Find the Right GRC Solution

Search and compare GRC technology built for the problems you’re trying to solve

Compliance & Ethics

Australian Federal Court Upholds $7.7 Million in Penalties Against iSignthis & Former CEO

The penalties against iSignthis have survived another round in court. Nearly six years after Australian regulators brought proceedings against the payments company and its former chief executive, a federal appeals court has upheld approximately $7.7 million (A$11 million) in combined penalties and a six-year ban on the former CEO managing corporations.

ESMA Q&A 2919 Raises Question on MiFID II Investor Protection Rules for EU Firms Serving Non-EU Clie

ESMA has published Q&A 2919 asking whether MiFID II investor protection rules apply when EU-based, EU-authorized investment firms serve clients outside the EU. The entry is marked "Forwarded to EC/Public Consultation/Other," so no definitive ESMA answer has been issued. Compliance teams with cross-border client bases should treat the territorial scope of their conduct obligations as unresolved and monitor for further guidance.

ASIC Form 361 Lets Registered Agents Notify Cessation of Acting for Companies

ASIC's Form 361 is the mechanism by which registered agents notify ASIC that they have ceased to act for one or more companies. It is not a new rule: the document is a form and guide dated 2011 and 2015, though it is labeled as a 2026 press release. Compliance teams should treat it as a reminder to confirm that agent offboarding and corporate records processes are accurate and current.

ASIC Form 410 Sets Requirements for Company and CCIV Name Reservations in Australia

ASIC's Form 410 (version dated 1 July 2022) is the prescribed application for reserving a company, foreign company, registrable Australian body, or Corporate Collective Investment Vehicle (CCIV) name under the Corporations Act 2001. It is an existing form and guide, not a new rule, and the document's 2026 date appears to reflect republication rather than substantive change. Compliance teams should still confirm that entity formation, renaming, and registration workflows follow its timing, declaration, and signature requirements.

Bank of England Revises Criteria for Monthly Form BT Reporting by Deposit-Takers

The Bank of England is changing the criteria that determine which firms must submit Form BT monthly. Monthly submission will generally apply only to firms that also file specified monthly Money and Credit returns (Forms BE, BN, GT or ER), and some current monthly filers will move to quarterly. Compliance teams should confirm their status once the Bank contacts them, because the effective dates and notice periods have not yet been published.

Norway FSA Republishes French AMF Warning on Crypto Website corpagenesis-fr.net

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about corpagenesis-fr.net, a website that France's Autorité des Marchés Financiers (AMF) placed on its crypto-currency blacklist. The notice signals that the site is likely an unauthorized or fraudulent crypto-asset offering. Compliance teams should treat it as a cross-border red flag for screening, monitoring, and customer protection.

ASIC Form 370 Lets Officeholders Voluntarily Notify Resignation or Retirement Under Section 205A

ASIC's Form 370 gives resigning or retiring company officeholders an optional way to notify ASIC directly of their departure, provided they attach a copy of their resignation letter. The 28-day lodgement window determines which cessation date ASIC records for a director, so timing matters for governance and liability. Note that the document is dated February 2021 and is a form with its guide, not a new rule or amendment.