GRC Report Staff

Devastating Impact of Data Breaches Highlighted by UK ICO

In a strong message to UK organizations, Information Commissioner John Edwards has emphasized the critical need to prioritize data protection and privacy in order to mitigate the devastating ripple effects of data breaches.

Alibaba to Pay $433.5 Million in One of Largest Securities Class Action Settlements

Alibaba Group Holding Ltd. has agreed to pay $433.5 million to settle a securities fraud class action lawsuit in Manhattan federal court. This settlement, once approved by the court, will rank among the 50 largest securities class action settlements in U.S. history since the Private Securities Litigation Reform Act of 1995.

ESMA Unveils 2024 Enforcement Priorities for EU Corporate Reporting

The European Securities and Markets Authority (ESMA), the EU’s financial markets regulator, has released its European Common Enforcement Priorities (ECEP) for 2024 corporate reporting. This annual guidance aims to harmonize supervision across the EU and outlines areas that ESMA, alongside European national enforcers, will focus on as they review corporate reports in 2025.

Top Banking Regulator Warns of Compliance Blind Spots, Drawing Lessons from Past Failures

Acting Comptroller of the Currency Michael J. Hsu warned financial institutions against falling into compliance tunnel vision, citing historical examples where regulatory focus on specific risks inadvertently created new vulnerabilities in the financial system.

FINRA’s Crackdown on Broker Misconduct

This week, FINRA ramped up its enforcement efforts, penalizing two brokerage firms—Fenix Securities, LLC and Interactive Brokers LLC—for serious compliance violations. The fines and censures handed down highlight the regulator’s ongoing commitment to enforcing rules that safeguard market integrity and protect investors.

Irish Data Protection Commission Fines LinkedIn €310 Million for GDPR Violations

The Irish Data Protection Commission (DPC) has levied a substantial fine of €310 million against LinkedIn Ireland Unlimited Company, following a lengthy inquiry into the company's data processing practices. This inquiry, initiated on August 20, 2018, stemmed from a complaint lodged by the French non-profit organization La Quadrature Du Net. Initially filed with the French Data Protection Authority, the complaint was subsequently referred to the DPC, which serves as the lead supervisory authority for LinkedIn.

CFPB Orders Apple & Goldman Sachs to Pay Over $89 Million for Apple Card Failures

The Consumer Financial Protection Bureau (CFPB) has mandated that Apple Inc. and Goldman Sachs Group, Inc. pay more than $89 million due to substantial customer service failures and misleading practices affecting hundreds of thousands of Apple Card users. The CFPB's investigation revealed that the two companies mishandled transaction disputes and provided inaccurate information about interest-free payment options for consumers.