data protection legal basis to develop and use AI systems. While the Agency acknowledges improvements from the earlier draft, it stresses that a legal basis alone does not satisfy broader GDPR obligations, a critical reminder for compliance teams involved in public-sector AI deployment.

BaFin Warns Against Unauthorized Financial and Crypto Services by Zyrtex-X

BaFin has issued a public warning against Zyrtex-X, an entity operating through wealthinvsthubs.com, which is suspected of offering financial, securities, and cryptocurrency services in Germany without the required authorization. Compliance teams should treat this as a reminder to maintain vigilance around unauthorized third-party financial service providers and to reinforce customer due diligence processes related to unlicensed entities.