Find the Right GRC Solution

Search and compare GRC technology built for the problems you’re trying to solve

Compliance & Ethics

Austrian FMA Approves Licence Spin-Off Creating Weilburg Invest GmbH

The Austrian Financial Market Authority has approved the proportional spin-off of the investment services provider licence held by Weilburg Family Office GmbH into a newly established entity, Weilburg Invest GmbH. Compliance teams engaging with either entity should update counterparty due diligence records and confirm the new entity's licensing status and scope of authorization.

FCA Issues Warning Against Unauthorized Firm Quantumtradedesk.org

The FCA has added Quantumtradedesk.org to its Warning List as an unauthorized entity potentially targeting UK consumers with financial services or products. Compliance teams should note this action as part of ongoing FCA efforts to combat unauthorized trading platforms and investment scams, and ensure customer-facing staff are aware of the firm's details to prevent potential customer harm.

EBA Updates Validation Rules Package for Supervisory Reporting Framework

The European Banking Authority has published an updated set of validation rules (effective 12 October 2026) applicable to framework releases from version 4.0 onward, alongside a history of quarterly "small validation rules packages" that adjust rule severity and activation status. Compliance and regulatory reporting teams must ensure reporting systems and taxonomies align with the latest validation logic to avoid submission errors or rejected filings.

Norway Fines Xandr NOK 92 Million Over Unlawful Sharing of Grindr Users' Sensitive Data

The Norwegian Data Protection Authority has issued its largest-ever fine—NOK 92 million (€8.6 million)—against Microsoft-owned ad-tech company Xandr for unlawfully processing and sharing sensitive personal data, including sexual orientation data derived from Grindr app usage, through real-time bidding. The decision reinforces that joint controllers cannot shift data protection responsibility to counterparties and underscores heightened regulatory scrutiny of the ad-tech ecosystem's handling of special category data.

EBA Releases User Guide for DPM 2.0 Glossary Conversion File

The European Banking Authority has published a user guide explaining the conversion file that maps its legacy DPM 1.0 glossary to the new DPM 2.0 data model, as part of the ongoing DPM Quality Review project. This document is critical for institutions that rely on EBA taxonomies for supervisory reporting, as it details how domains, dimensions, and domain members will be restructured into categories, properties, items, and subcategories ahead of the v4.0 reporting framework release.

FMA Approves Merger of Merkur Lebensversicherung into Merkur Versicherung

The Austrian Financial Market Authority has approved the merger of Merkur Lebensversicherung Aktiengesellschaft into Merkur Versicherung Aktiengesellschaft under section 29(1) of the VAG 2016. Compliance teams at counterparties, intermediaries, and policyholders of either entity should update internal records to reflect the consolidated legal entity and confirm continuity of regulatory obligations.

SFC to Strengthen Listing Rules With New Conditions and Appeal Mechanism

The SFC will proceed with amendments to the Securities and Futures (Stock Market Listing) Rules (SMLR), introducing new tools to impose conditions on listing applicants and issuers as an alternative to trading suspension, alongside a new independent appeals mechanism. Compliance teams at listed issuers, sponsors, and advisors should prepare for these changes, expected to take effect in Q1 2027, as they will alter how the SFC addresses IPO-related and post-listing misconduct.