Regulatory news and audio briefings from financial regulators worldwide — financial crime, AML, sanctions, fraud, digital assets and compliance

DOJ opens Second Amendment probe into firearm permitting in two Connecticut cities

The Justice Department has opened a civil rights investigation into firearm permitting practices in Middletown and Waterbury, Connecticut, citing possible unreasonable delays in processing concealed carry permits. The inquiry invokes the Supreme Court's Bruen decision and signals continued federal scrutiny of local permitting systems under the Second Amendment.

• The Justice Department opened an investigation on October 22, 2026 into the Middletown and Waterbury, Connecticut police departments' firearm permitting systems.
• The investigation will examine whether the departments unnecessarily delay issuance of concealed carry permits to residents.
• The announcement cites the Supreme Court's 2022 ruling in New York State Rifle and Pistol Association v. Bruen regarding lengthy wait times in license processing.
• The Civil Rights Division's Second Amendment Section is handling the inquiry and accepts complaints via an online portal at justice.gov/crt/second-amendment-section.
• Assistant Attorney General Harmeet K. Dhillon of the Civil Rights Division issued a statement on the investigation's announcement.

Commission accepts Temu's action plan over DSA illegal-goods breach

The European Commission has signed off on Temu's remedial plan for breaching the Digital Services Act's risk assessment obligations. This briefing sets out the five measures Temu must implement, the interim assessment deadline, and the enforcement history behind the fine, for compliance teams tracking DSA very large online platform supervision.

• Temu's action plan contains five measures to remedy its breach of the DSA's risk assessment obligations.
• The breach was established in a non-compliance decision issued by the Commission in May 2026, carrying a €200 million fine.
• Temu must conduct an interim risk assessment covering a six-month period, to be completed within four months, running until 30 November 2026.
• The plan requires Temu to analyse whether its recommender systems amplify the spread of illegal goods.
• Temu must also examine intentional manipulation by sellers exploiting platform features to spread potentially illegal listings.

FMA holds 17th supervisory conference as Ettl departs for IMF post

The FMA's annual supervisory conference brought together European regulators, central bankers and industry leaders in Vienna to discuss banking union completion, market fragmentation and digital transformation. The event also marks the final appearance of long-serving Executive Director Helmut Ettl before he departs for the IMF, with Oliver Schütz named as his successor.

• The conference convened around 700 participants at the Vienna Congress and Convention Center on 6 October 2026.
• Keynote speakers included State Secretary Barbara Eibinger-Miedl, EBA Chairperson François-Louis Michaud and OeNB Governor Martin Kocher.
• Helmut Ettl will stand down as FMA Executive Director after over 18 years to become an IMF Executive Director in Washington DC on 1 November 2026.
• Oliver Schütz, currently FMA Managing Director for Banking Resolution, has been appointed to succeed Ettl.
• Discussion topics included completion of the Banking Union, the Savings and Investments Union, and the impact of AI on the financial sector.

ECB's Lane says rising long-term yields will weigh on rate decisions

An interview with ECB Executive Board member Philip Lane covers how the central bank is weighing the Middle East energy shock, rising global long-term yields and AI-driven investment against its 2% inflation target. For compliance and treasury teams tracking euro area rate signals, it offers direct commentary on what factors are shaping upcoming decisions.

• Lane says the ECB has not yet seen very strong second-round effects from higher energy prices following the Middle East conflict.
• He identifies AI-driven investment in the United States, financed by long-term debt issuance, as a key factor behind rising global long-term yields.
• Lane notes the Next Generation EU programme ends this year, meaning fiscal support available in 2026 will differ in 2027 and 2028.
• He states Italy recorded an inflation reading of 4.1 per cent, cited by the interviewer as a trigger for debate over EU budget flexibility.
• September ECB projections show Italian wages running ahead of inflation in 2027 and 2028, per Lane.

DOJ settles RLUIPA zoning claim against Atlantic Beach, New York

A village zoning code required religious and educational assemblies, but not secular ones, to obtain discretionary permits. This briefing covers the DOJ settlement that followed and the specific obligations it imposes on the Village of Atlantic Beach, relevant to any institution handling land-use disputes involving religious applicants.

• The settlement resolves claims that Atlantic Beach's zoning ordinance violated RLUIPA's equal terms provision by requiring religious and educational assemblies, but not secular ones, to obtain a special exception permit from the Board of Appeals.
• The Village agreed to revise its zoning ordinance to permit religious uses as of right in the Residential (A) district, removing the special exception requirement.
• The settlement requires the Village to train its officials and employees on RLUIPA's requirements.
• The Village must establish a procedure for receiving and resolving RLUIPA complaints.
• The settlement follows resolution of a private lawsuit brought by Chabad of the Beaches, an Orthodox Jewish organization, over denial of its application to use a vacant commercial property for a religious facility.

SEC notices co-investment exemption for Neostellar and Magnetar fund vehicles

A routine but consequential exemptive application: Neostellar Capital Corp, Magnetar Financial LLC and affiliated vehicles are asking the SEC to permit joint co-investment transactions normally barred under the Investment Company Act's affiliated-transaction rules. The notice sets a hearing-request deadline, giving interested parties a narrow window to object before the order issues.

