GRC Report Staff

Survey Finds Majority of Companies Oppose Omnibus Proposals to Scale Back CSRD Reporting

A recent survey conducted by #WeAreEurope, in partnership with HEC Paris, reveals that most companies across Europe are not in favor of the European Commission’s “Omnibus” initiative, which proposes reducing the scope of the EU’s Corporate Sustainability Reporting Directive (CSRD). While a majority of businesses express satisfaction with the CSRD in its current form, they have reservations about the Omnibus proposals, which aim to ease the regulatory burden on companies.

Ofwat Imposes Historic £123 Million Penalty on Thames Water Following Investigations

Thames Water has been slapped with a record-breaking fine of £122.7 million after two separate investigations revealed serious breaches of regulations. The penalty, the largest ever imposed by Ofwat, includes a £104.5 million fine for failures related to its wastewater operations, alongside an £18.2 million fine stemming from improper dividend payments. The fines will be paid by Thames Water and its shareholders, not by customers, marking a significant step in holding the water utility accountable for its mismanagement.

Boston Scientific Halts Sales of Heart Device in EU & Foregoes Approval in Other Markets Due to Regulatory Hurdles

Boston Scientific has decided to discontinue sales of its Acurate Prime and Acurate neo2 heart devices in the European Union, a move that will also see the company forgo seeking approval in the U.S. and other international markets. The decision, announced on Wednesday, stems from escalating clinical and regulatory hurdles that the company has deemed too resource-intensive to meet, first reported by Reuters.

Danish Data Protection Agency Strengthens IT Security Measures to Combat Hacking Threats

The Danish Data Protection Agency (DPA) has introduced two new IT security measures to its catalogue, aiming to prevent security breaches linked to hacking. The changes are in response to the growing number of incidents caused by malicious activities, particularly involving IoT (Internet of Things) devices. Walther Starup-Jensen, an IT security consultant at the DPA, emphasized that while these measures may not be revolutionary, they are crucial in addressing the vulnerabilities that lead to many avoidable breaches.

Adidas Confirms Data Breach & Highlights Risks in Third-Party Security

Adidas has disclosed a recent data breach where unauthorized external parties obtained certain consumer data via a third-party customer service provider. While the sportswear giant quickly contained the incident and initiated a comprehensive investigation, the breach raises significant concerns about IT security, data protection, and the role of third-party vendors in safeguarding sensitive consumer data.

Aion Bank Settles Over Savings Account Payment Issues

Aion Bank has reached a settlement with the Financial Services and Markets Authority (FSMA). The agreement, finalized today, addresses errors that resulted in some customers not receiving the full interest and loyalty bonuses they were entitled to between December 2019 and June 2024.

SAP Fined €1.75 Million by BaFin for Non-Compliance with German Securities Trading Act

The Federal Financial Supervisory Authority (BaFin) has imposed a fine of €1.75 million on SAP, one of the world’s leading enterprise software companies. The fine stems from the company's failure to meet requirements under the German Securities Trading Act (Wertpapierhandelsgesetz – WpHG), specifically regarding the timely publication of key financial report information.