Engineering teams don’t debate where their source of truth lives. It’s in code. Changes are tracked, reviewed, and deployed through systems designed to create clarity and accountability. GRC has largely operated outside of that model.
The Office of the Australian Information Commissioner (OAIC) recently published new guidance aimed at helping organizations navigate the privacy implications of age assurance technologies. The timing is not accidental. In the three months since Australia’s Social Media Minimum Age scheme came into force, the regulator says it has seen a noticeable increase in age checks being used not just on social platforms, but across a wider range of online services.
Mirosław Wróblewski, President of Poland’s Personal Data Protection Office (UODO), imposed an administrative fine of $1.5 million (PLN 5,898,064) on Restaurant Partner Polska, the company responsible for operating the Glovo platform in Poland. The decision follows an inspection examining how personal data from users of the “Glovo – food delivery and other” app was processed.
Hyatt hotels in Australia have revised their card payment surcharge practices after an investigation by the Australian Competition and Consumer Commission (ACCC) found potential issues with how surcharges were applied to debit card payments at the Hyatt Regency Sydney.
Portugal’s competition regulator announced that it has fined the Portuguese Association of Private Employment and Human Resources Companies (APESPE) €4.52 million after concluding the group maintained a no-poach clause that restricted hiring between its member companies for decades.
Macquarie Securities has been ordered to pay about $23 million ($35 million AUD) after Australia’s New South Wales Supreme Court found the firm responsible for years of inaccurate short sale reporting caused by failures in its internal systems and controls.
Italy’s data protection authority has fined Intesa Sanpaolo €17.6 million after concluding that the bank unlawfully processed the personal data of roughly 2.4 million customers while preparing a large-scale transfer of accounts to its digital subsidiary Isybank.