GRC Report Staff

OCC Announces October Enforcement Actions, Targets Governance & BSA/AML Deficiencies

The Office of the Comptroller of the Currency (OCC) released its list of enforcement actions for October 2025, highlighting continued regulatory focus on board oversight, corporate governance, and anti-money laundering compliance across the U.S. banking sector.

French Court Convicts TotalEnergies of Greenwashing Over Climate Claims

A Paris court has convicted TotalEnergies of misleading consumers through “greenwashing,” ruling that the French oil and gas giant overstated its environmental commitments and misrepresented its pathway to carbon neutrality.

Canada’s Financial Watchdog Fines Crypto Firm Cryptomus $127 Million for AML Failures

Canada’s financial intelligence watchdog has handed down its largest-ever penalty, fining Xeltox Enterprises, the company behind the crypto platform Cryptomus, $127 million (C$176,960,190) for repeated violations of anti-money laundering and counter-terrorist financing laws.

MEPs Reject Mandate on Simplified Sustainability & Due Diligence Rules Ahead of November Vote

‍The European Parliament has rejected a draft mandate that sought to streamline sustainability reporting and due diligence obligations for companies, setting the stage for a renewed debate and a fresh vote next month.

New York Issues Fresh Cybersecurity Guidance on Third-Party Risks

As financial institutions continue to lean on an expanding universe of cloud, fintech, and AI providers, New York’s financial regulator is reminding them that outsourcing doesn’t mean offloading responsibility.

Norwegian Court Upholds Fine Against Adult Dating App Over Data Privacy Violations

Norway's Borgarting Court of Appeal has upheld the $6 million (NOK 65 million) fine against Grindr, ruling that the company unlawfully shared users’ personal data with advertisers without valid consent. The decision, handed down on Tuesday, confirms earlier findings by the Norwegian Data Protection Authority (Datatilsynet) and the Oslo District Court that Grindr breached EU data protection law.

EU Moves to Ease EUDR Reporting Burdens While Keeping Core Safeguards Intact

‍The European Commission is moving to fine-tune the EU Deforestation Regulation (EUDR), aiming to lighten the reporting load on smaller players and stabilize the IT backbone that underpins one of the world’s most ambitious supply-chain laws.