GRC Report Staff

CNIL Fines Mobius Solutions €1 Million Over Deezer Data Breach

France’s data protection authority has fined Mobius Solutions €1 million after finding that the company, acting as a processor for music-streaming platform Deezer, failed to comply with core GDPR obligations tied to subcontracting and data handling.

AMLA Lays the Groundwork for EU-Wide AML Supervision Ahead of 2028 Shift

Europe’s new anti-money laundering authority is beginning to move from blueprint to reality. The Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) on Thursday set out the rules that will underpin its future role as a direct supervisor of the EU’s highest-risk financial institutions, marking a major step toward more unified AML and CFT oversight across the bloc.

Instacart to Pay $60 Million in Consumer Refunds to Settle FTC Deception Case

Instacart has agreed to pay $60 million in consumer refunds to settle a lawsuit brought by the Federal Trade Commission, which alleged that the grocery delivery platform used deceptive advertising, improper subscription practices, and unlawful refund processes that raised costs for shoppers.

ASIC Wraps Up the Year With Heavy Court Outcomes for Macquarie Securities, RM Capital, & ANZ

A decade of misreported market data, years of conflicted advice, and widespread failures affecting tens of thousands of customers all landed before the courts this week, as ASIC secured three major enforcement outcomes against Macquarie Securities, RM Capital, and ANZ. The decisions span institutional trading, advice oversight, and retail banking operations.

Ceratizit to Pay $54.4 Million to Settle Allegations of Evaded Customs Duties

Ceratizit USA, a Charlotte, North Carolina–based distributor of tungsten carbide products, has agreed to pay $54.4 million to resolve allegations that it violated the False Claims Act by knowingly evading U.S. customs duties on imports from China, the Department of Justice announced Thursday.

Croatia’s Data Protection Authority Fines Bank €1.5 Million Over Mobile Banking Privacy Violations

Croatia’s Personal Data Protection Agency has imposed an administrative fine of €1.5 million on a bank for multiple violations of the General Data Protection Regulation, following findings that the institution unlawfully collected extensive personal data from users of its mobile banking application.

OCC Proposes Simplified CRA Strategic Plan to Ease Compliance Burden on Community Banks

The Office of the Comptroller of the Currency on Wednesday released proposed guidance aimed at reducing regulatory burden for community banks by simplifying how they can comply with the Community Reinvestment Act.