• Applicants seek an order under sections 17(d) and 57(i) of the Investment Company Act of 1940 and rule 17d-1 to permit co-investment among BDCs, closed-end and open-end funds and affiliated entities.
• The application was originally filed on August 3, 2026 and amended on October 2, 2026.
• Hearing requests must be received by the Commission by 5:30 p.m. Eastern time on November 16, 2026, accompanied by proof of service on applicants.
• Absent a Commission-ordered hearing, an order granting the requested relief will be issued.
• Applicants include Neostellar Capital Corp, Neostellar Advisors LLC, Magnetar Financial LLC, Magnetar Financial (UK) LLP, MCP Investing LLC and vehicles identified in Schedule A and Schedule B.

Utah man indicted over alleged synagogue bomb plot, CSAM found

This briefing covers a federal indictment out of Utah charging a 22-year-old man with attempting a hate crime and explosives offenses after online threats against a synagogue led investigators to recover pipe bombs, rifles and alleged child sexual abuse material. Compliance and government affairs teams tracking DOJ Civil Rights Division enforcement priorities will want the charge detail and procedural timeline.

• A federal grand jury in Salt Lake City indicted Skyler AJ Rose, 22, of Ogden, Utah, on Oct. 21 on multiple federal charges.
• Charges include possession of an unregistered destructive device, threat to kill and injure persons and destroy a building with an explosive, and attempting to commit a hate crime.
• Law enforcement recovered six improvised explosive pipe bombs, one inert device, explosive precursors, two rifles and ammunition during a search of Rose's residence.
• A subsequent search of Rose's cellphone allegedly revealed he searched for a nearby synagogue in November 2025 and that the phone contained cached images depicting child sexual abuse material.
• Rose's initial appearance was scheduled for Oct. 23 at the Orrin G. Hatch U.S. Courthouse in Salt Lake City.

CMA to review £401.2m Defra subsidy for Canal & River Trust

The CMA's Subsidy Advice Unit has opened a referral into a proposed £401.2 million Defra subsidy to the Canal & River Trust, covering 2027 to 2037. This briefing covers the administrative timetable, the subsidy's structure and policy objectives, and how interested parties can make submissions.

• The proposed subsidy totals £401.2 million, paid to the CRT over the period 2027 to 2037.
• The initial grant in 2027 to 2028 is £49.99 million, tapering downwards by 5% each subsequent year to £31.51 million in nominal terms by 2036 to 2037.
• Third-party submissions on the Assessment of Compliance are due by 19 October 2026.
• The SAU's report to Defra is due for publication on 16 November 2026, within a 30 working day reporting period that began on 6 October 2026.
• The CRT manages around 2,000 miles of inland waterways across England and Wales and employs around 1,600 people.

DOJ finds Ohio State medical school discriminated against white and Asian applicants

The Justice Department's Civil Rights Division has issued investigative findings against Ohio State University College of Medicine, alleging race discrimination in admissions to its 2023, 2024 and 2025 classes. The findings cite Title VI and the Supreme Court's SFFA decision, and set out the enforcement path: settlement negotiations first, litigation if those fail. Federally funded institutions should read this as the template.

• DOJ found OSU Med discriminated against white and Asian applicants for its 2023, 2024 and 2025 incoming classes in violation of Title VI and SFFA.
• Black applicants who were screened and interviewed were about 2.8 times as likely to be admitted as Asian applicants with equal credentials.
• A 'side door' pathway admitted some applicants without a screener score or interview; in 2024 and 2025 combined, black applicants were four times as likely to be admitted as white applicants, and no Asian applicants were admitted.
• The Department will pursue settlement negotiations where it finds a violation and will file suit if those efforts fail.

NCUA proposes dropping hard-copy mandate for share insurance notices

A proposed rule would rewrite 12 CFR 745.13, the NCUA regulation requiring federally insured credit unions to notify members about share insurance coverage. The change removes the prescribed hard-copy methods in favor of letting each credit union choose its own notification approach. Comments close December 21, 2026.

• The proposed rule would revise 12 CFR 745.13 to require only that each FICU 'provide notice to its members concerning NCUA insurance coverage,' removing the mandate to stock hard copies.
• NCUA intends to discontinue the 64-page 'Your Insured Funds' brochure and update its share insurance coverage website as the authoritative resource.
• Comments on docket NCUA-2026-1888 must be received by December 21, 2026, via regulations.gov, mail, or hand delivery to the Secretary of the Board.
• OIRA determined the proposal is not a 'significant regulatory action' under Executive Order 12866 and expects it to qualify as a deregulatory action under Executive Order 14192.
• NCUA certifies the rule will not have a significant economic impact on a substantial number of small credit unions, defined as those under $100 million in assets.

A clearing house with no members and a ban broken on a livestream

The lighter side this week is a comedy of timing rather than misconduct. A clearing house writes default rules before it has a single member, a banned pharmaceutical executive is accused of broadcasting the very trading he is forbidden to do, and a federal department finalises a paperwork estimate its own commenters say does not add up. None is a scandal; each misses its own target.

