GRC Report Staff

The Spanish Data Protection Agency has unveiled a new initiative titled “Deepfakes are no joke,” anchored by an educational video designed to show just how easily AI-generated content can blur the line between reality and fabrication. The video walks viewers through a simulated scenario in which a seemingly authentic audiovisual clip is created from a single photograph, before revealing that the content is entirely artificial and produced with the subject’s consent.

GRC Report will serve as an official media sponsor of Swiss GRC Day 2026, aligning with one of Europe’s more focused gatherings of risk, compliance, legal, and technology leaders at a time when the discipline of risk management is being pushed into unfamiliar territory.

In a move that signals growing regulatory attention on next-generation computing, Italy’s competition authority has launched a market investigation into quantum computing, opening a call for input as it seeks to understand how competition could evolve in a field that is advancing quickly but remains loosely defined.

On Tuesday, the U.S. Treasury’s Office of Foreign Assets Control announced that TradeStation Securities, the Florida-based brokerage firm, will pay $1.11 million to settle potential liability for hundreds of sanctions violations, after a series of seemingly routine missteps quietly unraveled key compliance controls.

Engineering teams don’t debate where their source of truth lives. It’s in code. Changes are tracked, reviewed, and deployed through systems designed to create clarity and accountability. GRC has largely operated outside of that model.

The Office of the Australian Information Commissioner (OAIC) recently published new guidance aimed at helping organizations navigate the privacy implications of age assurance technologies. The timing is not accidental. In the three months since Australia’s Social Media Minimum Age scheme came into force, the regulator says it has seen a noticeable increase in age checks being used not just on social platforms, but across a wider range of online services.

Mirosław Wróblewski, President of Poland’s Personal Data Protection Office (UODO), imposed an administrative fine of $1.5 million (PLN 5,898,064) on Restaurant Partner Polska, the company responsible for operating the Glovo platform in Poland. The decision follows an inspection examining how personal data from users of the “Glovo – food delivery and other” app was processed.