GRC Report Staff

The Netherlands Authority for Consumers and Markets (ACM) has told all energy suppliers in a letter that telemarketers may not pose as independent comparison services when selling energy contracts. Suppliers that use such intermediaries must show ACM what measures they are taking to ensure full compliance. The action reinforces that the contracting supplier is accountable for the entire sales process, including third-party sellers acting on its behalf.

Senior officials from the CFTC, SEC, FDIC, Federal Reserve Board, and Bank of England held a tabletop exercise on September 3, 2026, on the hypothetical resolution of central counterparties (CCPs). The meeting focused on information sharing and communications arrangements to support financial stability during a CCP resolution. It introduces no new requirements, but it signals continued cross-border policy attention on CCP resilience that matters for clearing members and market participants.

At the 2026 Green Fintech Symposium, HKMA Chief Executive Eddie Yue called on the financial sector to use technology and data to direct capital to high-impact decarbonization projects and guard against greenwashing. The event introduced no new rules or deadlines, but it signals HKMA supervisory priorities on climate risk, ESG data integrity, and AI-enabled sustainable finance. Compliance teams should treat it as a directional indicator when planning ESG and climate-risk controls.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website accsmanager.com, relaying a listing by France's Autorité des Marchés Financiers (AMF) on its blacklist of impersonation (usurpation) schemes. Compliance teams should treat the domain as a likely fraudulent or unauthorized actor and update their controls and customer-protection measures accordingly.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about pgroup-client.com, a site the French Autorité des marchés financiers (AMF) flagged on its blacklist for impersonation (usurpation). Compliance teams should treat the domain as a likely fraud vector and add it to screening and monitoring controls, since impersonation schemes target both customers and institutions.

The FCA's CP26/33 finds that general insurance (GI) value measures have improved transparency and customer outcomes, but that inconsistent reporting limits the data's usefulness. It proposes two minor burden-reducing changes now and signals broader rule changes in the first half of 2027. Responses are due by 9 October 2026, so compliance teams have a short window to comment and should begin planning for the wider reforms.

On September 11, 2026, Japan's Financial Services Agency (FSA) issued a written warning against Bit Hills Inc., a British Virgin Islands-based entity that operates the online lending platform "CryptoPawn" without registration as a money lender. The action shows continued FSA enforcement against offshore, internet-based lenders that target Japanese residents. Compliance teams should use the warning to update screening, counterparty, and fraud-prevention controls.