GRC Report Staff

New Zealand Regulators Press Financial Institutions on AI-Driven Cyber Risks

New Zealand's financial regulators have told banks and other regulated institutions to examine whether their cybersecurity arrangements are keeping pace with advances in artificial intelligence, warning that the technology is creating new problems for corporate oversight and increasing dependence on outside technology providers.

South Korea Moves to Accelerate Data Breach Investigations as Reports Surge

South Korea's privacy regulator received 432 data breach reports in the first six months of 2026, nearly matching the 447 recorded throughout the whole of last year. The increase has prompted a substantial overhaul of how the country intends to investigate breaches, particularly those involving companies responsible for the personal information of millions of people.

EBA Chair Urges Banks to Lend More While Signaling Regulatory Simplification and Coherence

In an Irish Independent interview, EBA Chair François-Louis Michaud argued that well-capitalized European banks should be less cautious about lending. He ruled out framing the debate as one of lower capital requirements and pointed instead to a more coherent, simplified, and predictable rulebook. Compliance teams should treat this as a directional signal rather than binding guidance, since it previews supervisory priorities on simplification, climate risk, ICT resilience, and the Savings and Investments Union.

Norway FSA Warns of Clone Firm Impersonating FCA-Authorized Entity gfo-xx

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about "gfo-xx (Clone)," a suspected clone of a UK FCA-authorized firm, based on a UK FCA warning. Compliance teams should treat this as a fraud and impersonation alert and update screening, client-protection, and monitoring controls accordingly.

UK CMA Finalizes Revised Merger Efficiencies Guidance Following Consultation Closure

The UK Competition and Markets Authority (CMA) has concluded its consultation and published final revised guidance on assessing rivalry-enhancing efficiencies in mergers, now incorporated into its updated Merger Assessment Guidelines. Compliance and legal teams advising on UK transactions should review the final text, because it changes how efficiency arguments are framed and evidenced in merger reviews.

Norway FSA Warns of Clone Firm Impersonating FCA-Registered Hanbury Financial Planning

Norway's Financial Supervisory Authority (Finanstilsynet) has published a warning about a clone of an FCA-registered firm, "hanbury_financial_p1lanning (Clone)," which links to a corresponding UK Financial Conduct Authority (FCA) warning. Clone firms use the identity of authorized firms to defraud consumers, so compliance teams should strengthen counterparty verification and fraud-monitoring controls.

Bundesbank Urges Digital Sovereignty, Reduced Reporting Burdens, and Wholesale CBDC Rollout Amid Geo

In a keynote speech, a Bundesbank executive board member outlined Europe's need for greater financial and technological independence amid elevated geopolitical risk, and announced concrete supervisory and market-infrastructure steps. These include the end of dual large-loan reporting, the digital euro, and the first Wholesale CBDC availability through the Pontes Initial Launch this year. The speech is not binding, but it signals supervisory priorities on third-party dependency, payments resilience, and reporting simplification.