GRC Report Staff

Federal Court Blocks Texas Anti-ESG Law, Setting Limits on State Leverage Over Corporate Policy

A federal judge has permanently blocked Texas from enforcing Senate Bill 13, striking down one of the state’s most aggressive attempts to push back against Environmental, Social, and Governance practices through public investment and procurement rules.

France’s Data Protection Authority Reports €486.8 Million in Fines During 2025

Over the course of the last year, the France’s data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), issued 259 decisions, ranging from sanctions and compliance orders to reminders of legal obligations and warnings. Together, those actions translated into €486,839,500 in cumulative fines, or roughly $530 million, with cookies, employee monitoring, and data security emerging as the most common fault lines.

Hong Kong Regulator Penalizes Kylin International for Fund Governance Failures

Hong Kong’s securities regulator has taken disciplinary action against Kylin International, fining the firm about $1.15 million (HK$9 million) for a series of compliance and governance failures tied to its management of private funds.

Italy Fines Agos Ducato €800,000 for Discriminating Against Non-Italian SEPA IBANs

The Italian Competition Authority has said it fined Agos Ducato €800,000 after concluding the company spent years refusing direct debit repayments from non-Italian SEPA IBANs or steering customers into a more burdensome process than the one used for Italian accounts. The conduct, the Authority said, ran from February 2014 through the first quarter of 2023, cutting against the EU’s basic promise that paying in euros across SEPA should feel the same whether the account sits in Milan or Munich.

Australian Federal Court Fines FIIG Securities Over Cyber Failures That Exposed Client Data

Australia’s Federal Court has ordered FIIG Securities Limited to pay $1.77 million USD (AUD 2.5 million) after regulators found the fixed-income specialist failed for years to adequately protect client data from cyber threats, shortcomings that intensified the impact of a major data breach in 2023.

Massachusetts Joins $17.85 Million Generic Drug Price-Fixing Settlements

Massachusetts Attorney General Andrea Joy Campbell has secured $17.85 million in multi-state settlements with pharmaceutical companies Lannett Company and Bausch Health, capping another chapter in a sweeping, years-long effort by states to unwind alleged price-fixing in the generic drug market.

Quebec Tribunal Shuts Down Online Trading Scheme, Hands Down $1 Million in Penalties

Quebec’s securities tribunal has imposed more than $1 million in penalties and sweeping market bans after concluding that a group tied to Ace Prime Group and Axes-Prime Ltd. orchestrated a fraudulent online investment scheme that left most investors with little to show for their money.