GRC Report Staff

Danish Regulator Orders Aalborg Municipality to Address Data Deletion Failures

The Danish Data Protection Agency has ordered Aalborg Municipality to bring its handling of personal data into compliance with data protection rules, after an investigation found the municipality had failed to delete information it no longer had a legal basis to retain.

SEC Targets Musk-Linked Trust in Twitter Disclosure Case as Resolution Comes Into View

The U.S. Securities and Exchange Commission has moved to expand its ongoing case tied to Twitter, adding a trust associated with Elon Musk while simultaneously signaling a potential end to the litigation.

Ireland’s Data Regulator Opens Inquiry Into SHEIN Over EU Data Transfers to China

Ireland’s Data Protection Commission has opened a formal inquiry into Infinite Styles Services, the Irish entity of SHEIN, examining how it transfers the personal data of EU and EEA users to China.

Audit Quality Takes Center Stage as Canadian Regulators Confront a More Uncertain Landscape

Senior figures from across Canada's audit ecosystem recently gathered for a roundtable co-hosted by the Office of the Superintendent of Financial Institutions, the Canadian Public Accountability Board, and the Canadian Securities Administrators. Around the table were representatives from audit firms, accounting professional bodies, standard setters, and regulatory authorities, all working through a shared concern on how to maintain confidence in financial reporting as the underlying risk environment becomes harder to read.

ESMA Sets Course for Simpler EU Reporting With Push Toward ‘Report Once’ Model

The European Securities and Markets Authority is untangling one of the more persistent challenges in European financial regulation, how to make reporting simpler without losing the data regulators rely on.

FTC Settlement Would Bar Kochava From Selling Sensitive Location Data Without Consent

The Federal Trade Commission is moving to restrict how one of the data broker industry’s more prominent players handles location data, proposing a settlement that would prohibit Kochava and its subsidiary Collective Data Solutions from selling or sharing sensitive location information unless consumers have clearly agreed to it.

EU Moves to Simplify Deforestation Rules Ahead of Rollout

The European Commission is trying to smooth the runway for its deforestation regulation before it begins applying at the end of the year, publishing a new simplification package meant to give companies, EU countries and trading partners more certainty over how the rules will work in practice.