GRC Report Staff

Five Data Protection Authorities Commit to Privacy-Protecting AI Governance

At the AI Action Summit in Paris this week, five global data protection authorities made an important pledge. On the 6th of February, a joint declaration was signed by officials from Australia, Korea, Ireland, France, and the UK—each committed to fostering an artificial intelligence ecosystem that doesn’t just innovate, but also respects privacy and safeguards fundamental rights.

SFC Flags Cybersecurity Incidents in Licensed Firms, Highlighting Risks to Business Continuity & Client Security

The reality of cybersecurity risks has hit home for many licensed corporations (LCs) in Hong Kong. The Securities and Futures Commission (SFC) recently unveiled findings from its latest 2023/24 Thematic Cybersecurity Review, shedding light on the alarming rise of material cybersecurity incidents in recent years. And the results? Not pretty.

The CNIL’s New AI Recommendations: Fostering Innovation While Protecting Privacy in the Age of AI

In a world where artificial intelligence is pushing boundaries and reshaping industries, the question of how to protect individuals' privacy has never been more pressing. Fortunately, the GDPR (General Data Protection Regulation) isn't just a barrier to innovation—it can be the very tool that enables responsible AI development. The French Data Protection Authority, or CNIL, has just issued new recommendations that take the best of both worlds: advancing AI while ensuring personal data is treated with the respect it deserves.

Brink’s Global Services Faces Penalties for Bank Secrecy Act Violations & Unlicensed Money Transmitting

Brink’s Global Services USA, Inc. (BGS), a well-known name in currency transport, is paying the price for serious compliance failures. The company has agreed to millions in penalties following multiple violations of the Bank Secrecy Act (BSA), a key piece of U.S. anti-money laundering (AML) law. This settlement includes a $37 million civil penalty levied by the Financial Crimes Enforcement Network (FinCEN) and a $50 million forfeiture linked to criminal charges for operating as an unlicensed money transmitter.

Lockheed Martin to Pay $29.74 Million Over Alleged Overpricing on F-35 Contracts

Lockheed Martin, the defense giant behind the F-35 fighter jet, has agreed to pay $29.74 million to settle allegations of inflating pricing on key contracts, marking another chapter in the ongoing scrutiny of government contracting. The payment comes on top of a prior reimbursement of $11.3 million to the Department of Defense (DOD) for similar violations involving undisclosed cost and pricing data.

Hellenic DPA Investigates AI Application & Spyware Data Breach Amid Growing European Scrutiny

The Hellenic Data Protection Authority (DPA) has announced two significant investigations today. One centers on the legality of the DeepSeek AI application under the General Data Protection Regulation (GDPR), while the other addresses a spyware breach that has impacted WhatsApp users in Greece.

Hong Kong Sets Ambitious 2025 Agenda to Shape the Future of Sustainable Finance

Hong Kong’s financial ecosystem is getting a major sustainability makeover. The Green and Sustainable Finance Cross-Agency Steering Group (let’s call it the Steering Group for short) has set its sights on ambitious goals for 2025, and today, we’re getting a peek into the game plan.