GRC Report Staff

Record Year for Data Breaches in Australia as 2024 Sees Significant Surge

The year 2024 will go down in history as a record-breaking one for data breaches in Australia, with over 1,100 incidents reported to the Office of the Australian Information Commissioner (OAIC), the highest number since the country introduced mandatory data breach notifications back in 2018. This surge signals a growing concern for Australians' privacy, with a 25% increase from the previous year’s numbers.

Goldman Sachs Faces Fine for Reporting & Trade Failures

Goldman Sachs has agreed to pay a $1.45 million fine as part of a settlement with FINRA, the industry's self-regulatory body, following multiple reporting failures and supervision lapses between 2020 and 2023. This settlement, which includes a censure, comes after the firm struggled to meet crucial regulatory requirements, notably around the Consolidated Audit Trail (CAT) and trade reporting, exposing gaps in its internal compliance systems.

CNIL's New Recommendations Aim to Protect Your Privacy in Mobile Apps

Our smartphones are more than just devices, they’re an extension of ourselves. We rely on them to navigate daily life, from communication and entertainment to shopping and tracking our health. In 2023, the average French citizen downloaded 30 mobile apps and spent over 3 hours a day using their phones. But while we’re all living more digitally connected lives, there’s a downside i.e., privacy risks. With apps constantly collecting our data, how can we make sure our personal information stays safe?

Webull Financial Settles Violations with $1.6 Million Fine Following FINRA Review

In an effort to close the book on several rule violations, Webull Financial LLC has agreed to pay a $1.6 million fine and accept a censure from FINRA. The case highlights significant lapses in supervision and transparency by a firm that has become a key player in self-directed retail trading. With this settlement, Webull seeks to put a period on a series of compliance missteps that have made waves in the financial regulatory world.

ENISA's NIS360 2024 Report Offers Insights into Cybersecurity Maturity Across Critical Sectors

Cybersecurity is a constant challenge, and as digital infrastructures evolve, so do the risks. The release of ENISA’s NIS360 2024 report provides a timely and important snapshot of how well Europe’s critical sectors are handling their cybersecurity responsibilities under the NIS2 Directive. This report doesn’t just throw out data, it digs deep into where sectors stand, where they’re excelling, and, more importantly, where they need to improve.

Assertio Therapeutics Pays $3.6 Million to Settle False Claims Act Allegations Over Fentanyl Marketing

Assertio Therapeutics has agreed to pay $3.6 million to resolve allegations tied to misleading marketing practices involving its fentanyl nasal spray, Lazanda. The settlement was announced by the Department of Justice on May 5, 2025, addressing claims that Assertio’s marketing led to false billing for prescriptions that were not medically justified.

German Chancellor Merz Urges EU to Abandon Supply Chain Sustainability Law

In a statement made during his first visit to Brussels as Chancellor, Friedrich Merz, Germany's newly appointed leader, called for the European Union to scrap the Corporate Sustainability Due Diligence Directive (CSDDD). This directive, adopted in May 2024, mandates that companies take action to address their negative impacts on human rights and the environment throughout their supply chains.