GRC Report Staff

Privacy regulators in California, Colorado, and Connecticut are tightening the screws on companies that still aren’t getting the message. The California Privacy Protection Agency (CPPA) joined with the Attorney Generals of California, Conneticut, and Colorado states in announcing a joint sweep of businesses suspected of ignoring Global Privacy Control (GPC) signals, the simple browser setting that tells companies to stop selling or sharing a consumer’s personal information.

What began as casual emails and WhatsApp messages has ended with some of Britain’s biggest sports broadcasters facing more than £4.2 million in fines. The Competition and Markets Authority (CMA) ruled that Sky, BT, IMG, ITV, and the BBC coordinated pay rates for freelance workers, from camera operators to sound technicians, undermining fair competition in an industry heavily dependent on short-term talent.

The European Securities and Markets Authority (ESMA) has issued a warning in its latest risk monitoring report, showing that geopolitical tensions, cyber threats, and volatile investor sentiment are combining to keep risks in EU financial markets at high or very high levels. The findings, published in ESMA’s second risk report of 2025, point to vulnerabilities across equities, bonds, crypto-assets, and the wider financial infrastructure.

Shoppers thought they were getting a little extra bang for their buck. Instead, thousands walked away from The Good Guys’ stores only to find their promised “StoreCash” vanished almost as quickly as it appeared.

The Commodity Futures Trading Commission (CFTC) has wrapped up what Acting Chairman Caroline D. Pham dubbed an “enforcement sprint,” issuing six simultaneous orders against 10 financial firms and securing $8.325 million in penalties. The initiative, unveiled in March, was designed to clear a backlog of long-running compliance cases that had consumed enforcement bandwidth for years.

The Federal Trade Commission (FTC) has taken its first enforcement action under the INFORM Consumers Act, ordering Temu’s parent company Whaleco to pay a $2 million civil penalty for alleged violations of the law.

Hong Kong’s Securities and Futures Commission (SFC) has reprimanded and fined Instinet Pacific Limited (Instinet) $1 million (HK$8 million) after uncovering a years-long failure to comply with reporting requirements for cross trades on the Stock Exchange of Hong Kong (SEHK).