GRC Report Staff

Australian Unity Fined After Court Finds Serious Failures in Retail Product Governance

Australia’s Federal Court has ordered Australian Unity Funds Management Limited to pay a civil penalty of $4.95 million (AUD 7.125 million) after finding the firm failed to properly assess whether a retail investment product was suitable for investors, breaching the country’s design and distribution obligations.

BaFin Issues New Guidance on ICT Risks in the Use of AI Under DORA

Germany’s financial regulator, Federal Financial Supervisory Authority (BaFin), has published new supervisory guidance aimed at helping financial entities manage information and communication technology (ICT) risks arising from the use of artificial intelligence. Released on January 30, 2026, the document focuses squarely on how AI-related risks should be addressed within the framework of the EU’s Digital Operational Resilience Act (DORA).

Deloitte Survey Shows AI Adoption Racing Ahead of Governance Readiness

Artificial intelligence is no longer confined to pilots, innovation labs, or tightly controlled proofs of concept. It is spreading across the enterprise, and in many organizations, governance, risk, and control structures are struggling to keep pace. That tension sits at the center of the 2026 edition of The State of AI in the Enterprise: The Untapped Edge, released this week by the Deloitte AI Institute. Based on a global survey of more than 3,200 senior business and IT leaders, the report captures a moment where AI ambition is accelerating, enterprise exposure is widening, and governance maturity is emerging as a critical constraint on scale.

Employment Agency Fined €5 Million After Massive Job Seeker Data Breach

France’s privacy regulator (CNIL) has sanctioned France Travail and fined the company €5 million over a breach that occurred in the first quarter of 2024. The regulator concluded that the agency failed to put in place security measures commensurate with the risks involved in processing highly sensitive personal data.

A New Climate Reporting Line in the Sand for Governments

The International Public Sector Accounting Standards Board has taken a big step toward bringing climate transparency into the heart of public sector financial reporting with the release of IPSASB SRS 1, Climate-related Disclosures.

Nike Investigates Potential Cyber Incident After Extortion Group Threatens Data Release

Nike is investigating a potential cybersecurity incident after a cybercrime group claimed it had stolen data from the company’s systems, according to multiple cybersecurity and media reports.

Dutch Regulator Steps Up Pressure on Sustainability Claims in Finance

Sustainability claims are not just marketing copy. They tell a story, set expectations, and shape how consumers and pension participants decide where to place their money. That is what the Authority for the Financial Markets (AFM) said in a recent study, which is calling on financial institutions to sharpen the accuracy and clarity of how they communicate their sustainability ambitions.