GRC Report Staff

Spain Proposes Tighter Board Independence Rules & New Corporate Governance Standards

Spain's largest listed companies would be urged to separate the roles of board chairman and chief executive under proposed changes to the country's corporate governance code, part of a broader effort to strengthen oversight without adding to the volume of rules companies are expected to follow.

OCC Issues Supervisory Framework for Banks' Use of Super Intelligence

The Office of the Comptroller of the Currency has instructed bank examiners not to treat super intelligence as a separate category of risk, drawing a boundary around how the emerging technology should be supervised as financial institutions expand its use. The framework directs examiners to consider what an intelligent system is authorized to do, the consequences if it fails, and how much human oversight remains in place. The sophistication of the technology itself need not determine its risk classification.

UAE Central Bank Puts Cyber Resilience, AI & Governance at Heart of 2027 Regulatory Agenda

The Central Bank of the UAE has put cybersecurity, fraud prevention, corporate governance and emerging technologies on its supervisory agenda for 2027, outlining its priorities during a meeting with the country's banking and insurance executives in Abu Dhabi on Wednesday. The meeting brought together senior central bank officials and chief executives for the UAE Financial Sector Supervisory Roundtable, where discussions ranged from the suitability of financial institution leadership to the growing use of artificial intelligence and digital assets. The gathering also offered a look at the Central Bank of the UAE's (CBUAE) strategy for 2027 through 2029, with operational resilience and closer coordination between supervisors and financial institutions receiving particular attention.

South Korea Fines Education Provider & Hospital Group $2.91 Million Over Data Security Failures

Daekyo had been warned. In August 2024, after hackers exploited vulnerabilities in websites operated by its affiliates, the South Korean education provider received a report of suspicious activity from its security monitoring contractor. The company failed to investigate adequately or close the weaknesses that had allowed the intrusion. Six months later, attackers exploited the same vulnerabilities again.

ASIC Form 545 Requires Liquidators to Confirm Notices to Contributories Within One Month

ASIC Form 545 is the statement a liquidator lodges to confirm that notices were sent to persons on the final list or supplementary list of contributories under Regulation 5.6.62. It must be lodged within one month of the notices being sent. Late lodgement triggers fees, and a form is not treated as lodged until ASIC accepts it. This is a procedural form, not a new rule, but it matters for compliance teams involved in insolvency and wind-up processes.

ECB Raises Key Interest Rates by 25 Basis Points as Middle East Conflict Fuels Inflation

The ECB Governing Council unanimously raised all three key interest rates by 25 basis points at its September 9-10, 2026 meeting in Berlin. It cited inflationary pressure from the Middle East conflict and projected that inflation will stay above the 2% target through 2027. Compliance and risk teams should treat this as a signal to review interest rate risk, credit risk, and the conduct implications of rising rates. Bundesbank President Nagel's comments suggest further tightening is possible.

ASIC Form 106 Sets Criteria and Process for Withdrawing Lodged Corporate Documents

ASIC's Form 106 and its accompanying guide set out the limited circumstances in which a document already lodged on the public register can be withdrawn, namely duplication or an error where exceptional circumstances exist. Lodgement does not guarantee withdrawal, and many document types cannot be withdrawn at all. Compliance teams should treat lodgement accuracy as a front-end control, because corrections are discretionary and the withdrawn record stays visible.