GRC Report Staff

Capita Fined £14 Million for 2023 Data Breach Affecting 6.6 Million People

The UK Information Commissioner’s Office (ICO) has fined outsourcing giant Capita and its pensions subsidiary a combined £14 million for failing to protect personal data in a 2023 cyberattack that exposed the information of 6.6 million people.

Ofcom Fines Royal Mail £21 Million for Missing 2024/25 Delivery Targets

Ofcom has fined Royal Mail £21 million after the postal operator once again failed to meet its statutory delivery targets for First and Second Class mail during the 2024/25 financial year.

EDPB Turns to Transparency for Its 2026 GDPR Enforcement Push

Europe’s data regulators are turning the spotlight on transparency, one of the GDPR’s most fundamental principles. During its October plenary, the European Data Protection Board (EDPB) agreed that its 2026 Coordinated Enforcement Framework (CEF) action will focus on how well organizations are informing people about the use of their personal data under Articles 12, 13, and 14 of the regulation.

Auto Insurers Hit with $19 Million in Penalties After DFS Cybersecurity Probe

Eight major auto insurance companies have agreed to pay more than $19 million in penalties to New York State following a sweeping cybersecurity investigation by the Department of Financial Services (DFS). The enforcement action, announced Tuesday by Superintendent Adrienne A. Harris, revealed failures in data security controls that exposed the personal information of New Yorkers through online insurance quoting systems.

Fewer Firms to Face EU Sustainability Reporting Under New Draft Rules

The European Parliament’s Legal Affairs Committee has approved new draft rules that would significantly reduce the number of companies required to conduct sustainability reporting and comply with due diligence obligations.

FCA Secures $101 Million Redress for BlueCrest Investors After Long Conflict of Interest Case

The UK’s Financial Conduct Authority (FCA) has secured $101 million in redress for UK and other non-U.S. investors in a fund sub-managed by BlueCrest Capital Management, concluding a years-long legal battle over the firm’s mishandling of conflicts of interest.

Gucci, Chloé & Loewe Fined €157 Million for Anticompetitive Pricing Practices

The European Commission has fined high-end fashion houses Gucci, Chloé, and Loewe a total of more than €157 million for restricting independent retailers’ ability to set their own prices, an anticompetitive practice known as resale price maintenance (RPM). The Commission said the pricing restrictions, which ran for years across the European Economic Area (EEA), raised prices and reduced consumer choice in the luxury fashion market.