GRC Report Staff

Australia’s Privacy Regulator Draws a Line on Age Checks as Online Verification Surges

The Office of the Australian Information Commissioner (OAIC) recently published new guidance aimed at helping organizations navigate the privacy implications of age assurance technologies. The timing is not accidental. In the three months since Australia’s Social Media Minimum Age scheme came into force, the regulator says it has seen a noticeable increase in age checks being used not just on social platforms, but across a wider range of online services.

Polish Regulator Fines Glovo Operator $1.5 Million Over Collection of Customer ID Scans

Mirosław Wróblewski, President of Poland’s Personal Data Protection Office (UODO), imposed an administrative fine of $1.5 million (PLN 5,898,064) on Restaurant Partner Polska, the company responsible for operating the Glovo platform in Poland. The decision follows an inspection examining how personal data from users of the “Glovo – food delivery and other” app was processed.

Hyatt Changes Card Surcharge Practices in Australia Following ACCC Investigation

Hyatt hotels in Australia have revised their card payment surcharge practices after an investigation by the Australian Competition and Consumer Commission (ACCC) found potential issues with how surcharges were applied to debit card payments at the Hyatt Regency Sydney.

Temporary Employment Industry Group Fined €4.52 Million in Portugal Over Worker Hiring Restrictions

Portugal’s competition regulator announced that it has fined the Portuguese Association of Private Employment and Human Resources Companies (APESPE) €4.52 million after concluding the group maintained a no-poach clause that restricted hiring between its member companies for decades.

Macquarie Securities Ordered to Pay $23 Million Over Years of Short Sale Misreporting

Macquarie Securities has been ordered to pay about $23 million ($35 million AUD) after Australia’s New South Wales Supreme Court found the firm responsible for years of inaccurate short sale reporting caused by failures in its internal systems and controls.

Intesa Sanpaolo Fined €17.6 Million Over Customer Profiling Linked to Isybank Transfer

Italy’s data protection authority has fined Intesa Sanpaolo €17.6 million after concluding that the bank unlawfully processed the personal data of roughly 2.4 million customers while preparing a large-scale transfer of accounts to its digital subsidiary Isybank.

Adobe Agrees to $150 Million Settlement Over Alleged Subscription Practices That Misled Customers

Adobe has agreed to a proposed $150 million settlement with the U.S. Department of Justice to resolve allegations that the company’s online subscription practices violated federal consumer protection law, marking one of the most prominent enforcement actions to date involving digital subscription models.