The Irish Data Protection Commission announced a penalty of €345 million (U.S. $368 million) against popular social media company TikTok over alleged violations of the General Data Protection Regulation during a five-month period in 2020.
Europe
Fallout from ‘debanking’ scandal suggests more U.K. bank reforms coming
The former CEO of NatWest’s decision to leak client details to the press regarding Nigel Farage is likely to cost the financial industry millions in new compliance checks as U.K. regulators prepare reviews into how banks treat people with extreme political views.
Greek shipper fined $2.5M in Iranian oil smuggling case
Empire Navigation pleaded guilty to violating the International Emergency Economic Powers Act by carrying nearly 1 million barrels of Iranian oil from the sanctioned Islamic Revolutionary Guard Corps to another country.
Five ways to build a top ethics and compliance team
Luciane Mallmann, head of ethics and compliance for U.K. and Ireland at real estate services company JLL, shares how embedding ethics and compliance into culture, strategy, and operations can add value to a business and its people.
Paying ransom to avoid GDPR fine an unwise gambit
Companies that think paying reduced ransomware demands would be a better move than informing regulators of a data breach and facing enforcement are playing with fire, according to experts.
Switzerland floats AML reforms for beneficial ownership, legal advice
The Swiss government launched consultation proceedings on a series of reforms designed to combat money laundering and terrorist financing occurring within the country’s financial system.
FCA to review treatment of U.K.-based PEPs
The Financial Conduct Authority announced the scope of its review into the treatment of U.K.-based politically exposed persons, the latest development in response to the Nigel Farage “debanking” scandal.
Large companies in crosshairs early under German Supply Chain Act
Amazon, IKEA, and Volkswagen were among the companies targeted in the first round of complaints under the German Supply Chain Due Diligence Act—an early indication nongovernmental organizations will seek to hold big businesses accountable for alleged human rights violations.
Swedish DPA fines Trygg-Hansa $3.2M for GDPR breaches
Sweden’s data protection authority issued a penalty of 35 million Swedish krona (U.S. $3.2 million) against insurance company Trygg-Hansa for alleged security flaws that made customer insurance information accessible on the internet.
Wise Payments cited for Russia sanctions breaches in landmark OFSI action
U.K.-based foreign exchange service Wise Payments was cited for breaching the country’s sanctions levied against Russia as part of the Office of Financial Sanctions Implementation’s first use of its disclosure enforcement powers acquired last year.


