Compliance & Ethics

The Norway Financial Supervisory Authority has published a warning that references a Central Bank of Ireland notice on "Carrowmore Financial Services (CLONE)," an unauthorized firm that appears to be impersonating a legitimate entity. Compliance teams should treat the name as a fraud and impersonation red flag and update screening and customer-warning controls. The source material is brief, so teams should consult the original Irish notice for specifics.

The BfDI has issued recommendations, based on a survey of 1,500 insured persons, urging the German Federal Government to strengthen transparency and granular user controls in the electronic patient file (ePA). From the end of October 2026, pseudonymized medication list data can be extracted for research unless insured persons object. Compliance teams at organizations handling German health data should treat this as a signal of regulatory expectations on consent, control, and transparency.

The Norway Financial Supervisory Authority (Finanstilsynet) has published a warning about the website autorite-des-marches-financiers.com, which appears to impersonate France's financial markets regulator, the AMF. The notice relays the AMF's own blacklist entry for the domain. Compliance teams should treat this as a regulator-impersonation fraud indicator and update their screening and customer protection controls.

Japan's Financial Services Agency will not pursue administrative or criminal liability for reports and notifications with legal deadlines that are filed by November 27, 2026, if the earthquake prevented timely submission. The relief also covers reports with no statutory deadline and allows case-by-case extensions for affected institutions headquartered in Kumamoto Prefecture. Compliance teams should confirm eligibility and document the earthquake's impact on filing capacity.

The UK Financial Reporting Council has opened three investigations tied to State Oil Limited (part of the Prax Group): one into an individual accountant's conduct on financing arrangements, and two into statutory audits by KPMG LLP and PKF Littlejohn LLP. The opening of an investigation does not imply any finding of breach or misconduct, but it signals continued FRC scrutiny of audit quality and of professional conduct around financing arrangements. Compliance teams should note the read-across for audit oversight, lender and borrower reporting, and finance function governance.

The source text contradicts itself on the direction of the rate move. It says "cut" in one place and "raise" in another, while the stated new rates (deposit facility 2.50%, main refinancing operations 2.65%, marginal lending facility 2.90%, effective September 16, 2026) and the inflation outlook point to an increase. Compliance teams should verify the direction against the official ECB release before acting, because rate-sensitive products, models, and disclosures depend on it.

Twice in the autumn of 2020, a distributor supplying networking equipment to Extreme Networks was asked for the website of its Russian customer. Twice, the distributor provided the website of a company that manufactured missiles for Russia's air defense systems. The purchase orders named someone else.