GRC Report Staff

UK Privacy Regulator Reprimands Two Welsh Organizations After Ransomware Attack Exposes Children's Data

The UK's Information Commissioner's Office (ICO) reprimanded Ogi Networks Limited (ONL) and the Local Government Data Unit – Wales, known as Data Cymru, on October 20 after finding that both organizations had failed to maintain adequate security controls and oversight of accounts on Data Cymru's network.

ASIC Secures $579 Million in Civil Penalties as Annual Report Details Major Enforcement Cases

Australia's corporate regulator secured approximately $579 million (A$830 million) in court-ordered civil penalties during the 2025–26 financial year, with major cases involving ANZ and derivatives trading misconduct accounting for much of the total. The Australian Securities and Investments Commission (ASIC) also helped secure more than $405 million (A$580 million) in repayments and refunds for consumers and investors, according to its annual report released October 19.

Inside the Enforcement File: What the Biggest Compliance Penalties of 2026 Reveal About Corporate Control Failures

From a $315 million opioid settlement in the United States to cybersecurity penalties in Australia and export-control violations involving China, enforcement records reveal how corporate safeguards can deteriorate long before regulators intervene. An examination of selected cases finds recurring weaknesses in management oversight, internal reporting, specialist expertise and the authority to act on known risks.

EY Survey Finds Banks Investing in AI & Data Infrastructure to Overhaul Regulatory Reporting

A new survey from EY found that 87% of participating banking institutions plan to use AI-powered tools within the next one to three years, with half expecting to develop those capabilities internally. The findings point to a broader reconsideration of how banks produce regulatory information, oversee its accuracy and organize the teams responsible for submitting it.

New York DFS Fines SEB $33 Million Over Anti-Money Laundering Failures Following Panama Papers Investigation

A New York investigation that began with the Panama Papers disclosures a decade ago has resulted in a $33 million penalty against Swedish banking group Skandinaviska Enskilda Banken AB (SEB) for failures in its anti-money laundering controls and transaction monitoring operations.

UK Launches Consultation on Whistleblowing Reform and SFO Financial Reward Scheme

The UK government and Serious Fraud Office have opened a joint consultation reviewing the whistleblowing framework under the Employment Rights Act 1996, alongside proposals for a new SFO scheme offering financial rewards to individuals reporting economic crime. Compliance teams should monitor this closely, as any resulting reforms could significantly increase whistleblower activity and reporting incentives across UK operations.

FMA Fines Individual EUR 5,000 for Unauthorized Investment Advice

The Austrian FMA has sanctioned a natural person with a EUR 5,000 fine for providing unauthorized investment advice, including recommending clients liquidate existing investments to fund new financial instrument purchases. While the monetary penalty is modest, the case underscores the FMA's continued enforcement focus on unlicensed advisory activity and serves as a reminder that individuals acting as business partners of issuers must hold proper authorization under WAG 2018.