GRC Report Staff

Finnish High Court Draws the Line on Valio’s Heinon Tukku Merger Breach

The Supreme Administrative Court of Finland has drawn a firm line under a long-running merger dispute, leaving intact a €600,000 penalty imposed on Valio for breaching conditions attached to its acquisition of foodservice wholesaler Heinon Tukku.

EU Moves to Tighten Cybersecurity Rules as Digital Threats Intensify

The European Commission has unveiled a new package of measures aimed at strengthening the European Union’s cybersecurity resilience, as cyber and hybrid threats increasingly target essential services, businesses, and democratic institutions across the bloc.

Poland’s Consumer Watchdog Challenges Samsung Over ‘Verified’ Product Reviews

The President of the Polish Office of Competition and Consumer Protection (UOKiK) recently announced formal charges against Samsung Electronics Polska, alleging that the company’s approach to publishing and labeling online reviews may mislead consumers. If the allegations are confirmed, the company could face a fine of up to 10 percent of its turnover.

Texas Attorney General Opinion Reshapes Legal Risk Around DEI Programs

Texas Attorney General Ken Paxton has issued a legal opinion declaring Diversity, Equity, and Inclusion (DEI) policies unconstitutional across Texas state and local government, a move that significantly alters the compliance landscape for public institutions and potentially for private organizations operating in the state.

ECB Weaves Climate & Nature Risks Deeper Into Monetary Policy & Supervision

The European Central Bank (ECB) says climate change and environmental degradation are no longer side considerations in its work, but factors that now sit firmly inside the institution’s day-to-day decision-making.

Cyprus Financial Regulator Tightens Expectations on DORA Reporting & ICT Controls

The Cyprus Securities and Exchange Commission has issued guidance to regulated entities so that Europe’s new digital resilience regime is no longer an abstract compliance exercise. In a circular published on 19 January 2026, the regulator signaled growing concern that some firms are still struggling with the basics of the Digital Operational Resilience Act (DORA), particularly when it comes to incident reporting, ICT governance, and regulatory submissions.

AFM Raises the Bar on AI Oversight, Cyber Resilience, & Financial Crime in 2026

In its Agenda 2026, the Dutch Authority for the Financial Markets signaled a tougher, more hands-on supervisory stance as technology reshapes financial markets and financial crime risks continue to evolve. The priorities include closer scrutiny of artificial intelligence, more intensive supervision of cyber resilience under EU rules, and a sharper, more targeted approach to investment fraud and money laundering.