News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Regulatory Obligations ManagementRegulatory Changes and Their Impact On December 16, the EU Parliament approved amendments to the Corporate ESG Reporting Directive (CSRD) and the Corporate Sustainability Due Diligence Directive (CSDD
Regulatory Obligations ManagementThe Question at Hand When New York s LLC Transparency Act took effect on January 1, 2026, it came with a significant limitation: it applies only to non-US LLCs authorized to do business in the state.
Privacy & Data ProtectionThe Spanish Data Protection Authority s January 2026 notice and the European Commission s draft Code of Practice on AI transparency mark a regulatory shift. If your organization views these as distant
Regulatory Obligations ManagementScope of the Guide This guide covers the Financial Services and Markets Act 2000 (Cryptoassets) Regulations 2026, establishing the UK s first comprehensive regulatory framework for digital assets. If
Get weekly security insights and compliance updates delivered to your inbox.
Regulatory Obligations ManagementWhy This Matters Now If your team manages compliance for a multinational with operations in South Korea, you re familiar with the document-heavy nature of Korean tax audits. Previously, legal communic
Regulatory Obligations ManagementWhen the Securities Commission Malaysia clarified digital asset broking requirements on January 30, 2026, compliance officers at Capital Markets Services Licence holders faced a familiar problem: regu
Regulatory Obligations ManagementWhen two managed investment schemes collapsed in Australia, the investigations revealed a familiar pattern: governance frameworks that seemed adequate on paper but failed in practice. The Australian T
Regulatory Obligations ManagementThe FCA s Mills Review, released in January, has prompted internal audit teams to quickly assess its implications. With feedback due by 24 February, many are questioning how to engage with the review
Regulatory Obligations ManagementThe Conventional Wisdom Your compliance team managing OTC derivatives might be celebrating the European Supervisory Authorities proposed amendments to bilateral margin requirements. The logic seems st
Third-Party Risk ManagementThe European Supervisory Authorities (EBA, EIOPA, and ESMA) have issued a joint statement highlighting the cyber risks associated with frontier AI models. They urge financial entities to enhance gover
Regulatory Obligations ManagementThe Question at Hand Your compliance team is evaluating a transaction monitoring platform. The vendor demo looks polished, the features meet your requirements, and the price is reasonable. But here s
Privacy & Data ProtectionThe Challenge On January 1, 2026, the Indiana Consumer Data Protection Act (CDPA) took effect, giving enforcement authority to the Indiana Attorney General s Office. For a mid-sized Midwest retailer o
Ethics & ConductSpain s Draft Organic Law on Public Integrity introduces a mandatory compliance checkpoint for companies pursuing public sector contracts. You ll need to demonstrate an appropriate organization and ma
Regulatory Obligations ManagementThe SEC and CFTC s proposal to amend Form PF filing requirements marks a major shift in private fund reporting since Dodd-Frank mandated these disclosures in 2010. If finalized, these changes will rem
Privacy & Data ProtectionQuestions about GDPR compliance frequently arise in compliance channels, vendor discussions, and audit preparations. Even six years after GDPR s implementation, teams still grapple with key issues: wh
Regulatory Obligations ManagementSouth Africa s Draft National AI Policy, currently moving through Cabinet approval before the March 2026 public consultation, adopts a distributed approach to AI governance. Instead of establishing a
Regulatory Obligations ManagementThe Securities and Exchange Commission (SEC) has filed a rule with the Office of Information and Regulatory Affairs titled Rescission of Policy Regarding Denials in Settlements of Enforcement Actions.
Regulatory Obligations ManagementThe European Securities and Markets Authority (ESMA) recently highlighted €1 billion in potential annual savings through simplified transaction reporting, sparking renewed interest in reporting reform
Regulatory Obligations ManagementThe European Commission s digital package promises a single-entry point for cybersecurity incident reporting across GDPR , NIS2 , DORA , and other regulations. On paper, this sounds like the administr
Third-Party Risk ManagementThe Conduent breach exposed sensitive information of about 25 million individuals and cost the vendor roughly $25 million in response expenses. More importantly for your program, every organization re
