GRC Report Staff

AAR CORP. & Former Executive Face $55 Million Penalty Over International Bribery Schemes

AAR CORP., a major player in the aerospace industry, has agreed to a $30 million settlement with the U.S. Securities and Exchange Commission (SEC) after facing charges related to bribery schemes in Nepal and South Africa. Joining the company in this settlement is Deepak Sharma, a former executive, who was directly involved in orchestrating these illicit deals.

KASPR Hit with €240,000 Fine for GDPR Violations

In a recent decision by the French data protection authority (CNIL), KASPR, a company known for its data scraping practices, has been fined €240,000 for violating the General Data Protection Regulation (GDPR). The fine comes after KASPR’s controversial method of collecting personal contact details from LinkedIn users, even those who had specifically chosen to limit their visibility.

Manitowoc Crane Manufacturer Settles for $42.6 Million with DOJ & EPA Over Clean Air Act Violations

The Manitowoc Company Inc., a leading crane manufacturer, has found itself in hot water—and it’s not the kind you’d use to make steel. In a settlement announced today, Manitowoc and two of its subsidiaries, Grove U.S. L.L.C. and Manitowoc Crane Group Germany GMBH, agreed to pay $42.6 million to resolve accusations of flouting the Clean Air Act.

OCC Wraps Up 2024 with a Crackdown on Banking Missteps

As the year winds down, the Office of the Comptroller of the Currency (OCC) has delivered a reminder to the banking world that accountability is non-negotiable. December’s enforcement actions reveal a mix of systemic breakdowns and individual misdeeds, painting a picture of an industry still grappling with old challenges in governance and compliance. From small-town banks failing to shore up their operations to individuals exploiting the system for personal gain, the OCC’s latest round of penalties shows a firm resolve to ensure stability and integrity in the financial system.

DOJ Takes Aim at CVS for Allegedly Fueling Opioid Crisis with Unlawful Prescriptions

The Department of Justice (DOJ) accused CVS Pharmacy Inc.—the nation’s largest pharmacy chain—of knowingly filling illegal prescriptions for controlled substances. The suit claims CVS violated both the Controlled Substances Act (CSA) and the False Claims Act (FCA), directly contributing to the opioid epidemic that has ravaged communities across the United States.

Meta Slapped with €251 Million Fine for 2018 Facebook Data Breach

Meta Platforms Ireland Limited (MPIL) is ending the year with a hefty €251 million fine from the Irish Data Protection Commission (DPC). The penalty stems from a 2018 data breach that laid bare the personal information of 29 million Facebook users worldwide—3 million of them in the EU/EEA.

EDPB Opinion Puts GDPR Principles at the Heart of Responsible AI Development

The European Data Protection Board (EDPB) has weighed in on one of the most pressing issues of our time: how to ensure that AI technology respects privacy while driving innovation. In a newly adopted opinion, the EDPB tackled the thorny questions of when AI models can be considered anonymous, how “legitimate interest” fits into the equation, and what happens if an AI model is built on shaky—if not outright unlawful—data practices.