GRC Report Staff

Two privacy determinations released Thursday by the Australian Privacy Commissioner found that health service providers Medmate and Monash IVF interfered with individuals' privacy through their use of third-party tracking pixels. The decisions conclude a year-long investigation by the Office of the Australian Information Commissioner into how the two companies collected information from visitors to websites offering telehealth and fertility services.

The Central Bank of the United Arab Emirates has imposed a financial penalty of approximately $5.4 million (AED 20 million) on a branch of a foreign bank after examinations identified significant and repeated deficiencies in its anti-money laundering, counter-terrorism financing, sanctions, and illegal organizations compliance framework.

The Securities and Exchange Commission spent the past several weeks figuring out how to return money to investors. The agency advanced distribution efforts in three separate enforcement matters involving United Parcel Service, American Electric Power, and Andeavor, together representing $84 million in civil penalties that the SEC intends to distribute through Fair Funds established under the Sarbanes-Oxley Act.

More than 51,000 ticket buyers will receive refunds after Britain's competition watchdog concluded that StubHub UK illegally withheld mandatory fees until the final stage of the checkout process, a practice regulators have spent the past year trying to stamp out across online commerce.

The EBA published final draft technical standards revising the European banking sector's Pillar 3 disclosure requirements on environmental, social and governance risks. The package also introduces new disclosure requirements covering equity exposures and aggregate exposures to shadow banking entities, completing a major portion of the implementation work required under the Capital Requirements Regulation 3 (CRR3).

Organizations around the world woke up on June 12 to discover that a capability available the day before was suddenly gone. Anthropic's Fable 5 and Mythos 5 models, among the company's most advanced artificial intelligence systems, were reportedly taken offline following a U.S. government directive requiring access to be restricted to American citizens. Because verifying every user's nationality in real time was not practically feasible, Anthropic reportedly responded by shutting down access altogether. The decision affected users far beyond the United States, including organizations in Australia, Canada, New Zealand, and the United Kingdom. According to multiple reports, it also cut off access for the UK's AI Security Institute while it was actively evaluating the systems.

Australia's communications regulator has found that SBS breached gambling advertising rules during its broadcast of the Tour de France after airing a Crown advertisement that described the company as a "premier casino resort." At first glance, the advertisement appeared to sit comfortably within an exception that allows broadcasters to air promotions focused on dining and entertainment facilities at venues where gambling takes place. The commercial featured Crown's restaurants, entertainment offerings and accommodation.