GRC Report Staff

Solocal Marketing Services Hit with Fine for Data Consent Failures

Recently, the French Data Protection Authority (CNIL) handed down a €900,000 fine to Solocal Marketing Services, accusing the company of mishandling personal data for commercial prospecting campaigns. The fine stems from Solocal's failure to secure proper consent from individuals and its unauthorized sharing of this data with third parties.

Irish DPC Provides Update on Meta's AI Training Plans & Data Protection Measures

The Data Protection Commission (DPC) has issued a detailed update on its ongoing engagement with Meta regarding its use of personal data to train Large Language Models (LLMs) in the EU/EEA. As AI technologies continue to evolve at a rapid pace, the DPC has been working with major technology companies to ensure that personal data is processed in compliance with the General Data Protection Regulation (GDPR). This regulatory oversight is essential in mitigating risks to individuals and protecting data subjects' rights within the context of cutting-edge AI development.

GoDaddy Reaches Settlement with FTC Over Data Security Failures

GoDaddy has finalized a settlement with the Federal Trade Commission (FTC) after the company faced allegations of failing to properly secure its customers’ websites and sensitive data. The FTC's investigation, which began in January 2025, highlighted that despite GoDaddy's claims of offering “award-winning security,” the company neglected basic data protection practices that left its users vulnerable to cyber threats.

Singapore Launches Guidebook to Support Sustainability Reporting

The Accounting and Corporate Regulatory Authority (ACRA) of Singapore recently introduced the Sustainability Reporting Body of Knowledge (SR BOK), a comprehensive guidebook designed to help training providers develop high-quality, ISSB-aligned sustainability reporting programmes. The initiative aims to address the growing demand for professionals skilled in preparing sustainability reports and climate disclosures, aligning with the Singapore Green Plan 2030 and global regulatory trends.

EBA Shares Risks & Compliance Challenges in First Part of 2024 Annual Report

The European Banking Authority (EBA) has recently released its 2024 Annual Report, revealing an intense year of accomplishment, adaptability, and forward-thinking strategies for the EU banking sector. As the financial world continues to face an onslought of new challenges, the EBA has remained at the forefront of ensuring stability, resilience, and a more sustainable financial framework. With 93% of its tasks from the 2024 Work Programme completed, the Authority’s work is a clear testament to its role as a steadfast regulatory force within the EU.

Macron Joins Germany's Call to Scrap EU Supply Chain Sustainability Law at "Choose France" Summit

French President Emmanuel Macron has added his voice to the growing opposition against the European Union's Corporate Sustainability Due Diligence Directive (CSDDD), aligning with German Chancellor Friedrich Merz’s call to scrap the law entirely. The directive, which was adopted in May 2024, mandates that companies assess, prevent, and mitigate their impacts on human rights and the environment across their supply chains, including issues like child labor, slavery, deforestation, and pollution.

South Korea's PIPC Cracks Down on Temu for Unlawful Cross-Border Data Transfer & Other Violations

The Personal Information Protection Commission (PIPC) has delivered a blow to Temu, the popular online marketplace platform, by sanctioning the company for serious violations related to cross-border data transfers and other mishandling of personal data. This action, taken after a thorough investigation, comes with financial penalties and several corrective orders aimed at restoring compliance with South Korea’s Personal Information Protection Act (PIPA).