GRC Report Staff

Dutch Regulator Appeals Reduced Fine in Crypto Registration Case

A Dutch court has trimmed a multimillion-euro fine imposed on a crypto service provider for operating in the Netherlands without the legally required registration, in a case that continues to test how aggressively regulators can enforce anti-money laundering rules against the crypto sector.

Japan’s Financial Regulator Moves to Toughen Cybersecurity for Crypto Exchanges

This week, the Japanese Financial Services Agency published a draft policy aimed at strengthening cybersecurity measures for crypto-asset exchange service providers, opening the door for public feedback as authorities look to curb the steady drumbeat of crypto thefts and system breaches seen around the world.

Federal Court Blocks Texas Anti-ESG Law, Setting Limits on State Leverage Over Corporate Policy

A federal judge has permanently blocked Texas from enforcing Senate Bill 13, striking down one of the state’s most aggressive attempts to push back against Environmental, Social, and Governance practices through public investment and procurement rules.

France’s Data Protection Authority Reports €486.8 Million in Fines During 2025

Over the course of the last year, the France’s data protection authority, the Commission nationale de l'informatique et des libertés (CNIL), issued 259 decisions, ranging from sanctions and compliance orders to reminders of legal obligations and warnings. Together, those actions translated into €486,839,500 in cumulative fines, or roughly $530 million, with cookies, employee monitoring, and data security emerging as the most common fault lines.

Hong Kong Regulator Penalizes Kylin International for Fund Governance Failures

Hong Kong’s securities regulator has taken disciplinary action against Kylin International, fining the firm about $1.15 million (HK$9 million) for a series of compliance and governance failures tied to its management of private funds.

Italy Fines Agos Ducato €800,000 for Discriminating Against Non-Italian SEPA IBANs

The Italian Competition Authority has said it fined Agos Ducato €800,000 after concluding the company spent years refusing direct debit repayments from non-Italian SEPA IBANs or steering customers into a more burdensome process than the one used for Italian accounts. The conduct, the Authority said, ran from February 2014 through the first quarter of 2023, cutting against the EU’s basic promise that paying in euros across SEPA should feel the same whether the account sits in Milan or Munich.

Australian Federal Court Fines FIIG Securities Over Cyber Failures That Exposed Client Data

Australia’s Federal Court has ordered FIIG Securities Limited to pay $1.77 million USD (AUD 2.5 million) after regulators found the fixed-income specialist failed for years to adequately protect client data from cyber threats, shortcomings that intensified the impact of a major data breach in 2023.