GRC Report Staff

Treasury Flags ‘Sham Transactions’ as a Growing Sanctions Risk

There’s nothing particularly new about trying to hide ownership on paper. What’s changing, according to the U.S. Treasury’s Office of Foreign Assets Control, is how frequently, and how creatively, it’s being done.

Japan Tightens AML & Counter-Terror Financing Expectations with Risk-Based Framework at the Core

New guidance from the Japanese Financial Services Agency reframes how institutions are expected to think about financial crime, placing a firm emphasis on adaptability, governance, and real-world effectiveness rather than technical compliance alone. The message running through the document is simple but consequential. Static controls will not hold up in a system where threats evolve by the day.

FinCEN Looks to Put Cash on the Table for Whistleblowers in Push Against Illicit Finance

For years, the idea of a FinCEN whistleblower program has existed more in statute than in practice. Now, the Financial Crimes Enforcement Network is taking a step toward changing that.

Denmark’s Data Watchdog Points to a More Practical Future for GDPR

There’s a quiet recalibration happening inside Europe’s data protection regime. It’s not a rollback of rules, and it’s not a loosening of standards. But in its 2025 annual report, Denmark's Data Protection Authority (Datatilsynet) offers a window into something more subtle. Regulators are starting to acknowledge what many organizations have been grappling with for years. Compliance, as written, doesn’t always translate cleanly into practice.

China Codifies Its Green Ambitions With Sweeping Environmental Law

China has moved to anchor its environmental ambitions in law, passing a sweeping Ecological and Environmental Code that pulls together years of policy, regulation, and climate commitments into a single legal framework.

Italy’s Competition Authority Hits Morellato With €25 Million Fine Over Online Sales Restrictions

Italy’s antitrust regulator has taken aim at one of the country’s best-known jewellery brands, handing Morellato a €25,895,043 fine for a long-running set of distribution practices that, in the authority’s view, crossed the line from brand control into outright restriction of competition.

The AI Oversight Gap

AI isn’t waiting for governance to catch up and that gap is quickly turning into one of the most serious risk challenges organizations face today. As companies push ahead with more advanced, increasingly autonomous AI systems, many are doing so without the controls needed to manage them effectively. What was once a manageable oversight issue is becoming something more structural. Agentic AI is beginning to operate beyond traditional human decision loops, and the longer governance lags behind, the harder it becomes to rein it back in.