GRC Report Staff

UK Audit Regulator Sanctions BDO & Two Former Partners After Oversight Failures Come to Light

The Financial Reporting Council has issued sanctions against BDO and two former audit engagement partners after uncovering systemic failures that allowed a Senior Manager at the firm to carry out dishonest conduct on numerous audits over several years.

First Trust Portfolios Fined $10 Million Over Improper Gifts & Misleading Records

First Trust Portfolios has agreed to pay a $10 million fine and accept a censure after the Financial Industry Regulatory Authority (FINRA) found the firm provided lavish gifts and entertainment to broker-dealer representatives in violation of longstanding limits on non-cash compensation tied to investment product sales. The settlement is outlined in a Letter of Acceptance, Waiver and Consent (AWC) that First Trust submitted without admitting or denying the findings.

Shortcomings in Money Laundering Prevention Lead to €45 Million Fine for J.P. Morgan

Germany’s financial watchdog has fined J.P. Morgan €45 million after identifying widespread failures in the bank’s processes for reporting suspicious transactions, according to a notice from the Federal Financial Supervisory Authority (BaFin).

Australia’s Information Commissioner Highlights Progress on Privacy & Access Rights

Australia’s privacy and information rights regulator says it made meaningful strides in enforcement, transparency, and public trust over the past year, according to the Office of the Australian Information Commissioner’s (OAIC) newly released Annual Report for 2024–25.

Italian Competition Authority Fines Man Project for Misleading Outlet Pricing Practices

The Italian Competition Authority has fined Man Project €300,000 for what it determined to be an unfair commercial practice involving the sale of clothing items under the Coveri Tailor brand. According to the Authority, the company misled consumers by presenting garments as discounted items from earlier or higher-priced collections, when in fact the products had never been sold in traditional retail stores.

Federal Review Finds Strengths & Weak Spots in Utility Cybersecurity Programs

The Federal Energy Regulatory Commission (FERC) has released an updated set of “Lessons Learned” from Commission-led audits of the Critical Infrastructure Protection (CIP) Reliability Standards, offering a clearer picture of where compliance programs are improving and where common gaps are still appearing across the electric sector.

Danish Businesses Push for a More Practical GDPR: Dialogue Opens Between Regulator & Industry

The Danish Data Protection Agency (Datatilsynet) and the Confederation of Danish Industry (DI) have opened a constructive dialogue on how to make GDPR compliance less of a bureaucratic burden and more of a workable reality for businesses.