News, analysis, and guidance across GRC, risk, audit, and regulatory compliance.
Disclosure & Financial ReportingThe European Single Access Point (ESAP) starts collecting data this month. If you re a compliance officer at an EU-listed company, an issuer with prospectuses filed in multiple member states, or a fir
Privacy & Data ProtectionThe EU Data Act takes effect in September 2025. If you re running connected products or cloud services with EU users, you re in scope, regardless of where you re headquartered. This isn t just another
Disclosure & Financial ReportingWhat Happened HSBC and Deutsche Bank s asset management arm, DWS Group , are facing allegations of greenwashing. The issue isn t that their marketing teams lied, but rather that their sustainability c
Ethics & ConductThe EU s anti-corruption directive took effect on May 31, and most compliance teams are getting it wrong. Not because they re ignoring it, they re just repeating the same implementation errors that pl
Get weekly security insights and compliance updates delivered to your inbox.
Privacy & Data ProtectionScope This guide addresses the compliance and risk management challenges created when regulatory enforcement actions conclude with undisclosed settlement terms. It s for privacy officers, compliance t
Regulatory Obligations ManagementEnforcement agencies often issue press releases that announce resolutions without detailing the underlying conduct. For your internal audit team, what s missing from these announcements is as importan
Regulatory Obligations ManagementThe SEC has sent a revised custody rule to the Office of Information and Regulatory Affairs for review. This aims to modernize how investment advisers handle client assets, including crypto. This is a
