GRC Report Staff

The European Banking Authority issued its quarterly update to the validation rules in its reporting frameworks, deactivating some rules due to inaccuracies or IT issues and reactivating others. It also released a validation rules package (a micro taxonomy and DPM update scripts) required from release 4.0 onward. Compliance and regulatory reporting teams should confirm that their validation logic matches the updated rule set to avoid false errors and resubmissions.

The Austrian Financial Market Authority (FMA) announced that the banking licence of Raiffeisenbank Ehrwald-Lermoos-Biberwier eGen has lapsed following its merger into Raiffeisenbank Tirol Mitte West eGen, entered in the Commercial Register (Firmenbuch) on September 12, 2026. Compliance teams with counterparty, correspondent, or customer exposure to the transferring bank should confirm that records, contracts, and controls reflect the successor entity.

BaFin issued Circular 10/2026 (BA) on September 14, 2026, concerning the appointment of administrators of the refinancing register under Sections 22e et seq. of the German Banking Act (KWG). Only the title and metadata were available for this analysis, so the substantive requirements could not be confirmed. Compliance teams at institutions that use or plan to use refinancing registers should review the full circular promptly.

De Nederlandsche Bank published an analysis showing that interest rate changes have a weaker effect on growth and inflation when financial or geopolitical uncertainty is high. The release is research, not a rule, and it introduces no new obligations. It still matters for compliance and risk teams because it affects assumptions in stress testing, scenario analysis, and interest rate risk planning.

ECB Executive Board Member Piero Cipollone used a speech to reaffirm the ECB's commitment to euro cash. He pointed to pending EU legal tender legislation that would reinforce mandatory acceptance of cash and access to it, and he described a banknote redesign that will be phased in over the next decade. The speech is not binding, but it signals the direction of upcoming rules that could affect cash acceptance, cash handling, and the planning of banks and other cash handlers.

Poland's data protection authority (UODO) and the Social Insurance Institution (ZUS) will co-host a free seminar on September 24, 2026, on controller responsibilities for collecting, storing, and disclosing personal data in digital administration. The event is not a new rule, but it signals UODO's current supervisory priorities, including lawful processing and digital sovereignty in the age of AI. Compliance teams with Polish operations should treat it as an informal view into regulatory expectations.

The Federal Reserve's Regulation K (12 CFR Part 211, Subpart A) governs the international activities of U.S. banking organizations, including foreign branch establishment, permissible foreign branch activities, and the organization and ownership of Edge and agreement corporations. The text provided is a codified compilation, not a new rulemaking, and it is truncated mid-§ 211.5(e). Compliance teams should use it as a baseline to check notice, approval, and investment-limit controls for cross-border operations.