GRC Report Staff

Thailand Adopts International Sustainability Reporting Standards for Listed Companies

Thailand's December review of the SET50 Index will determine which companies must comply first with the country's new sustainability reporting requirements. Those included in the index will be required to disclose information covering 2027 under international standards, with their first reports scheduled for 2028.

SEC Sets 2027 Examination Priorities for Private Credit, Cybersecurity & Emerging Technologies

The Securities and Exchange Commission has more than 34,000 registered entities within the reach of its examination program. For fiscal year 2027, the agency has identified private credit, investment adviser conflicts, cybersecurity and emerging technologies among the areas where it intends to concentrate its attention.

Extreme Networks to Pay $1.53 Million Over Sanctions Violations Involving Russian Missile Manufacturer

Twice in the autumn of 2020, a distributor supplying networking equipment to Extreme Networks was asked for the website of its Russian customer. Twice, the distributor provided the website of a company that manufactured missiles for Russia's air defense systems. The purchase orders named someone else.

Australian Court Orders The Star to Pay $183 Million for Serious Money Laundering Breaches

More than 1,200 customers were allowed to gamble through high-risk channels at The Star Entertainment Group's Australian casinos, where cash deposits could be accepted from third parties without recording who had supplied the money.

South Korea Fines Google & Apple $47.4 Million Over App Payment Restrictions

Google and Apple charged South Korean app developers a 26% commission even when those developers chose to use their own payment systems. The developers also had to bear the costs of building and operating those systems, while working without some of the features available through the companies' proprietary billing services.

Dubai Regulator Fines Moody’s Middle East Unit Over Confidential Data Disclosures

Moody’s Investors Service Middle East reported seven incidents of inadvertent data disclosure to Dubai’s financial regulator over a period of nearly two and a half years. Four involved confidential information reaching recipients outside the company. During that period, the credit rating agency had discontinued using a data security tool without immediately replacing it.

One Company, Three AI Regimes: Where European, American, & Asian Governance Expectations Diverge

A multinational can deploy the same artificial intelligence system in Frankfurt, Chicago, and Singapore and face three different sets of questions about its legality, oversight, and accountability. The technology is identical, but the obligations attached to it are not. In Europe, the company must decide whether the system falls within the EU Artificial Intelligence Act, what role the company plays under it, and which requirements are already enforceable. In the United States, the inquiry moves among federal statutes, sector regulators, state laws, and enforcement powers that predate generative AI. Singapore pairs an enforceable data protection statute with voluntary AI governance frameworks meant to shape how organizations build and use the technology.