• CME Securities Clearing filed SR-CMESC-2026-011 to codify default-management procedures while stating it currently has no Members or Users and has received no comments, with the comment window closing 12 November 2026.
• The FTC and seven states moved on 13 October 2026 to hold Martin Shkreli in civil contempt of his 2022 lifetime pharmaceutical ban, citing his livestreamed claim that he was teaching viewers how to trade and invest in biotech.
• The FTC alleges Shkreli has traded in pharmaceutical stocks of at least 60 companies since his May 2022 release and seeks a fine equal to trading profits plus prejudgment interest with no offset for losses, on a Commission vote of 1-0.
• The State Department finalised a 600,000-hour recordkeeping collection and declined to withdraw it after the Council for Global Equality flagged a 52,500-hour gap and an $85 million cost-assumption discrepancy, with comments due 25 November 2026.

FSB Sub-Saharan Africa group meets in Maseru on AI, climate and vulnerabilities

A readout from the FSB's Regional Consultative Group for Sub-Saharan Africa, covering its 23-24 October 2026 meeting in Maseru. Useful for compliance and government affairs teams tracking which financial stability themes regional regulators are feeding into the FSB's global agenda.

• The meeting took place on 23-24 October 2026 in Maseru, Lesotho, hosted by the Central Bank of Lesotho.
• The group is co-chaired by Lesetja Kganyago, Governor of the South African Reserve Bank, and Denny Kalyalya, Governor of the Bank of Zambia.
• Agenda items included climate-related data gaps, insurance protection gaps, and the cybersecurity and financial stability implications of AI and quantum computing.
• Members discussed the applicability of the FSB's proposed principles on regulatory and supervisory modernisation to the Sub-Saharan African context.
• Members agreed on regional priorities and key messages to put to the FSB Plenary ahead of the FSB's 2027 work programme.

State Department finalizes 600,000-hour recordkeeping rule for aid recipients, pushes back on NGO group's cost objections

The State Department has submitted a new information collection, tied to its Protecting Human Flourishing in Foreign Assistance policy, for 30-day public comment before OMB approval. Two advocacy groups challenged the burden estimates and scope during the earlier 60-day comment period; this notice contains the Department's point-by-point response and final position on each objection.

• Comments on the proposed collection are due by November 25, 2026, under a 30-day notice following an earlier 60-day notice published April 6, 2026.
• The collection applies to an estimated 2,500 respondents, each facing an average 240-hour burden, for a total estimated 600,000 hours.
• The Council for Global Equality cited a 52,500-hour gap between the final rules' 652,500-hour estimate and the Notice's 600,000-hour figure, plus a cost assumption gap of $175/hour versus $50/hour.
• The Department confirmed that the physical and financial separation requirement applies only to U.S. NGOs, and only when they engage in otherwise prohibited activities funded from another source.
• Record retention will follow 2 CFR 200.334, generally three years from the date of the final expenditure report, subject to applicable exceptions.

Treasury seeks comment on garnishment-notice paperwork burden estimate

A routine Paperwork Reduction Act notice covering the disclosure financial institutions must give account holders when a garnishment order reaches an account receiving federal benefit payments. It extends an existing OMB control number rather than changing the underlying rule. Relevant to institutions that process garnishment orders against accounts with direct-deposited federal benefits.

• Written comments on the information collection must be received by Treasury on or before December 28, 2026.
• The collection governs notices required under 31 CFR 212.6 when a garnishment order affects an account with directly deposited federal benefit payments.
• Treasury estimates 487,750 respondents and 487,750 total annual responses, occurring on occasion upon qualifying garnishment events.
• Estimated time per response is 10 minutes per account-holder notice and 5 minutes per child support notice, totalling an estimated 76,688 annual burden hours.
• The 2023 supporting statement reports no program changes but describes a revised burden-estimation methodology.

FBI and USPIS probe suspicious powder letters sent to election officials, media

A joint FBI and US Postal Inspection Service advisory flags a wave of letters containing suspicious substances sent to election offices, Secretaries of State, media organisations and polling companies. The notice sets out immediate handling steps for mailrooms and reporting channels, relevant to any organisation in these sectors reviewing its physical mail intake procedures.

• The FBI and USPIS are investigating multiple letters containing suspicious substances mailed to election offices, Secretaries of State, media organisations and polling companies.
• No hazardous material has been identified to date, though laboratory testing remains ongoing and all substances should be treated as hazardous.
• Mail handlers at election-related locations should use PPE such as a smock or apron, mask, and nitrile gloves.
• If an unknown substance is found, personnel should call 911, avoid disturbing the powder, isolate the area, and avoid alcohol-based cleansers or hand sanitizer on exposed skin.
• Incidents should be reported to an FBI Election Crimes Coordinator or WMD Coordinator, the FBI tip line (1-800-225-5324), or USPIS at 1-877-876-2455.

Ministry of Justice adds four major-project assessments to GMPP transparency page

HM Treasury and the Ministry of Justice refreshed the page listing accounting officer assessment summaries for MOJ projects in the Government Major Projects Portfolio. The update adds several 2026 entries, including a batch dated 26 February 2026 and a further Accelerated Houseblocks Delivery Programme addendum on 12 October 2026. For anyone tracking public spending governance, it is a window into how departments evidence regularity, propriety, value for money and feasibility.

