GRC Report Staff

DORA Enters into Force, Strengthening Digital Resilience Across the EU Financial Sector

On January 17, 2025, the EU takes a significant step towards fortifying the financial sector’s ability to weather the storm of today’s digital and cyber risks with the official rollout of the Digital Operational Resilience Act (DORA). This isn’t just another regulation—it’s a bold response to the growing recognition that the financial sector’s resilience is now as important as its profitability.

HF Sinclair Navajo Reaches Settlement to Address Compliance & Air Quality Issues in Artesia

For the residents of Artesia, New Mexico, clean air has been a long time coming. Years of living in the shadow of HF Sinclair Navajo’s refinery—grappling with elevated benzene levels and smog-inducing emissions—have taken their toll on a community already bearing more than its fair share of pollution. But now, thanks to a recent settlement brokered by the Department of Justice (DOJ), the Environmental Protection Agency (EPA), and the New Mexico Environment Department (NMED), there’s a renewed promise of relief.

Equifax Stumbles Over Consumer Disputes: CFPB Hands Down $15 Million Fine

For many consumers, credit reports are the gatekeepers of opportunity. They determine whether someone can buy a home, secure a loan, or even get a job. But what happens when that gatekeeper stumbles—repeatedly? Enter Equifax, one of the nation’s largest credit reporting agencies, now facing a $15 million civil penalty from the Consumer Financial Protection Bureau (CFPB) for its botched handling of consumer disputes.

Unified Care Services Settles $18 Million False Claims Act Allegations Over PPP Loans

During the height of the COVID-19 pandemic, the Paycheck Protection Program (PPP) was more than just financial aid—it was a lifeline for small businesses fighting to survive. But for Unified Care Services LLC, a chain of skilled nursing facilities based in Torrance, California, it became the focal point of an $18 million settlement for alleged fraud. This case serves as a sobering reminder of the consequences when businesses misuse taxpayer-funded programs meant to provide relief.

Wells Fargo & Merrill Lynch Penalized $60 Million for Compliance Failures

The Securities and Exchange Commission (SEC) has recently announced settlements with Wells Fargo and Merrill Lynch over compliance failures related to their cash sweep programs. Combined, the firms will pay $60 million in civil penalties.

SEC Takes Action Against Two Sigma for Failing to Fix Vulnerabilities in Investment Models

The Securities and Exchange Commission (SEC) is taking a tough stand against Two Sigma Investments LP and Two Sigma Advisers LP, two major New York-based investment advisers, for neglecting to fix known vulnerabilities in their investment models, resulting in potential harm to clients. The SEC’s order also highlights a disturbing breach of whistleblower protections that puts a dark cloud over the firm’s reputation.

FTC Takes Action Against GM Over Unseen Tracking of Drivers’ Data

It’s the kind of scenario that sounds like a privacy nightmare. You’re driving your car, thinking you’re just using a standard service like navigation or emergency assistance, only to later discover that every movement you make—your precise location, your driving behavior—has been quietly tracked and sold without your knowledge or consent. That’s exactly what the Federal Trade Commission (FTC) is accusing General Motors (GM) and its OnStar service of doing.