GRC Report Staff

EIOPA's Eurofi article explains that the revised Solvency II framework, applicable from January 30, 2027, is expected to release significant capital through a revised risk margin calculation. That release comes with an explicit political expectation that the capital will support productive European investment. Compliance teams should prepare for new capital treatments, closer supervisory monitoring of capital use, and EIOPA's first report by the end of 2028.

A Board of Appeal member of the European Supervisory Authorities (ESAs), David Ramos Muñoz, has filed a signed declaration of commitment and interests under Article 59(6) of the ESA founding regulations. The document is a routine governance filing with no new obligations for supervised firms. It does, however, reinforce the independence safeguards that underpin the appeals process available to financial institutions.

Norway's Financial Supervisory Authority (Finanstilsynet) published a warning about "Luminex STO," a security token offering whose issuer is listed as based in the Netherlands. The notice points to a Dutch Authority for the Financial Markets (AFM) boiler room warning, which suggests a suspected investment fraud. Compliance teams should treat the entity as high risk and update screening and client-protection controls.

A De Nederlandsche Bank working paper surveying 5,672 Dutch respondents finds that 71% know the official cash recommendation but only 58% hold the advised amount, which points to a preparedness gap among households. The paper is research and not binding regulation, but it signals supervisory attention to payment resilience, consumer communication, and fallback capacity. Compliance and operational resilience teams should treat it as an indicator of where expectations may be heading.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about fxr-ai.com, a website that France's Autorité des Marchés Financiers (AMF) placed on its blacklist of unauthorized crypto-asset derivatives offerings. Compliance teams should treat the site as a high-risk counterparty and fraud indicator, and update screening and monitoring controls accordingly.

The FCA's PS26/18 finalizes new PERG 18 perimeter guidance, largely as consulted on, to help firms determine whether their cryptoasset activities require authorization when the new regime begins on 25 October 2027. The application window opens 30 September 2026, and existing registrations or permissions will not convert automatically. Compliance teams should start perimeter assessments now, because the guidance does not yet reflect a pending statutory instrument that will change some business model outcomes.

The CFTC's Part 165 establishes the framework for its whistleblower award program under Section 23 of the Commodity Exchange Act, including eligibility, submission procedures, confidentiality, and anti-retaliation protections. Compliance teams at CFTC-regulated firms should treat this as a core reference for internal reporting program design, because the rules reward employees who report externally and create incentives that interact directly with internal reporting channels.