• The page was first published on 25 July 2019 and was last updated on 12 October 2026 with an Accelerated Houseblocks Delivery Programme: Programme Business Case 3 Addendum.
• The 26 February 2026 batch lists four items: the Future Voice Service Full Business Case, the HMP Norwich Major Refurbishment Project, a Programme Business Case 3 Addendum for HMP Wayland, and the Community Support Programme.
• Departmental accounting officers must assess every GMPP project against regularity, propriety, value for money and feasibility.
• The Accelerated Houseblocks Delivery Programme appears twice in 2026, with Programme Business Case 3 Addendum entries on 26 February 2026 and 12 October 2026.

FCA finds governance gaps at benchmark administrators in multi-firm review

This review closes a supervisory programme the FCA began after its 2024 portfolio letter flagged governance weaknesses at benchmark administrators. It sets out observations across five areas, from board composition to assurance, intended to help firms assess their own arrangements rather than prescribe a single model. Compliance and risk teams supporting benchmark administration should read it as a diagnostic checklist.

• The review is the final part of supervisory work launched after the FCA's 2024 portfolio letter identified governance weaknesses at a number of benchmark administrators.
• The FCA assessed firms across five areas: board composition and capability, board engagement and challenge, governance structure and escalation, board packs and information flow, and governance assurance.
• In some cases governance records did not clearly capture board decisions, challenge, decision rationale and resulting actions.
• The FCA found information and escalation flows between UK regulated entities and wider group governance forums were less developed in some cases.
• The FCA says it will use the findings to inform supervisory engagement and encourages administrators to engage with the government's ongoing review of the UK Benchmarks Regulation.

WaFd applies to Fed to acquire EverBank Financial Corp

The Federal Reserve has published notice of WaFd, Inc.'s application to acquire EverBank Financial Corp under the Bank Holding Company Act. The notice opens a public comment window running to November 12, 2026, handled through the Federal Reserve Bank of San Francisco. This is the procedural gateway through which the transaction will be assessed against the statutory approval standards.

• WaFd, Inc. of Seattle has applied to the Federal Reserve to acquire EverBank Financial Corp and indirectly EverBank, National Association, both of Jacksonville, Florida.
• The application is made under the Bank Holding Company Act of 1956 and Regulation Y.
• Written comments must be received no later than November 12, 2026, at the Federal Reserve Bank of San Francisco or the Board of Governors.
• Comments received are subject to public disclosure and will generally be made available without change.

FTC asks court to hold Shkreli in contempt over lifetime pharma ban

The FTC and seven state co-plaintiffs have moved to hold Martin Shkreli in civil contempt of a 2022 court order permanently barring him from the pharmaceutical industry. They allege he traded in pharma stocks and broadcast views on drug companies online. The filing seeks divestment, disgorgement of trading profits without offsetting losses, and escalating future penalties including possible incarceration.

• The FTC and seven states filed a civil contempt motion against Martin Shkreli on October 13, 2026, in the U.S. District Court for the Southern District of New York.
• The motion alleges Shkreli publicly traded in pharmaceutical stocks of at least 60 companies and broadcast opinions about drug companies since his release from prison in May 2022.
• The 2022 injunction banned Shkreli from directly or indirectly participating in the pharmaceutical industry, including holding an ownership interest or influencing a pharmaceutical company's management.
• Sanctions sought include divestment of pharma stocks, a fine equal to trading profits plus prejudgment interest with no offset for losses, and potential incarceration for future violations.
• The Commission vote to authorise the filing was 1-0; Chairman Andrew N. Ferguson is recused and Commissioner Mark R. Meador issued a statement.

Hong Kong launches pharmacy pairing pilot, resets Co-care consultation fees

The Health Bureau has set out two linked changes to Hong Kong's primary care system: the start of a community pharmacy pairing pilot for chronic disease patients, and the annual reset of consultation co-payment fees charged by doctors in the Primary Healthcare Co-care Network. Compliance and government affairs teams tracking healthcare policy and public subsidy mechanisms should note the phased rollout timeline and fee data below.

• The CPP (Community) pilot launches patient pairing with 20 designated pharmacies across four districts by the end of October.
• Full coverage across all 18 districts is planned for the fourth quarter of next year, following second and third phase rollouts.
• Co-care Network consultation co-payment fees for the screening and treatment phases take effect from November 1.
• Of 1,239 participating service points, 1,022 (82.5%) retain existing fees, 28 reduce fees by a median of $100, and 189 raise fees, with the overall treatment-phase increase at 3.7%.
• More than 300,000 citizens had enrolled in the Co-care Network as of October 7, with around 70,000 diagnosed with cardiovascular risk factors or chronic hepatitis B and now in the treatment phase.

EDPB issues initial statement on data protection risks of smart glasses

The EDPB has adopted a preliminary statement addressing how GDPR applies to smart glasses equipped with cameras and microphones. For compliance teams at manufacturers and service providers, it signals early regulatory thinking on transparency obligations and the limits of the household exemption, ahead of more detailed guidance.

• The EDPB adopted statement 1/2026 on smart glasses during its latest plenary on 13 October 2026.
• Users become data controllers when sharing recordings on public social media or using smart glasses for official, professional or political activities.
• Purely personal use, such as filming family or friends, falls under the GDPR household exemption, though other criminal, civil or labour law may still apply.
• Manufacturers and linked app or service providers cannot transfer their data controller obligations to users and must keep processing compatible with original purposes.
• The accompanying report was commissioned following a proposal from the French DPA and prepared by a digital sociologist through the EDPB's Support Pool of Experts programme.

