Compliance & Ethics

The Norway Financial Supervisory Authority (Finanstilsynet) has listed a warning about "3cGroup," originally issued by Luxembourg's CSSF concerning the website www.3cgroup.se. The notice signals a suspected unauthorized or fraudulent financial services operation that may target investors across European markets. Compliance teams should treat this as a cross-border red flag for screening and customer protection purposes.

Norway's Financial Supervisory Authority (Finanstilsynet) has published a warning about Eoscoinvest, citing a UK Financial Conduct Authority (FCA) notice that the entity operates as a clone of an FCA-registered firm. Compliance teams should treat Eoscoinvest and its associated websites as high-risk for investment fraud and update screening and customer protection controls accordingly.

Finanstilsynet (Norway FSA) has issued a warning about "Swift TradeX," referencing a prior warning from the UK Financial Conduct Authority (FCA). The notice signals a cross-border investor protection concern and a likely unauthorized or fraudulent investment offering. Compliance teams should treat the name as a high-risk counterparty indicator and update screening controls accordingly.

The Spanish Data Protection Agency's legal office (Gabinete Jurídico) reviewed a draft protocol governing student and resident access to patient information and identified three data protection concerns. These were the unclear legal basis for patient refusal of student presence, overly vague limits on clinical record access, and missing file-creation requirements for a student register. Although the report applies the now-superseded LOPD (Organic Law 15/1999), it shows how regulators assess health data access, consent, and governance, which remains relevant for organizations handling sensitive data.

The Norway Financial Supervisory Authority (Finanstilsynet) has issued a warning about "Nexdiltd," described as a clone of an FCA-registered firm, and has referenced the related UK Financial Conduct Authority (FCA) warning. Compliance teams should treat this as a fraud and impersonation alert and screen customers, counterparties, and payment flows for links to the entity.

The Spanish Data Protection Agency (AEPD) concluded in a 2016 legal opinion that a city council cannot authorize a fishermen's society to install video surveillance cameras in public-domain lagoons. Capturing images in public places is reserved to the Security Forces and Corps under Organic Law 4/1997, with authorization granted by the Government Delegate. Compliance teams should note the strict limits on private video surveillance of public spaces and the broad treatment of images, voice, and license plates as personal data.

The Hong Kong SFC has issued a circular requiring management companies of SFC-authorized public funds with direct or indirect private credit or private equity exposure to adopt enhanced offering document disclosures. Funds with 50% or more of NAV in private market assets will be classified as complex products, and the SFC may also designate funds below that level. Compliance teams should begin reviewing existing funds now, as the SFC expects updates as soon as practicable.