Find the Right GRC Solution

Search and compare GRC technology built for the problems you’re trying to solve

AI Governance

Swedish FSA Launches Survey on AI Use and Risk Management Across Financial Sector

Finansinspektionen (FI) is surveying a wide range of supervised firms on how they use AI and manage its opportunities and risks. The survey also covers how firms expect the partially applicable EU AI Act to affect them. Compliance teams at Swedish-supervised institutions should expect a data request and treat the exercise as a signal of FI's supervisory priorities.

CFTC Official Flags Four Global Regulatory Gaps in Autonomous, Tokenized Derivatives Markets

In a speech at George Washington University, CFTC International Affairs Director Mel Gunewardena argued that international regulation has not kept pace with continuous, tokenized, AI-driven markets. He identified four gaps: supervisory cooperation, financial-stability oversight, standard-setting governance, and market safeguards. The speech is not binding, but it signals the CFTC's priorities, including a review of foreign market access to the U.S. and a push for stronger cross-border crisis coordination.

Ontario Tribunal Finds Marks Unsuitable for Exchange-Listed Issuer Association After Inadequate CSE

In Marks v CNSX Markets Inc (2026 ONCMT 30), the Capital Markets Tribunal found the Canadian Securities Exchange Board Panel's reasons inadequate and legally flawed. It then decided suitability afresh and concluded that Jack Marks is unsuitable to be associated with New World Solutions Inc. Compliance teams at issuers, advisors, and exchanges should note the Tribunal's scrutiny of exchange suitability processes and the weight given to overly promotional conduct.

Norway FSA Relays Warning on Clone Firm Impersonating FCA-Authorised Trusted PCP Claims

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning that relays a UK Financial Conduct Authority (FCA) alert about a clone of an FCA-authorized firm operating under the name "Trusted PCP Claims." Clone firms use the details of legitimate authorized entities to defraud consumers, so compliance teams should treat this as a fraud and impersonation risk and take steps to protect customers and the institution.

Japan FSA Publishes Agenda for 6th Corporate Disclosure Working Group Meeting on September 4

The Financial Services Agency (FSA) has published the agenda and handouts for the 6th meeting of its Working Group on Corporate Disclosure of the Financial System Council. The session features input from the Japan IR Association and a major foreign institutional investor (NBIM), signaling that investor perspectives are shaping upcoming disclosure policy. This is a procedural notice with no binding requirements, but it is a useful early indicator for compliance teams monitoring Japanese disclosure reforms.

Spanish DPA to Host Data Protection Session at XX STIC Cybersecurity Conference in Madrid

The AEPD announced it will run a dedicated data protection room on November 24, 2026, on the first day of the XX STIC Conference in Madrid. The announcement is not a new rule, but it signals that the regulator wants privacy integrated into cybersecurity, AI, and quantum risk management from the earliest design stages. Compliance teams should treat it as a supervisory-priority indicator and an opportunity to engage.

EIOPA Keynote Outlines Supervisory Priorities on Insurability, Private Credit, AI, and Simpler Rules

In a keynote at the Geneva Association PROGRES-Seminar, EIOPA argued that keeping risks insurable requires earlier risk identification, broader risk sharing, and responsible transformation. The speech introduces no binding requirements. It does signal supervisory focus on private credit and funded reinsurance, natural catastrophe protection gaps, AI and ICT concentration risk, value for money, and a possible shift toward principles- and outcomes-based regulation. Compliance teams should treat it as a forward-looking indicator of supervisory expectations.