Think about how we make decisions in everyday life. We sometimes take shortcuts because they save us time or make things easier. We might leave our front door unlocked because we're only stepping out for a minute, or share our house keys with someone because it's convenient. Most of the time, nothing happens. But that doesn't necessarily mean the decision was safe. The same applies to cybersecurity.
EIOPA's Eurofi article argues that private credit, Asset Intensive Reinsurance (AIR), and ICT third-party dependencies should be assessed together, because their capacity to interact and amplify one another is what creates systemic risk. The article is not a binding rule, but it signals supervisory priorities. Compliance teams should expect closer scrutiny of AIR, illiquid asset exposures, and DORA implementation.
The European Commission has preliminarily found that TikTok breached the European Union's Digital Services Act by failing to adequately assess and address the risks posed by its recommendation algorithm, which regulators say can repeatedly expose users to content involving mental health struggles, eating disorders and body image.
Daekyo had been warned. In August 2024, after hackers exploited vulnerabilities in websites operated by its affiliates, the South Korean education provider received a report of suspicious activity from its security monitoring contractor. The company failed to investigate adequately or close the weaknesses that had allowed the intrusion. Six months later, attackers exploited the same vulnerabilities again.
The Dutch Data Protection Authority (AP) reviewed the Dutch Healthcare Authority's draft Mental Health Care and Forensic Care Regulations (NR/REG-2705a) and issued no comments. The clean review suggests the draft's personal data processing provisions meet the AP's GDPR and proportionality framework. It also shows compliance teams how the AP tests health-related data processing in legislative proposals.
The Companies Auditors Disciplinary Board (CADB) suspended former PKF Brisbane Audit partner Cameron Bradley until 30 June 2028, effective 15 September 2026. It also reprimanded him and ordered undertakings and costs. The decision found fundamental failures in the audits of three managed investment schemes and reinforces ASIC's focus on audit quality, valuation practices, and auditor misconduct, particularly in private markets.
The SEC upgraded EDGAR to Release 26.3 on September 14, 2026, adding support for the 2026q3 Fund (FND) taxonomy and ending acceptance of all 2024 taxonomy versions, including quarterly releases. Filers still using 2024 taxonomies in their XBRL submissions risk filing rejections, so compliance and reporting teams should confirm their filing tools and templates are updated.
Access Login