FCA finds uneven conflicts management across private market firms

The FCA has published findings from a review of how private market firms identify, manage and disclose conflicts of interest. Standards varied considerably across private equity, private credit and real estate, with some firms failing to keep controls in step with their own growth. The regulator wants firms to act on the findings, and signals a wider supervisory focus on private markets and investor outcomes.

• The FCA review covered conflicts of interest and fair customer treatment across private equity, private credit and real estate.
• Recurring weaknesses were found in cross-fund transfers and multi-party transactions, gifts and entertainment, and information barriers.
• The FCA expects firms to identify, record, manage and disclose conflicts effectively and to demonstrate investors are treated fairly.
• Separately, the FCA is examining governance and conflicts concerns relating to the use of private credit to fund consumer litigation claims.

SEC notices exemptive application from RTW Biotech Growth Fund over share classes

A routine but consequential SEC notice: RTW Biotech Growth Fund and RTW Investments, LP have applied for exemptive relief that would let the closed-end fund adopt a multi-class share structure with early withdrawal charges and asset-based fees. The notice opens a window for interested parties to request a hearing before the order issues.

• RTW Biotech Growth Fund and RTW Investments, LP filed the exemptive application on August 28, 2026.
• The applicants seek exemptions from sections 18(a)(2), 18(c) and 18(i) and rule 23c-3 of the Investment Company Act of 1940, plus an order under section 17(d) and rule 17d-1.
• Relief sought would permit multiple share classes, early withdrawal charges, and asset-based distribution and/or service fees.
• Hearing requests must be received by the Commission by 5:30 p.m. Eastern time on November 2, 2026, accompanied by proof of service on applicants.
• Absent a hearing order, the SEC will issue the requested exemptive order without further notice.

State Dept seeks comment on citizenship-abroad forms, 275,000 respondents

A routine but binding Paperwork Reduction Act notice from State's Bureau of Consular Affairs opens comment on two forms used to document U.S. citizenship acquired abroad. Compliance teams handling expat or cross-border family services should note the comment window and burden estimates before the collections go to OMB.

• Comments on both collections are due by December 22, 2026, submitted through Regulations.gov under Docket Number DOS-2026-1123.
• DS-2029, the Application for Consular Report of Birth Abroad, carries an estimated 113,212 respondents at 60 minutes average response time, for 113,212 total burden hours.
• DS-5507, the Affidavit of Physical Presence or Residence, Parentage, and Support, carries an estimated 162,161 respondents at 30 minutes average response time, for 81,081 total burden hours.
• Both collections are listed as required to obtain or retain a benefit, meaning respondents must complete them to secure the underlying citizenship or nationality determination.
• Email and regular mail comment options have been suspended, with all submissions centralized through Regulations.gov or a dedicated comment email address.

SEC seeks OMB renewal of municipal advisor registration rules and forms

This is a routine Paperwork Reduction Act notice in which the SEC asks OMB to extend approval of the information-collection rules underpinning municipal advisor registration. It matters to compliance teams at municipal advisory firms because it quantifies, in granular detail, the ongoing filing burden they carry under Forms MA, MA-I, MA-W and MA-NR.

• As of December 31, 2025, approximately 419 municipal advisors were registered with the Commission.
• The Commission estimates 15 new Form MA applicants annually for each of the next three years, totalling 45 over the period.
• The average internal cost of compliance per hour for completing Forms MA and MA-I is estimated at approximately $271.
• Rule 15Ba1-8 requires municipal advisory firms to obtain and retain, for not less than five years, written consent to service of process from each associated person engaged in municipal advisory activities.
• The Commission estimates it will receive an average of 21 Form MA-W withdrawals and enter orders cancelling or revoking registration of 4 municipal advisors annually over the next three years.

DOJ opens Second Amendment probe into Pennsauken, New Jersey permit delays

The Justice Department has opened an investigation into whether Pennsauken, New Jersey unconstitutionally delays firearm permits. The inquiry is run by the Civil Rights Division's Second Amendment Section and rests on the Supreme Court's reasoning in Bruen. This item covers what the department is examining, the legal theory it is using, and how the Division is now deploying its gun-rights enforcement arm against local permitting systems.

• The investigation, opened October 14, 2026 under press release 26-1200, targets delays in issuing firearm licenses in Pennsauken, New Jersey.
• The inquiry focuses specifically on the Pennsauken Township Police Department's permitting system.
• The department relies on Bruen (2022), which it reads as treating lengthy processing wait times as an abusive use of a permitting scheme.
• AAG Harmeet K. Dhillon directed the Civil Rights Division's Second Amendment Section to run the investigation.
• The release states the investigation does not support any armed obstruction of federal or local law enforcement.

IRS proposes rules tightening ACA premium tax credit eligibility under OBBBA

The IRS has issued proposed regulations under section 36B of the tax code to implement changes made by the One, Big, Beautiful Bill Act to the Affordable Care Act premium tax credit. Compliance, tax and benefits teams advising on health exchange enrollment or administering Form 1095-A reporting should review the comment and hearing timeline now.

