GRC Report Staff

DermTech, the skin cancer testing company which filed for bankruptcy in 2024 and is now liquidating as DTech Liquidating, has agreed to resolve allegations that it violated the False Claims Act by knowingly submitting claims to Medicare for unreliable tests. Under the settlement announced Wednesday, the federal government received an allowed Class Three General Unsecured Claim of $5,038,011 in DermTech’s bankruptcy proceeding.

Google has agreed to pay £260 million to settle a lawsuit brought on behalf of UK app developers who accused the company of using its control over the Play Store to impose unfair commissions and restrictions on how their apps could reach customers, according to Reuters.

Manchester Airports Group said criminal hackers accessed data belonging to about 8.7 million customers in a cyberattack affecting systems used across Manchester, London Stansted and East Midlands airports, one of the largest breaches of customer information disclosed by a UK airport operator.

KKR & Co. has agreed to pay $250 million to settle Justice Department allegations that it repeatedly violated federal premerger review requirements, a penalty without precedent under a law whose effectiveness depends, in no small part, on companies telling regulators what they are required to know.

For South Korean AI developers, some useful data has come with an awkward choice. Get fresh consent from the people behind it, strip away enough identifying information to satisfy privacy requirements, or find another legal basis for using information that may have been collected for an entirely different reason. None is especially convenient when the object is to train an AI model on large and varied datasets.

The Villages Health System has agreed to a $541.5 million settlement over diagnosis codes that made Medicare Advantage patients appear sicker than their medical records supported, increasing what the federal government paid their health plans and, ultimately, what those plans paid the Florida provider group.

The EBA opened a public consultation on draft Regulatory Technical Standards under CRR3 that would set common requirements for how institutions govern, identify, assess, monitor and manage operational risk. The consultation runs through Dec. 31.