GRC Report Staff

From a $315 million opioid settlement in the United States to cybersecurity penalties in Australia and export-control violations involving China, enforcement records reveal how corporate safeguards can deteriorate long before regulators intervene. An examination of selected cases finds recurring weaknesses in management oversight, internal reporting, specialist expertise and the authority to act on known risks.

A new survey from EY found that 87% of participating banking institutions plan to use AI-powered tools within the next one to three years, with half expecting to develop those capabilities internally. The findings point to a broader reconsideration of how banks produce regulatory information, oversee its accuracy and organize the teams responsible for submitting it.

A New York investigation that began with the Panama Papers disclosures a decade ago has resulted in a $33 million penalty against Swedish banking group Skandinaviska Enskilda Banken AB (SEB) for failures in its anti-money laundering controls and transaction monitoring operations.

The UK government and Serious Fraud Office have opened a joint consultation reviewing the whistleblowing framework under the Employment Rights Act 1996, alongside proposals for a new SFO scheme offering financial rewards to individuals reporting economic crime. Compliance teams should monitor this closely, as any resulting reforms could significantly increase whistleblower activity and reporting incentives across UK operations.

The Austrian FMA has sanctioned a natural person with a EUR 5,000 fine for providing unauthorized investment advice, including recommending clients liquidate existing investments to fund new financial instrument purchases. While the monetary penalty is modest, the case underscores the FMA's continued enforcement focus on unlicensed advisory activity and serves as a reminder that individuals acting as business partners of issuers must hold proper authorization under WAG 2018.

The FCA has added Pilotrade AI to its Warning List for providing or promoting financial services in the UK without authorization. Compliance teams should note this designation for screening purposes, as consumers dealing with this firm lack access to the Financial Ombudsman Service and FSCS protections.

ESMA has published two thematic notes addressing sustainability-related impact claims and climate transition claims made through funds, bonds, and benchmarks. While non-binding, the notes clarify regulatory expectations under the existing "clear, fair and not misleading" communication standard and provide concrete examples of good and poor market practice. Compliance teams should use these notes to benchmark current disclosure practices and reduce greenwashing risk ahead of the SFDR review.