• Written or electronic comments on REG-101576-26 must be received by November 30, 2026, via the Federal eRulemaking Portal or by mail.
• A telephonic public hearing is scheduled for December 8, 2026 at 10 a.m. ET, contingent on topic outlines being received by November 30, 2026.
• Requests to attend the public hearing must reach the IRS by 5 p.m. ET on December 4, 2026.
• For taxable years beginning after December 31, 2025, section 71305 of the OBBBA removes the excess APTC repayment limitation, requiring full repayment of any excess advance credit.
• Section 71302(a) of the OBBBA removes PTC eligibility for lawfully present aliens with household income below 100% of the Federal Poverty Level who are ineligible for Medicaid due to immigration status, effective for taxable years beginning after December 31, 2025.

CFPB seeks renewal of consumer complaint response survey, comments due Dec 14

A routine Paperwork Reduction Act notice from the CFPB seeking OMB extension of an existing information collection: the Consumer Response Company Response Survey. Relevant to firms that respond to CFPB consumer complaints, since survey results feed back to companies and inform CFPB's assessment of complaint handling.

• Comments on the extension request must be received by December 14, 2026 to be assured of consideration.
• The survey is approved under OMB Control Number 3170-0069 and docketed as CFPB-2026-0022.
• CFPB estimates 66,700 respondents and 4,669 total annual burden hours for the collection.
• The survey asks three questions about a company's complaint handling plus a narrative description supporting each answer.
• Survey results are shared with the responding company and used by CFPB as one of several inputs to assess response accuracy, completeness and timeliness.

SEC notices Clearlake, Pathway co-investment exemptive order application

The SEC has published notice of an exemptive application from Clearlake Private Markets Fund, Clearlake Capital RIC Management and Pathway Capital Management seeking relief to co-invest across affiliated business development companies and closed-end funds. This brief covers the filing's scope, deadlines and how interested parties can request a hearing before the order is granted.

• Applicants Clearlake Private Markets Fund, Clearlake Capital RIC Management, LLC and Pathway Capital Management, L.P. filed the application on August 10, 2026 and amended it on August 13, 2026.
• The requested order would permit certain BDCs and closed-end management investment companies to co-invest in portfolio companies with each other and with affiliated investment entities.
• The relief sought covers joint transactions otherwise prohibited by sections 17(d) and 57(a)(4) of the Investment Company Act and rule 17d-1.
• Hearing requests must reach the Commission by 5:30 p.m. Eastern time on November 3, 2026, accompanied by proof of service on the applicants.
• The order will be issued without a hearing unless the Commission orders one, per the standard exemptive application process.

ADGM opens first public consultation on draft founding legislation

This is ADGM's announcement that it has launched the first phase of public consultation on the draft legislation underpinning its new financial centre, covering company law, insolvency, employment and property regulations ahead of its first licence applications.

• ADGM published draft legislation covering Companies, Insolvency, Employment, Operating Regulations, Property and Strata regulations for public comment.
• More than 16 major international financial institutions and industry bodies took part in a pre-open market consultation before the drafts were released.
• The public comment period on the draft legislation runs until Thursday 5 February.
• Chairman Ahmed Ali Al Sayegh said ADGM expects to receive its first licence applications later in the year.
• ADGM stated this is the first of several phases of open market consultation, with further draft legislation to follow in coming months.

CISA flags nine flaws in Kiloview E3 encoder, three giving root on the device

CISA's ICS advisory ICSA-26-295-01 documents nine vulnerabilities in the Kiloview E3 NDI encoder, a video appliance used across the communications and information technology sectors worldwide. Several combine to turn authenticated web access, or in one case none at all, into full root compromise. The only remedy on offer is a firmware update. This runs through what the flaws allow and what network owners should do now.

• All nine vulnerabilities affect Kiloview E3 firmware below 1.30, and the vendor's sole remedy is an update to V1.30.
• CVE-2026-107861 and CVE-2026-110243, both OS command injection flaws, each score 9.9 under CVSS v3.1 and 9.4 under CVSS v4.0, allowing an authenticated web user to execute commands as root.
• CVE-2026-109122, a third command injection flaw, scores 9.1 under CVSS v3.1 and 9.4 under CVSS v4.0, and its malicious configuration persists across reboots.
• CVE-2026-92450 uses an HMAC-SHA256 secret hardcoded identically across all devices, letting an attacker with the public firmware forge administrative session tokens without credentials.
• CISA states no known public exploitation specifically targeting these vulnerabilities has been reported at this time.

CISA flags five vulnerabilities in Siemens RUGGEDCOM APE1808 with Nozomi software

CISA has republished a Siemens ProductCERT advisory covering five vulnerabilities in RUGGEDCOM APE1808 devices running Nozomi Networks' Guardian/CMC software. The flaws range from low to high severity and touch dashboard, credential management, polling and login functions used across critical infrastructure deployments worldwide.

• Five CVEs affect all versions of RUGGEDCOM APE1808 running Nozomi Guardian/CMC: CVE-2026-33387, -33388, -33389, -33391 and -33920.
• CVE-2026-33389, an improper certificate validation flaw in Smart Polling, carries the highest individual CVSS 3.1 score of 7.5.
• CVE-2026-33388 scores 7.4 and allows a limited-privilege authenticated user to delete or edit Credentials Manager entries, potentially disrupting authentication.
• Siemens directs affected organizations to contact customer support directly to receive patch and update information rather than publishing a fix in the advisory.
• The advisory was initially released on 2026-10-13 and republished by CISA on 2026-10-22 as SSA-911336.

