GRC Report Staff

Italy’s Privacy Regulator Fines IQVIA €7 Million Over Health Data of 1 Million Patients

Italy’s privacy regulator has fined IQVIA Solutions Italy €7 million over a database containing the health information of roughly 1 million patients, finding that data the company regarded as anonymous could, in fact, be traced back to individuals.

Basel Committee Takes on AI Risk in Push to Modernize Bank Supervision

The Basel Committee spent two days in Indonesia earlier this week looking at a banking system that is changing faster in some places than the rules written to govern it. Artificial intelligence was high on the agenda, but it was hardly alone. Cryptoassets, interest rate risk, liquidity, systemic banks, cyber risk and the quality of supervision itself all made the list.

Czech Competition Authority Imposes Record $89.7 Million Fine Over Cable Cartel

The Czech Office for the Protection of Competition has imposed fines totaling approximately $89.7 million (CZK 1.942 billion) on four companies after finding that six cable manufacturers coordinated the calculation of a “metal surcharge” used in the pricing of telecommunications and power cables containing copper or aluminum. It is a record fine for the Office. The decision, announced Oct. 1, is not yet final, and the parties can appeal to the Chairman of the Office.

AMLA Finalizes Three Standards for Private-Sector Anti-Money Laundering Controls

The EU's Anti-Money Laundering Authority said on October 1 that it has finalized three sets of regulatory technical standards covering customer due diligence, the treatment of business relationships and occasional transactions, and AML/CFT arrangements across corporate groups. The final drafts have been sent to the European Commission, putting them one step closer to becoming part of the rulebook that companies and professionals subject to the EU regime will have to follow.

FCA Rethinks Climate Disclosure Mandate in Final UK Sustainability Rules

The Financial Conduct Authority has changed course on one of the harder edges of its new sustainability reporting regime. When the regulator consulted on the rules earlier this year, it proposed requiring listed companies to comply with the UK’s climate disclosure standard, UK SRS S2. Broader sustainability reporting under UK SRS S1, along with Scope 3 emissions disclosures, would have been handled differently: comply with the requirements or explain why not.

Australia Sets December Deadline for Transparency on AI-Assisted Decisions

On December 10, a privacy policy in Australia will have to say something it has never been required to say before: whether a computer program is being used to make, or materially help make, decisions that significantly affect people.

Independence Blue Cross to Pay $22.5 Million Over Medicare Advantage Diagnosis Allegations

Independence Blue Cross has agreed to pay $22.5 million to settle allegations that it kept Medicare money tied to diagnosis codes that its own medical-record reviews did not support. The Justice Department announced the settlement Wednesday, bringing a civil False Claims Act case against the Pennsylvania insurer to a close without a determination of liability. The allegations concern Independence Blue Cross, or IBX, and its Medicare Advantage business during payment years 2017 through 2021.