Find the Right GRC Solution

Search and compare GRC technology built for the problems you’re trying to solve

Compliance & Ethics

Norway FSA Republishes UK FCA Warning on Unauthorized Firm Legacy Trading Global

The Norway Financial Supervisory Authority (Finanstilsynet) has posted a warning about Legacy Trading Global, based on a notice originally issued by the UK Financial Conduct Authority (FCA). The source material is limited, but it signals a probable unauthorized or fraudulent investment solicitation that compliance teams should add to their screening and client-protection controls.

FCA Sets Holiday Service Pause for UK Listings Review and Official List Activity Through January 202

The FCA will pause document allocation, responses, and listing hearings from December 21, 2026 to January 4, 2027 inclusive, with normal activity resuming January 5, 2027. Those days will not count toward standard turnaround times, and revised timetables and early cutoffs apply to Final Terms and Outstanding Conditions. Compliance and deal teams should plan transaction timetables now to avoid missed windows and stale financial information.

Norway FSA Relays Central Bank of Ireland Warning on Cloned Firm Carrowmore Financial Services

The Norway Financial Supervisory Authority has published a warning that references a Central Bank of Ireland notice on "Carrowmore Financial Services (CLONE)," an unauthorized firm that appears to be impersonating a legitimate entity. Compliance teams should treat the name as a fraud and impersonation red flag and update screening and customer-warning controls. The source material is brief, so teams should consult the original Irish notice for specifics.

German Data Protection Commissioner Urges Genuine Patient Choice as ePA Research Data Use Begins

The BfDI has issued recommendations, based on a survey of 1,500 insured persons, urging the German Federal Government to strengthen transparency and granular user controls in the electronic patient file (ePA). From the end of October 2026, pseudonymized medication list data can be extracted for research unless insured persons object. Compliance teams at organizations handling German health data should treat this as a signal of regulatory expectations on consent, control, and transparency.

Norway FSA Flags Website Impersonating France's Autorité des Marchés Financiers in Warning

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website autorite-des-marches-financiers.com, which appears to impersonate France's financial markets regulator, the AMF. The notice relays the AMF's own blacklist entry for the domain. Compliance teams should treat this as a regulator-impersonation fraud indicator and update their screening and customer protection controls.

Japan FSA Extends Report Deadlines to November 27, 2026 for Kumamoto Earthquake Relief

Japan's Financial Services Agency will not pursue administrative or criminal liability for reports and notifications with legal deadlines that are filed by November 27, 2026, if the earthquake prevented timely submission. The relief also covers reports with no statutory deadline and allows case-by-case extensions for affected institutions headquartered in Kumamoto Prefecture. Compliance teams should confirm eligibility and document the earthquake's impact on filing capacity.

FRC Opens Investigations into Accountant and KPMG, PKF Littlejohn Audits of State Oil Limited

The UK Financial Reporting Council has opened three investigations tied to State Oil Limited (part of the Prax Group): one into an individual accountant's conduct on financing arrangements, and two into statutory audits by KPMG LLP and PKF Littlejohn LLP. The opening of an investigation does not imply any finding of breach or misconduct, but it signals continued FRC scrutiny of audit quality and of professional conduct around financing arrangements. Compliance teams should note the read-across for audit oversight, lender and borrower reporting, and finance function governance.