GRC Report Staff

Brazil Fines Denso $19.5 Million in Long-Running Auto Parts Cartel Case

Brazil's antitrust authority has fined Japanese automotive supplier Denso Corporation approximately $19.5 million (100.8 million reais), concluding a case that traces back more than a decade and centers on allegations of coordinated conduct in the market for wire harnesses and other automotive electrical components.

Norwegian Privacy Regulator Fines Elkjøp €1.7 Million Over Customer Club Data Practices

Norway's data protection authority has imposed a €1.7 million (NOK 20 million) administrative fine on Elkjøp after finding multiple violations of the General Data Protection Regulation (GDPR) related to the retailer's customer club, a program used by millions of consumers across the Nordic region.

Italy Fines Philip Morris €7 Million Over 'Smoke-Free' Marketing Claims

The Italian Competition Authority has fined Philip Morris €7 million after finding that the company's advertising for combustion-free tobacco products misled consumers into believing the products were harmless to health or less harmful than other tobacco products.

ServiceNow Patches Software Bug That Exposed Customer Data to the Internet

A software flaw in ServiceNow's cloud platform allowed unauthorized access to customer data stored in certain enterprise environments, prompting the company to issue a patch and notify affected customers after security researchers uncovered the vulnerability. The issue involved a bug that enabled unauthenticated users to access data in some customer instances without providing credentials. According to a ServiceNow article shared publicly by users after being placed behind a customer login wall, the company deployed fixes on June 5 to address a flaw that allowed users to gain greater access to ServiceNow-hosted data than intended.

Ahold Delhaize Agrees to Pay $40 Million to Resolve Allegations of Inflated Prescription Drug Pricing

A discount program is supposed to lower the price of a prescription. The dispute at the center of a newly announced $40 million settlement is what happens when those discounts exist for customers but are not reflected in the prices reported to government healthcare programs.

South Korea Tells Banks to Prepare for AI-Powered Fraud & Cyberattacks

South Korea's financial regulator is asking some of the country's largest financial institutions to prepare for a future in which artificial intelligence is no longer simply a productivity tool but a weapon. At a meeting in Seoul, Financial Services Commission Chairman Lee Eog-weon met with the chief executives of five major financial holding companies to discuss a problem confronting regulators around the world. The same technologies banks hope will make operations faster and more efficient are also making scams more convincing, cyberattacks more sophisticated, and fraud harder to detect.

Swedish Privacy Regulator Takes on One of AI’s Most Persistent GDPR Questions

A Swedish startup called Eggsplain spent the spring working with the country's privacy regulator on a question that has become surprisingly difficult to answer. When an AI supplier fine-tunes a model using personal data, who is actually responsible for that data?