GRC Report Staff

Instacart to Pay $60 Million in Consumer Refunds to Settle FTC Deception Case

Instacart has agreed to pay $60 million in consumer refunds to settle a lawsuit brought by the Federal Trade Commission, which alleged that the grocery delivery platform used deceptive advertising, improper subscription practices, and unlawful refund processes that raised costs for shoppers.

ASIC Wraps Up the Year With Heavy Court Outcomes for Macquarie Securities, RM Capital, & ANZ

A decade of misreported market data, years of conflicted advice, and widespread failures affecting tens of thousands of customers all landed before the courts this week, as ASIC secured three major enforcement outcomes against Macquarie Securities, RM Capital, and ANZ. The decisions span institutional trading, advice oversight, and retail banking operations.

Ceratizit to Pay $54.4 Million to Settle Allegations of Evaded Customs Duties

Ceratizit USA, a Charlotte, North Carolina–based distributor of tungsten carbide products, has agreed to pay $54.4 million to resolve allegations that it violated the False Claims Act by knowingly evading U.S. customs duties on imports from China, the Department of Justice announced Thursday.

Croatia’s Data Protection Authority Fines Bank €1.5 Million Over Mobile Banking Privacy Violations

Croatia’s Personal Data Protection Agency has imposed an administrative fine of €1.5 million on a bank for multiple violations of the General Data Protection Regulation, following findings that the institution unlawfully collected extensive personal data from users of its mobile banking application.

OCC Proposes Simplified CRA Strategic Plan to Ease Compliance Burden on Community Banks

The Office of the Comptroller of the Currency on Wednesday released proposed guidance aimed at reducing regulatory burden for community banks by simplifying how they can comply with the Community Reinvestment Act.

Korea’s Privacy Regulator Pivots Toward Prevention as AI Reshapes the Data Landscape

The Personal Information Protection Commission (PIPC) recently unveiled its policy directions for 2026, laying out a sweeping plan to move Korea’s privacy regime away from after-the-fact penalties and toward a more preventive, risk-based approach designed for an AI-embedded society. The roadmap was presented on December 2 at the Sejong Convention Center during a joint reporting session with the Ministry of Science and ICT, the Korea Aerospace Administration, and the Korea Media and Communications Commission.

FCA Backs Overhaul of UK Benchmarks Rules as Government Consults on New Regime

The Financial Conduct Authority has welcomed the UK government’s move to reform the country’s benchmarks framework, signaling support for a shift away from the EU-era Benchmarks Regulation toward a more targeted, UK-specific regime.