GRC Report Staff

South Korea Tightens the Net on Crypto Firms as Regulators Move to Close AML Gaps

South Korea’s Financial Services Commission is tightening oversight of the crypto sector, proposing a set of rule changes that read less like a wholesale rewrite and more like a deliberate effort to close the gaps regulators believe have been quietly undermining the system.

FTC Warns Payment Giants Over ‘Debanking’ Concerns & Consumer Access Risks

The Federal Trade Commission has issued a warning to some of the world’s largest payment platforms, signaling that access to the financial system is now firmly on the regulator’s radar as a consumer protection issue.

European Commission Contains Cyberattack on Europa Platform as Data Access Concerns Emerge

A cyberattack affecting the Europa.eu platform, the public-facing web presence of the European Commission, was identified on March 24, according to a statement released by the Commission. The incident impacted cloud infrastructure used to host the platform. The Commission said it took immediate steps to contain the attack and implement mitigation measures, adding that the availability of Europa websites was not disrupted.

FRC Sets Guardrails for AI in Audit While Keeping Responsibility Firmly Human

The Financial Reporting Council has published new guidance aimed at helping audit firms navigate the rapid adoption of generative and agentic artificial intelligence, marking what it describes as the first such guidance from any audit regulator globally.

GRI Takes Aim at Patchy Pollution Reporting With New Global Disclosure Push

There’s a quiet but consequential shift underway in how companies are expected to talk about pollution. And if the Global Reporting Initiative gets its way, that conversation is about to become far more detailed, far more comparable, and far harder to sidestep.

FTC Takes Aim at Match & OkCupid Over Alleged Data Sharing That Contradicted Privacy Promises

The Federal Trade Commission has brought an enforcement action against OkCupid and its affiliate Match Group Americas, accusing the companies of quietly sharing users’ personal data with a third party despite telling users otherwise.

Intesa Sanpaolo Hit With €31.8 million Fine After Insider Data Breach Went Undetected for Years

Italy’s privacy regulator has fined Intesa Sanpaolo €31.8 million after concluding that a prolonged, undetected data breach exposed deep flaws in the bank’s internal controls and security oversight. The decision from the Italian Data Protection Authority follows an investigation triggered by the bank’s own breach notification in July 2024. What emerged was not a one-off lapse, but a pattern of unauthorized access stretching over more than two years.