CISA flags 11 vulnerabilities in Siemens RUGGEDCOM CROSSBOW software

CISA has republished a Siemens ProductCERT advisory covering eleven vulnerabilities in RUGGEDCOM CROSSBOW, a substation management tool used across energy, transportation, manufacturing, healthcare and government sectors worldwide. The flaws range from SQL injection to authorization bypass. Operators running versions below 6.0 should review exposure and plan remediation.

• Siemens has released RUGGEDCOM CROSSBOW V6.0 as the vendor fix for all eleven listed vulnerabilities affecting versions below 6.0.
• CVE-2026-89196 through CVE-2026-89206 cover flaws including SQL injection, authorization bypass, sensitive data exposure and client-side security enforcement.
• The highest CVSS v3.1 base score among the eleven vulnerabilities is 8.8, rated HIGH, for CVE-2026-89196.
• CVE-2026-89199 could allow an authenticated attacker to retrieve administrative credentials for various internal systems.
• Siemens ProductCERT reported the vulnerabilities to CISA, which republished the advisory verbatim as SSA-508506.

CISA flags high-severity flaw in InterSystems IRIS for Health, TLS off by default

CISA has published an ICS Medical Advisory covering a cleartext transmission vulnerability in InterSystems IRIS for Health, a platform used across the healthcare sector worldwide. The flaw stems from TLS/SSL being disabled by default. Compliance and security teams running affected versions should review this briefing before deciding how urgently to act.

PRA and FCA plan to scrap pre-approval for most senior manager roles

The PRA and FCA have opened consultations to strip back the Senior Managers and Certification Regime, removing regulator pre-approval for many functions and scrapping the Certification Regime entirely for roles below senior manager level. This covers what changes, what stays, and the consultation deadline compliance and HR teams need to track.

• The PRA and FCA opened parallel consultations on 22 October 2026 to streamline SM&CR, with feedback invited until 22 January.
• Regulator pre-approval will be removed for roles including Chief Actuaries and Chairs of Risk and Audit Committees, replaced by firm notification.
• The Certification Regime will be scrapped for around 139,000 individuals below senior manager level, removing them from annual checks and the Financial Services Register.
• The reforms are expected to reduce PRA SM&CR pre-approvals by 43% and halve the overall burden of the PRA regime.
• CEOs, CFOs and Chairs will continue to require regulator pre-approval and fit and proper tests before appointment.

FCA chief signals more assertive use of powers to tackle digital-era market risks

A speech by FCA chief executive Nikhil Rathi sets out how the regulator intends to respond to AI, tokenisation and other fast-moving technology without slowing innovation. It signals a shift from rulemaking toward more assertive supervisory action, a rethink of AML processes, and new leadership roles tasked with cutting duplicative compliance burden while expanding the FCA's reach into unregulated sources of harm.

• FCA chief executive Nikhil Rathi delivered the speech at the Corporation of the City of London's annual City Dinner on 22 October 2026.
• Rathi said as much as 8% of banks' workforces are dedicated to combatting financial crime, and called for better outcomes from those resources.
• The FCA is integrating over 60,000 professional services businesses into its regulatory ambit.
• New chief operating officer Johan Sekora, formerly of Swedish banks' intelligence sharing efforts, will lead work to look beyond KYC processes toward uncovering actual money laundering.
• Deputy chief executive Sarah Pritchard will engage firms to streamline duplicative compliance assurance, including a review of the three lines of defence model.

FCA proposes scrapping Certification Regime in second phase of SM&CR overhaul

The FCA has opened CP26/37, the second phase of its Senior Managers and Certification Regime review. It proposes removing the Certification Regime, retiring the Directory of certified persons, cutting the number of Senior Management Functions and raising the thresholds for the Enhanced regime. The consultation closes on 22 January 2027, with final rules expected in the first half of that year.

• The consultation opened on 22 October 2026 and closes on 22 January 2027, with final rules expected in the first half of 2027.
• The FCA proposes removing the Certification Regime and retiring its Directory of certified and assessed persons.
• Certain Senior Management Functions would be removed and other roles made notified, while Enhanced regime thresholds would be raised.
• Firms would no longer make ongoing submissions of Statements of Responsibilities and Management Responsibilities Maps, and Conduct Rule breach reporting thresholds would rise.
• The regime binds all firms currently in scope, including third-country branches, and firms due to enter scope such as cryptoasset firms.

CFPB updates FOIA and Privacy Act records system, adds NARA inspection disclosure

A routine but mandatory Privacy Act notice from the CFPB updating its primary FOIA/Privacy Act records system. The segment covers what the modification actually changes: scope of records, system manager, retention schedule, and a new disclosure pathway to NARA. Useful for privacy and records officers tracking agency practice.

• Comments on the modified system of records notice must be received no later than November 20, 2026, the same date the new system becomes effective absent a contrary determination.
• A new routine use permits disclosure of records to the National Archives and Records Administration or other federal agencies conducting records management inspections under 44 U.S.C. 2904 and 2906.
• The Chief Privacy Officer is clarified as the system manager for records related to Privacy Act amendment requests under 12 CFR 1070.56.
• The authority for maintaining the system is broadened to explicitly include the Freedom of Information Act, the Privacy Act of 1974, and the Federal Records Act, 44 U.S.C. 3101.
• Categories of records and individuals covered are expanded to clearly include those requesting amendment of records, including initial appeals and statements of disagreement.

