GRC Report Staff

Italy Fines Philip Morris €7 Million Over 'Smoke-Free' Marketing Claims

The Italian Competition Authority has fined Philip Morris €7 million after finding that the company's advertising for combustion-free tobacco products misled consumers into believing the products were harmless to health or less harmful than other tobacco products.

Ahold Delhaize Agrees to Pay $40 Million to Resolve Allegations of Inflated Prescription Drug Pricing

A discount program is supposed to lower the price of a prescription. The dispute at the center of a newly announced $40 million settlement is what happens when those discounts exist for customers but are not reflected in the prices reported to government healthcare programs.

South Korea Tells Banks to Prepare for AI-Powered Fraud & Cyberattacks

South Korea's financial regulator is asking some of the country's largest financial institutions to prepare for a future in which artificial intelligence is no longer simply a productivity tool but a weapon. At a meeting in Seoul, Financial Services Commission Chairman Lee Eog-weon met with the chief executives of five major financial holding companies to discuss a problem confronting regulators around the world. The same technologies banks hope will make operations faster and more efficient are also making scams more convincing, cyberattacks more sophisticated, and fraud harder to detect.

Swedish Privacy Regulator Takes on One of AI’s Most Persistent GDPR Questions

A Swedish startup called Eggsplain spent the spring working with the country's privacy regulator on a question that has become surprisingly difficult to answer. When an AI supplier fine-tunes a model using personal data, who is actually responsible for that data?

Singapore Moves to Close the Gaps Between Technology Governance & Operational Reality

A surprising amount of operational resilience comes down to keeping lists. Not the glamorous kind, or dashboards, AI copilots, or threat intelligence feeds. Just knowing what systems exist, where they are, who owns them, what depends on them, and what happens when they fail. The consultation, launched Tuesday by the Monetary Authority of Singapore (MAS), is proposing a substantial expansion of its Technology Risk Management Notices. The consultation, open through July 31, touches nearly every stage of the technology lifecycle, from asset inventories and risk assessments to system monitoring, backup strategies, incident response, and outage reporting.

California Regulator Hits Navitas With $4 Million Penalty Over Unlicensed Lending

A Florida-based commercial lender has agreed to pay a $4 million penalty and provide refunds to California borrowers after state regulators found the company engaged in lending activities without the required license, according to an enforcement action announced Monday by the California Department of Financial Protection and Innovation (DFPI).

Government Contractors Pay $21.3 Million Over Veteran-Owned Contract Scheme

Broadway Electric and Cornerstone Contracting, two New York-based government contractors, along with its CEO and President, have agreed to pay $21.3 million to resolve allegations that they used service-disabled veteran-owned small businesses and other qualifying firms as vehicles to secure federal contracts that otherwise would have been out of reach.