GRC Report Staff

The Basel Institute for Governance announced a Norway-funded consortium initiative, running through the end of 2028, to disrupt corruption that enables illegal logging, timber trafficking, illegal mining, and carbon market fraud. It creates no new legal obligations, but it signals growing international attention to environmental corruption and the financial crime linked to it. Compliance teams should treat it as an indicator of emerging expectations for due diligence in forest-risk supply chains and carbon markets.

ASIC has published Form 529 (Notice of Meeting) and its accompanying guide, which set out how notice must be lodged for various creditor, member, contributor, and debenture holder meetings in insolvency contexts. The materials are not new substantive rules (the form is dated January 2011 and the guide July 2014), but they matter to compliance and insolvency-related teams because lodgement timing, signatory authority, and content requirements carry statutory consequences. Note that the press release date (2026-09-15) does not match the form's own dates, so teams should confirm whether anything has actually changed.

The ECB has launched a call for expression of interest inviting EU-established e-commerce and m-commerce merchants with reach in at least two pilot locations to join the beta digital euro pilot, with applications due by 17:00 CET on October 27, 2026. Selected merchants will sign a non-negotiable agreement with the ECB and a contract with an acquiring pilot PSP, which creates legal, operational, and reputational obligations that compliance teams must assess before applying.

Finanstilsynet has listed aureoncorevix.net on its warning list, relaying a warning first issued by France's Autorité des marchés financiers (AMF) on its crypto-currency blacklist. The entry signals a suspected unauthorized or fraudulent crypto-asset operation targeting European investors. Compliance teams should treat it as a threat-intelligence indicator and update screening and customer-protection controls.

The Bank of England's PRA has updated its guidance on applying for capital waivers, CRR and Basel 3.1 permissions, and modifications by consent (MbC). Key developments include the extension of the Loan to Income (LTI) flow limit MbC to December 31, 2026, new Basel 3.1 permission pathways following PS1/26, and a stronger push toward Portal-based submissions. Compliance teams should verify which permissions and modifications apply to their firms and confirm that application and notification processes are current.

BaFin is already applying ESMA's forthcoming guidelines on when a supplement to a base prospectus amounts to an impermissible introduction of a new type of security, and it is abandoning its previous administrative practice on product-modifying supplements. Compliance and capital markets teams at issuers of base prospectuses should align their supplement preparation and review processes now, rather than waiting for the formal application date.

ASIC's Form 578 lets registered liquidators request deregistration of companies in court or creditors' voluntary liquidation when the liquidator is not acting or the company's affairs are fully wound up. It is an administrative form, not a new rule, but accurate and timely use matters for closing out liquidations cleanly. Compliance teams that deal with insolvent entities, whether as creditors, group owners, or service providers, should understand the process and its limits.