GRC Report Staff

The FCA's Perimeter Guidance Manual (PERG) sets out when firms need authorization or exemption under the Financial Services and Markets Act 2000. The current text carries a notice that PERG has not yet been updated for the new regulated activity of providing targeted support, and it highlights the cryptoasset guidance in PERG 18. Compliance teams should treat the perimeter analysis for these areas as provisional and watch for further FCA changes.

The Norway Financial Supervisory Authority has published a warning about GoldPrideHoldings (goldprideholdings.com), with source material pointing to the Swiss regulator FINMA's warning list. Compliance teams should treat the entity as a potential unauthorized or fraudulent financial services provider and update screening and client-protection controls accordingly.

A member of the Board of Appeal of the European Supervisory Authorities has filed a public declaration of commitment and interests dated June 16, 2026, under Article 59(6) of the ESA founding regulations. The document is a routine governance filing with no new obligations for financial institutions. It matters to compliance teams mainly as a signal of the independence and integrity safeguards that apply to the body that hears appeals against ESA decisions.

EIOPA has issued a final Q&A (ID 3612) clarifying how undertakings should treat renewed and expired policies in the new QRT S.27.03 and where to find guidance on commercial versus industrial asset types. Expired policies must follow the approach used for comparable datapoints in QRT S.05.01, and asset classification guidance sits in Annex IV of S.06.02. Compliance teams should align data logic and classification rules now to avoid inconsistent submissions.

BaFin has warned the public about a series of nearly identical websites, run by unknown operators, that promote an AI-based investment platform under the names "Nevald," "Rendzyx," and "Zinsoren" without the required authorization. Compliance teams should treat the listed domains as indicators of investment fraud and use them to strengthen fraud detection, customer protection, and monitoring controls.

EIOPA's Q&A 3507 explains that differences between firms' replicated Colombian peso (COP) risk-free rate curves and the published curve can arise from the timing of market data capture. Less liquid instruments may be updated by data providers after EIOPA's snapshot, and EIOPA identified a 3.4bp deviation at the 1Y maturity in this case. Compliance and actuarial teams that replicate RFR curves for Solvency II purposes should understand this limitation when reconciling their results.

The SEC has proposed amendments that would modernize proxy solicitation rules by eliminating the annual report delivery requirement for registrants, removing the delivery deadline for documents incorporated by reference into proxy statements, and ending certain soliciting material filings. The proposal would also shorten the minimum broker search period. Compliance teams at issuers, broker-dealers, and intermediaries should assess operational impacts now, even though the rules are not yet final.