GRC Report Staff

AMLA Lays the Groundwork for EU-Wide AML Supervision Ahead of 2028 Shift

Europe’s new anti-money laundering authority is beginning to move from blueprint to reality. The Authority for Anti-Money Laundering and Countering the Financing of Terrorism (AMLA) on Thursday set out the rules that will underpin its future role as a direct supervisor of the EU’s highest-risk financial institutions, marking a major step toward more unified AML and CFT oversight across the bloc.

Instacart to Pay $60 Million in Consumer Refunds to Settle FTC Deception Case

Instacart has agreed to pay $60 million in consumer refunds to settle a lawsuit brought by the Federal Trade Commission, which alleged that the grocery delivery platform used deceptive advertising, improper subscription practices, and unlawful refund processes that raised costs for shoppers.

ASIC Wraps Up the Year With Heavy Court Outcomes for Macquarie Securities, RM Capital, & ANZ

A decade of misreported market data, years of conflicted advice, and widespread failures affecting tens of thousands of customers all landed before the courts this week, as ASIC secured three major enforcement outcomes against Macquarie Securities, RM Capital, and ANZ. The decisions span institutional trading, advice oversight, and retail banking operations.

Ceratizit to Pay $54.4 Million to Settle Allegations of Evaded Customs Duties

Ceratizit USA, a Charlotte, North Carolina–based distributor of tungsten carbide products, has agreed to pay $54.4 million to resolve allegations that it violated the False Claims Act by knowingly evading U.S. customs duties on imports from China, the Department of Justice announced Thursday.

Croatia’s Data Protection Authority Fines Bank €1.5 Million Over Mobile Banking Privacy Violations

Croatia’s Personal Data Protection Agency has imposed an administrative fine of €1.5 million on a bank for multiple violations of the General Data Protection Regulation, following findings that the institution unlawfully collected extensive personal data from users of its mobile banking application.

OCC Proposes Simplified CRA Strategic Plan to Ease Compliance Burden on Community Banks

The Office of the Comptroller of the Currency on Wednesday released proposed guidance aimed at reducing regulatory burden for community banks by simplifying how they can comply with the Community Reinvestment Act.

Korea’s Privacy Regulator Pivots Toward Prevention as AI Reshapes the Data Landscape

The Personal Information Protection Commission (PIPC) recently unveiled its policy directions for 2026, laying out a sweeping plan to move Korea’s privacy regime away from after-the-fact penalties and toward a more preventive, risk-based approach designed for an AI-embedded society. The roadmap was presented on December 2 at the Sejong Convention Center during a joint reporting session with the Ministry of Science and ICT, the Korea Aerospace Administration, and the Korea Media and Communications Commission.