GRC Report Staff

Dompé U.S. to Pay $32 Million Over Medicare Co-Pay Kickbacks

Dompé has agreed to pay $32 million to resolve allegations that it used patient assistance foundations to cover Medicare beneficiaries’ co-pays for Oxervate, its prescription drug, turning what appeared to be charitable assistance into what federal authorities alleged were unlawful inducements to purchase the company’s product.

Ofcom Opens Enforcement Push on Illegal Intimate Images & AI Deepfakes

Online platforms operating under the UK’s online safety regime have until the end of September to show they can stop illegal intimate images from spreading. Ofcom is no longer waiting for the deadline to find out whether they are ready.

HelmGuard Raises $7.3 Million to Build Continuous Risk Assurance With AI Agents

HelmGuard has raised $7.3 million in seed funding to expand its AI-driven approach to governance, risk and compliance, as the company looks to replace some of the questionnaires and periodic document reviews that still underpin corporate risk assurance with agents capable of examining evidence directly.

KPMG Surveys Find Third-Party & Supply Chain Risk Converging

Regulatory compliance and cyber risk are driving third-party risk management strategies. Supply chain leaders, meanwhile, rank cybersecurity as their top perceived risk and managing risk and geopolitical uncertainty as their leading transformation objective. Companies are preparing to expand their partner networks and automate more of the work that holds those networks together. Their risk functions are not always keeping pace.

Global Standard Setters Take Aim at Cyber & Third-Party Risks in Financial Market Infrastructure

The Committee on Payments and Market Infrastructures (CPMI) and the International Organization of Securities Commissions (IOSCO) on Tuesday published two consultative documents aimed at financial market infrastructures, or FMIs, pairing a practical cyber resilience toolkit with a discussion paper examining the risks created by FMIs’ growing reliance on third-party service providers.

AUSTRAC Removes 45 Payments & Crypto Businesses in High-Risk Sector Sweep

Australia’s financial intelligence regulator has removed 45 remittance and virtual asset businesses from its registers over the past year, an unusually broad sweep through parts of the financial system where money can move quickly, cross borders easily and, when controls fail, become difficult to follow.

Nuvei to Pay $4.85 Million to Settle FTC Payment Processing Case

Global payment processor Nuvei has agreed to pay $4.85 million to settle Federal Trade Commission allegations that it provided payment services to merchants it knew or should have known were engaged in deceptive activity, including tech-support scams targeting U.S. consumers.