GRC Report Staff

A federal judge has given the green light to a proposed $177 million settlement in a consolidated class action lawsuit against AT&T, stemming from two massive data breaches that exposed the personal information of tens of millions of customers. The preliminary approval, issued by Judge Ada Brown of the U.S. District Court for the Northern District of Texas, clears the way for a final settlement hearing set for December 3, 2025.

When the General Data Protection Regulation (GDPR) first came into force, companies braced for a regulatory storm, such as sweeping data rules, compliance headaches, and steep fines. What many didn’t expect? A surprising upside of fewer cyberattacks, better security, and billions saved.

The Public Company Accounting Oversight Board (PCAOB) has imposed a combined $8.5 million in penalties on the Dutch affiliates of Deloitte, PwC, and EY after uncovering widespread cheating on mandatory internal training exams by hundreds of professionals across all three firms.

In a notable shift to its supervisory approach, the Federal Reserve Board announced Monday that reputational risk will no longer be a formal component of its examination programs for banks. The move marks a departure from long-standing practices in regulatory supervision and signals a recalibration of how the Fed evaluates risk within financial institutions.

Velox Clearing, a Miami-based clearing broker with just two-dozen registered representatives, has learned the hard way that a skeleton compliance crew and patchwork surveillance don’t cut it when you’re moving thinly traded penny stocks for foreign clients.

As the world becomes more interconnected and regulatory frameworks grow in complexity, organizations are under increasing pressure to manage risks effectively while remaining compliant. The role of artificial intelligence (AI) in Governance, Risk, and Compliance (GRC) is evolving rapidly, offering promising solutions to enhance decision-making, automate repetitive tasks, and ensure compliance across various business functions. While the integration of AI into GRC tools provides unprecedented efficiency, it also introduces challenges that organizations must carefully navigate.

In a move pitched as part simplification, part survival strategy, EU member states have agreed to rein in some of the most ambitious corporate sustainability rules on the books, at least for now.