GRC Report Staff

AMLA Moves to Standardize AML Risk Assessments Across Non-Financial Sector, Invites Early Industry Input

The Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) is developing a common methodology that supervisors across the EU will use to assess money laundering and terrorist financing risks in the non-financial sector. Before formal proposals are put forward, the authority is convening an online stakeholder roundtable on 4 May 2026 to gather input from industry representatives.

New Zealand Regulator Turns to Industry to Gauge Operational Resilience Across Financial Sectors

New Zealand’s financial sector is getting a closer look under the hood as regulators seek to understand how well firms can keep running when disruption hits. In a new set of findings, the Financial Markets Authority has pulled together insights from across several corners of the market, offering a clearer picture of how operational resilience is taking shape in practice, and where gaps may still remain.

Latitude Finance Fined $2.61 Million as Repeat Spam Breaches Draw Regulator Scrutiny

Latitude Finance Australia is back in the regulatory spotlight, this time with a $2.61 million (AUD $3.96 million) penalty after Australia’s communications regulator found the lender breached spam laws more than 2.7 million times.

Booking.com Warns of Unauthorized Access to Reservation Data, Leaves Key Details Unanswered

Booking.com has confirmed that hackers may have accessed customer booking data, after notifications sent to users began circulating online, first drawing wider attention through posts on Reddit.

Swiss Regulator Signals Urgency as Digital Fraud Pressures Mount on Banks

In new guidance published this week, the Swiss Financial Market Supervisory Authority FINMA makes it clear that digital fraud is no longer a peripheral issue. It has been steadily rising since 2022, fueled in part by the surge in digital banking that took hold during the pandemic and never really slowed down.

IBM Reaches $17 Million Settlement in First Test of DOJ’s Civil Rights Fraud Initiative

IBM has agreed to pay just over $17 million to resolve allegations that its employment practices violated anti-discrimination requirements tied to its federal contracts, according to an announcement from the U.S. Department of Justice on Friday.

Data Protection Authority Launches AI & Privacy Series With Focus on Everyday Users

As artificial intelligence quietly becomes part of daily routines, from recommendation engines to automated decision-making tools, regulators are starting to speak less like rulemakers and more like translators. On April 13, 2026, a data protection authority published “The Impact of Artificial Intelligence (AI) on Privacy,” the first installment in a new “AI & Data Protection” series aimed not at compliance teams, but at the people actually using these systems every day.