Find the Right GRC Solution

Search and compare GRC technology built for the problems you’re trying to solve

Compliance & Ethics

DNB to Host In-Person Information Meeting on Personal Background Checks in November 2026

DNB is hosting an in-person information session on November 5, 2026, to explain its personal background assessment process for individuals subject to fit-and-proper reviews at financial institutions. Compliance and HR teams involved in candidate nominations or assessments should register by November 2 to secure attendance and submit questions in advance.

AMF and ACPR Flag Gaps in Product Governance and Advice on Financial and Life Insurance Products

Following around sixty joint audits conducted between 2020 and 2024, the AMF and ACPR have published a report identifying recurring weaknesses in product governance and client advisory practices among financial and life insurance distributors in France. While the findings are not a comprehensive market assessment, they highlight significant compliance gaps—particularly around target market definition, client information collection, and advice documentation—that firms should address ahead of the EU Retail Investment Strategy directive expected by end-2026.

Spanish DPA Clarifies Legal Basis and Consent Rules for Legal Aid Data Processing

The Spanish Data Protection Agency (AEPD) issued a legal opinion clarifying that bar associations and legal aid commissions may process family unit members' personal data based on legal obligation or public interest grounds under GDPR Article 6.1(c)/(e), rather than requiring individual consent from each family member. The opinion also invalidates opt-out consent mechanisms (unchecked boxes) used in Valencia's legal aid application forms, finding them non-compliant with GDPR's active consent requirements, which has direct implications for public bodies and professional associations administering benefits requiring family-based means testing.

Spanish DPA Rules on Limits to Sharing Doctors' ID Data for Disability Control

The Spanish Data Protection Agency (AEPD) issued an opinion limiting a medical college's transfer of members' national ID numbers (DNI) and dates of birth to a regional health service for temporary disability control purposes. The ruling confirms that only data on doctors actually competent to issue disability reports within the requesting authority's territory may be shared, and that DNI (not date of birth) is the only additional identifier proportionate to the stated purpose. This decision offers a useful precedent on data minimization and purpose limitation for any organization sharing professional registry data with public administrations.

CFTC Certifies ROTHDCM NBA Cup Championship Event Contract As Swap Product

The CFTC has recorded a self-certification filing from ROTHDCM for a new event-based swap contract tied to the outcome of the NBA Cup Championship. This filing reflects the continued expansion of designated contract markets into sports-outcome event contracts, requiring compliance teams to monitor product listings for market integrity and suitability concerns.

OSC Warns Investors About Unregistered Firms Risance Ltd. And Smjer Fundark

The Ontario Securities Commission has issued a public warning identifying Risance Ltd. and Smjer Fundark as unregistered entities not authorized to deal or advise in securities in Ontario. Compliance teams at registered firms should be aware of this warning to help identify potential fraud patterns, support client inquiries, and reinforce anti-fraud monitoring protocols.

EIOPA Publishes 2025 Data on EEA Insurers' Home and Cross-Border Securities Holdings

EIOPA's annual factsheet shows EEA insurers held EUR 7.9 trillion in government bonds, corporate bonds, and equities at year-end 2025, with notable home bias persisting in fixed income and growing unit-linked cross-border exposure. While not a binding regulatory requirement, the data provides compliance and risk teams with benchmarking insight into investment concentration, sovereign exposure, and diversification trends relevant to Solvency II prudent person principle assessments.