GRC Report Staff

ECB Executive Board Member Piero Cipollone used a speech to reaffirm the ECB's commitment to euro cash. He pointed to pending EU legal tender legislation that would reinforce mandatory acceptance of cash and access to it, and he described a banknote redesign that will be phased in over the next decade. The speech is not binding, but it signals the direction of upcoming rules that could affect cash acceptance, cash handling, and the planning of banks and other cash handlers.

Poland's data protection authority (UODO) and the Social Insurance Institution (ZUS) will co-host a free seminar on September 24, 2026, on controller responsibilities for collecting, storing, and disclosing personal data in digital administration. The event is not a new rule, but it signals UODO's current supervisory priorities, including lawful processing and digital sovereignty in the age of AI. Compliance teams with Polish operations should treat it as an informal view into regulatory expectations.

The Federal Reserve's Regulation K (12 CFR Part 211, Subpart A) governs the international activities of U.S. banking organizations, including foreign branch establishment, permissible foreign branch activities, and the organization and ownership of Edge and agreement corporations. The text provided is a codified compilation, not a new rulemaking, and it is truncated mid-§ 211.5(e). Compliance teams should use it as a baseline to check notice, approval, and investment-limit controls for cross-border operations.

The Office of the Comptroller of the Currency has asked California to exempt federally chartered banks from two climate disclosure laws, warning that the reporting requirements could interfere with federal banking supervision and prompt some institutions to withdraw from the state.

Spain's National Commission on Markets and Competition (CNMC) has approved two methodologies for assessing cybersecurity risks and classifying attacks on electricity networks, a step toward identifying the companies that will face additional security requirements under European Union rules.

BG Wealth Sharing promised investors they could double their money in 40 days. The company claimed its cryptocurrency trading signals were accurate 99.6% of the time and that investors faced no risk of losing their money. It also claimed to be the world's largest hedge fund, with the credentials of a registered investment adviser to support its business.

The addresses were in California. The people assigned to them were dead, and according to federal investigators, none had lived at those addresses before their deaths. The Federal Communications Commission said that Boomerang Wireless apparently used the false addresses to enroll hundreds of deceased individuals in Lifeline, a federal program that subsidizes phone and internet service for low-income Americans. The agency proposed a $4,401,666 fine against the company, citing the enrollments, reimbursement requests and apparent wire fraud violations.