Article 32 hearing

The EBA is collecting bank data on interest rate risk in the banking book

Retrieved on: 
Monday, August 7, 2023

07 August 2023

Key Points: 
  • 07 August 2023
    The European Banking Authority (EBA) today published its Decision to run an ad-hoc data collection of institutions’ IRRBB data.
  • This data collection will provide competent authorities and the EBA with timely and necessary data and tools to monitor risks arising from interest rate changes and the implementation of the IRRBB scrutiny plan.
  • Competent authorities will need to submit institutions’ data to the EBA by March 2024.
  • The technical package supporting the collection of this IRRBB ad-hoc collection will be made available to the public on EBA website by mid-October 2023, as part of reporting framework 3.3.

The EBA is collecting institutions' data on environmental, social and governance risks to set up a monitoring system

Retrieved on: 
Friday, July 21, 2023

18 July 2023

Key Points: 
  • 18 July 2023
    The European Banking Authority (EBA) published today the Decision on an ad hoc data collection of institutions’ ESG data.
  • Article 18a of the Implementing Regulation (EU) 2021/637 provides for specific uniform disclosure formats and associated instructions for those disclosures.
  • Competent Authorities will need to submit institutions’ data to the EBA by June 2024.
  • The first semi-annual reference date is 30 June 2024 and data will have to be submitted by 31 December 2024.

The EBA is collecting institution’s data on environmental, social and governance risks to set up a monitoring system

Retrieved on: 
Wednesday, July 19, 2023

18 July 2023

Key Points: 
  • 18 July 2023
    The European Banking Authority (EBA) published today the Decision on an ad hoc data collection of institutions’ ESG data.
  • Article 18a of the Implementing Regulation (EU) 2021/637 provides for specific uniform disclosure formats and associated instructions for those disclosures.
  • Competent Authorities will need to submit institutions’ data to the EBA by June 2024.
  • The first semi-annual reference date is 30 June 2024 and data will have to be submitted by 31 December 2024.

New FPF Report: Unlocking Data Protection by Design and by Default: Lessons from the Enforcement of Article 25 GDPR

Retrieved on: 
Wednesday, May 17, 2023

New FPF Report: Unlocking Data Protection by Design and by Default: Lessons from the Enforcement of Article 25 GDPR

Key Points: 
  • New FPF Report: Unlocking Data Protection by Design and by Default: Lessons from the Enforcement of Article 25 GDPR
    On May 17, the Future of Privacy Forum launched a new report on enforcement of the EU’s GDPR Data Protection by Design and by Default (DPbD&bD) obligations, which are outlined in GDPR Article 25.
  • The Report aims to explore the effectiveness of the DPbD&bD obligations in practice, informed by how DPAs and courts enforced Article 25.
  • We also look at what controls and controller behavior are and are not deemed sufficient to comply with Article 25.
  • Our analysis determines that European DPAs diverge in how they interpret the preventive nature of Article 25 GDPR.

Gain Capital UK Limited

Retrieved on: 
Monday, April 17, 2023

Status: Complete

Key Points: 
  • Status: Complete
    Gain Capital UK have been issued a Reprimand in respect of Articles 32 (2) and 32 (1) (b).
  • An unauthorised third party leveraged an unpatched software vulnerability to access Gain Capital’s systems and exfiltrate personal data relating to 72,361 UK Data Subjects.
  • Gain Capital had a support contract in place with a third party whom they believed were responsible for notifying Gain Capital about software security updates, however the contract stipulated that upgrades were Gain Capital’s responsibility.

Global Penetration Testing Software Markets, 2021-2022 & 2028: Emergence of Ai and ML Enabled Deployment Models & Increasing Trends of PTaaS and Remote Working Security - ResearchAndMarkets.com

Retrieved on: 
Friday, May 13, 2022

Compliance is one of the most critical issues that an organization must address, as any failures can have far-reaching consequences.

Key Points: 
  • Compliance is one of the most critical issues that an organization must address, as any failures can have far-reaching consequences.
  • Penetration testing is also required annually or after any significant modifications to infrastructure, according to PCI DSS 3.2 Requirement 11.
  • As a result, strict rules requiring regular penetration testing boost the demand for penetration testing software market.
  • In terms of the impact of COVID-19 pandemic on the penetration testing software market throughout the key verticals, North America had the biggest market share.

US Veteran Recounts His Personal Story of Sexual Assault and Wants to Help Others in Need

Retrieved on: 
Saturday, October 16, 2021

Mujahid's work is based on his experiences with rape and intimidation while serving in the U.S. Army in 1978.

Key Points: 
  • Mujahid's work is based on his experiences with rape and intimidation while serving in the U.S. Army in 1978.
  • Although not for the faint of heart, Mujahid's work is both a necessary and important analysis of the crimes that can occur within the U.S. military.
  • While Mujahid's story is wholly his, The Arrrrticle of XXXII is also a powerful commentary about male sexual assault and the social pressures that men face while reporting rape.
  • He hopes to inspire others by sharing his story and raising awareness about how sexual assault is treated in the armed forces.