Find the Right GRC Solution

Search and compare GRC technology built for the problems you’re trying to solve

Compliance & Ethics

Norway FSA Flags swissinvestmentsa.ch on Warning List Citing FINMA Alert

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning on the website swissinvestmentsa.ch, which the source material links to a prior warning from the Swiss regulator FINMA. Compliance teams should treat the domain as a suspected unauthorized or fraudulent investment operation and update screening and client-protection controls accordingly.

ESAs Issue Operational Instructions to Improve DORA Major ICT Incident Reporting Quality

On September 16, 2026, the ESAs published 14 operational instructions to harmonize how major ICT-related incidents are reported under DORA and to fix recurring data quality issues. The instructions are non-binding "best efforts" guidance, but they were agreed with competent authorities and signal supervisory expectations. Compliance teams should align reporting templates and procedures now to avoid rejected, inconsistent, or duplicated submissions.

FINRA Fines Webull $4.2 Million Over Anti-Money Laundering & Trading Oversight Failures

The Financial Industry Regulatory Authority (FINRA) has fined Webull $4.2 million for widespread failures in its anti-money laundering controls, identity theft prevention program and oversight of customer trade execution, citing deficiencies that persisted for years as the online brokerage rapidly expanded.

Dutch ACM Drafts Policy Rule on Telecom Contract Expiration and Best-Rate Notices

The Netherlands Authority for Consumers and Markets (ACM) has issued a draft policy rule clarifying how telecom providers must notify customers about expiring contracts, free termination rights, and cheaper rates. The rule targets loyalty penalties and sets specific requirements for timing, format, and content. Providers should assess their current communications now, as consultation closes 27 October 2026 and a final rule is expected before year-end.

ASIC Form 7051 Requires Disclosing Entities to Certify and Lodge Half Yearly Reports Within 75 Days

ASIC Form 7051 (ASX Form 1001) is the certification notice that disclosing entities must lodge with their half yearly reports under the Corporations Act 2001. Lodgement is due within 75 days after the end of the accounting period, and late lodgement triggers fees. The document appears to be an existing form and guide (dated 2011 and 2014), not a new rule, so compliance teams should treat it as a reminder to confirm their lodgement processes.

ESAs Board of Appeal Publishes Alternate Member Haentjens Declaration of Commitment and Interests

The Board of Appeal of the European Supervisory Authorities published a signed declaration of commitment and interests from alternate member Matthias Haentjens, as required by Article 59(6) of the ESA founding regulations. The filing is routine and creates no new obligations for regulated firms. It does reinforce the independence safeguards behind the appeals process that firms may use to challenge ESA decisions.

SEC Proposes Rescinding Rule 14a-8 and Amending Rule 14a-4 in Proxy Modernization Push

The SEC has issued two proposing releases. One would rescind Rule 14a-8 (the federal shareholder proposal rule) and amend Rule 14a-4 on discretionary proxy authority. The other would modernize four proxy solicitation rules. If adopted, shareholder proposal governance would shift largely to state law and company governing documents, and several federal filing and timing requirements would be eliminated or shortened. Compliance and corporate governance teams should begin assessing operational and legal impacts now and consider submitting comments.