Compliance News
Welcome to our Compliance News Blog section, where we delve into the depths of Governance, Risk, and Compliance (GRC), digitalization, and other important topics to provide you with invaluable insights and expert knowledge. Our carefully curated collection of articles & blog posts offers a comprehensive exploration of meaningful topics, serving as your compass in navigating the ever-changing landscape of GRC.
15 September 2026 | 6 min
FINMA on Outsourcing: Why Externalisation Reduces Effort, but Not Responsibility
At the Small Banks Symposium on 7 September 2026, FINMA made an important point clear: proportionality does not mean that material risks can be taken less seriously. Especially when it comes to cyber risks, outsourcing, cloud providers and artificial intelligence, responsibility remains with the supervised institution. Smaller banks can benefit significantly from sourcing technology orContinue reading "FINMA on Outsourcing: Why Externalisation Reduces Effort, but Not Responsibility"
Germany Launches AI Safety Institute
Germany has launched AISI Germany, its own AI safety institute. The new institute is intended to examine the risks and safety questions of advanced AI models and strengthen Germany’s resilience against AI-related threats. In the first phase, the BSI and the Federal Network Agency will play a central role, with the BSI contributing in particular<a href="https://zazoon.com/germany-launches-ai-safety-institute/">Continue reading <span class="sr-only">"Germany Launches AI Safety Institute"</span></a>
EU Retail Investment Strategy: Why “Value for Money” Is Becoming the New GRC Benchmark in Financial Distribution
The EU Retail Investment Strategy aims to strengthen the European market for retail investments while improving investor protection. At the centre of the reform is a concept that will become highly relevant for banks, insurers, asset managers, wealth managers and financial distributors: “Value for Money”. The message is clear: in future, financial institutions will not<a href="https://zazoon.com/eu-retail-investment-strategy-why-value-for-money-is-becoming-the-new-grc-benchmark-in-financial-distribution/">Continue reading <span class="sr-only">"EU Retail Investment Strategy: Why “Value for Money” Is Becoming the New GRC Benchmark in Financial Distribution"</span></a>
CO2 Certificates Under Pressure: Why Climate Projects Are Now a GRC Topic
Handelsblatt is currently reporting that the German Environment Agency has declared CO2 certificates from 30 Chinese projects invalid. According to the report, the projects either overstated their climate impact or did not exist at all. One of the affected projects was reportedly financed by a Belgian subsidiary of ExxonMobil and promised savings of almost 96,000<a href="https://zazoon.com/co2-certificates-under-pressure-why-climate-projects-are-now-a-grc-topic/">Continue reading <span class="sr-only">"CO2 Certificates Under Pressure: Why Climate Projects Are Now a GRC Topic"</span></a>
BaFin Takes Over AI Market Surveillance: Why AI Governance in the Financial Sector Must Become Audit-Ready
BaFin has received new responsibilities for the supervision of artificial intelligence in the German financial sector. Since 29 July 2026, it has acted as market surveillance authority for AI systems that are directly connected to regulated financial activities. This includes, among others, banks, insurers and other financial institutions under BaFin supervision. For financial institutions, this<a href="https://zazoon.com/bafin-takes-over-ai-market-surveillance-why-ai-governance-in-the-financial-sector-must-become-audit-ready/">Continue reading <span class="sr-only">"BaFin Takes Over AI Market Surveillance: Why AI Governance in the Financial Sector Must Become Audit-Ready"</span></a>
EU Packaging Regulation PPWR: Why PFAS Restrictions Are Now a GRC Topic
Since 12 August 2026, the new EU Packaging and Packaging Waste Regulation, known as the PPWR, has generally applied across the European Union. Its first immediately visible requirement is highly concrete: food-contact packaging may no longer be placed on the EU market if it reaches or exceeds certain PFAS concentration limits. For many companies, packaging<a href="https://zazoon.com/eu-packaging-regulation-ppwr-why-pfas-restrictions-are-now-a-grc-topic/">Continue reading <span class="sr-only">"EU Packaging Regulation PPWR: Why PFAS Restrictions Are Now a GRC Topic"</span></a>
security.txt: Why Vulnerability Reports Are Now a GRC Topic
On 6 August 2026, the BSI reported that only 1.8 percent of website operators in Germany currently provide a security.txt file. The finding is based on measurements conducted as part of the BSI Cyberdome project. security.txt, defined in RFC 9116, is intended to give security researchers, CERTs and other reporters a clearly discoverable way to<a href="https://zazoon.com/security-txt-why-vulnerability-reports-are-now-a-grc-topic/">Continue reading <span class="sr-only">"security.txt: Why Vulnerability Reports Are Now a GRC Topic"</span></a>No articles found with the word:
Try your search again using these tips:
- Please ensure that you have typed the search term correctly.
- Use more general terms to broaden your search.
- Explore our categories to discover similar articles.