Chinese authorities have imposed severe penalties on PricewaterhouseCoopers (PwC) for its role in auditing the collapsed property developer Evergrande. The punishment, including a six-month ban and fines exceeding 400 million yuan ($56.4 million), marks the heaviest sanctions yet for international accounting firms operating in China.
The recent data breach at the Centers for Medicare & Medicaid Services (CMS), which compromised the personal information of nearly one million Medicare beneficiaries, serves as a powerful reminder of the serious cybersecurity, governance, risk management, and compliance (GRC) challenges facing organizations in today's digital landscape. The breach, stemming from a vulnerability in third-party software (MOVEit) has exposed significant gaps in vendor management, IT security, and regulatory compliance.
The banking sector finds itself at a critical juncture. The proliferation of partnerships between traditional financial institutions and innovative FinTechs has ushered in unprecedented opportunities for growth and customer engagement. However, this intricate web of relationships has also introduced a new dimension of risk that demands immediate attention from Governance, Risk, and Compliance (GRC) professionals, Third-Party Risk Management (TPRM) specialists, and compliance officers.
In an era where data is often described as the new oil, Toyota, one of the world's largest automakers, finds itself again grappling with the consequences of a significant data leak. The incident, involving the exposure of 240GB of sensitive information, brings to the forefront the complex challenges of managing cybersecurity in a digitally interconnected business ecosystem.
The Dutch Data Protection Authority (DPA), in cooperation with the French data protection authority CNIL, has imposed a colossal €290 million fine on Uber B.V. and Uber Technologies Inc. The penalty, announced on August 26, 2024, stems from Uber's unauthorized transfer of European drivers' personal data to the United States without implementing sufficient safeguards—a violation of the General Data Protection Regulation (GDPR).
Texas Attorney General Ken Paxton has filed a lawsuit against industry titan General Motors (GM) over the company's alleged unlawful collection and sale of driver data. This action comes as part of a broader data privacy and security initiative launched by Paxton to aggressively enforce Texas privacy laws.
The latest survey conducted by BarkerGilmore provides a revealing look into the compensation trends for Chief Compliance Officers (CCOs) across public companies, private companies, and non-profit organizations. As compliance professionals navigate an increasingly complex regulatory environment, understanding these compensation patterns offers valuable insight into the evolving priorities of organizations across various sectors.