IRS seeks comments on paperwork burden for ABLE disability savings accounts

A routine Paperwork Reduction Act notice covering the recordkeeping and reporting tied to qualified ABLE programs, the tax-favored savings accounts for eligible disabled individuals. The filing matters mainly to state agencies administering these programs and to compliance teams tracking OMB-approved collections rather than substantive tax changes.

• Comments on the information collection are due on or before December 14, 2026.
• The collection operates under OMB Control No. 1545-2293 and Regulatory Number TD 9923.
• The IRS states there is no change to the previously approved information collection, which is an extension of a currently approved collection.
• The estimated number of annual responses is 28,987, with an estimated time per response of 22 minutes.
• Estimated total annual burden hours are 10,729, covering individuals, households and states as the affected public.

DOJ sues St. Paul and Portland over mask and ID rules for federal officers

The Justice Department has filed complaints against two cities challenging local ordinances that regulate how federal law enforcement officers identify themselves and whether they may wear masks. The filings extend a wider Civil Division campaign against state and local measures it views as obstructing federal operations, a pattern compliance and government affairs teams tracking federal-local friction should note.

• DOJ filed lawsuits against St. Paul, Minnesota and Portland, Oregon on October 15, 2026, press release number 26-1209.
• The challenged laws are Saint Paul Code of Ordinances §§ 268A-268B and Portland City Code §§ 23.30.030 and 23.30.100.
• The complaints invoke the Supremacy Clause, arguing local governments cannot regulate equipment worn by federal officers on duty.
• Attorney General Blanche has directed the Civil Division to identify state and local laws impeding federal law enforcement operations nationwide.
• The department describes these filings as part of a series that has previously targeted New York, Virginia, Connecticut, New Jersey, California, Maryland, Philadelphia, Denver and Milwaukee.

US banks turn to podcasts for marketing as listenership reaches 158 million

The ABA Banking Journal profiles how community and regional banks use podcasting as a marketing and relationship tool. It draws on practitioners at South State Bank, Sunrise Banks and the former Keystone Bank, covering why they launched, how they measure results and what separates shows that gain traction from those that stall. A short, practical read for marketing and communications leads.

• RSS.com data cited in the piece puts US monthly podcast listeners at more than 158 million, about half of Americans aged 12 and over.
• Grandview Research forecasts the US podcasting market will grow by about 19 percent between 2025 and 2030.
• South State Bank's The Community Bank Podcast now averages about 3,500 downloads per month, up from roughly 500 at its 2020 launch.
• Practitioners stress defining a target audience and keeping production lean, with Sunrise Banks describing a setup of "a Yeti mic and then some graphic designer's time."
• There are approximately 4.5 million podcasts registered worldwide, making intentional promotion necessary to capture attention.

State Department delegates presidential appointments authority to office director

A routine Federal Register notice records a formal delegation of authority within the State Department, transferring specific administrative powers to the Office of Presidential Appointments. It affects internal State Department process rather than external regulated industries, but it documents how authority over diplomatic titling, accreditation and custody of the Great Seal is now exercised.

• Under Secretary for Management Jason Evans signed Delegation of Authority No. 629 on August 11, 2026, per the notice's summary.
• The delegation gives the Director and Deputy Director of the Office of Presidential Appointments authority to prescribe regulations and approve exceptions under the office's programs.
• The delegation covers approval of Minister-Counselor and Counselor diplomatic title exceptions where lack of title would impair mission functions.
• The delegation includes authority to approve accreditation of non-U.S. government personnel abroad, including personal services contractors, commercial contractors and grantees.
• The Director and Deputy Director also assume the role of Custodian of the Great Seal of the United States under this delegation.

DOJ opens CRIPA probe into conditions at D.C. jail facilities

The Justice Department has notified D.C. Mayor Muriel Bowser that it is opening a federal civil rights investigation into the D.C. Department of Corrections. The probe follows allegations including excessive force, inadequate medical care and unsanitary conditions, and will test whether a pattern or practice of constitutional violations exists under CRIPA.

• The Justice Department notified D.C. Mayor Muriel Bowser on October 19, 2026 of a federal investigation into D.C. DOC correctional facilities.
• The investigation proceeds under the Civil Rights of Institutionalized Persons Act (CRIPA), covering patterns or practices of resistance to constitutional rights.
• Allegations include failure to protect inmates from excessive force, inadequate medical care, unsafe and unsanitary conditions, and inadequate nutrition.
• The Department cites numerous allegations plus a report from the District of Columbia's own Auditor as grounds for the probe.
• DOJ states it has not reached any conclusions regarding the allegations and is soliciting further information via civilrights.justice.gov/report/.

Jarvis Investment Management enters special administration, FCA confirms

The FCA has confirmed that Jarvis Investment Management, a UK wealth manager it authorises, has entered special administration. This briefing sets out the appointment, the FCA's ongoing supervisory role, and what clients with money or custody assets held at the firm need to do next.

• Jarvis Investment Management Limited (FRN 116413) entered special administration on 14 October 2026.
• Adam Stephens and Philip Hemming of S&W Partners LLP were appointed as special administrators.
• Jarvis Investment had agreed a voluntary requirement with the FCA on 16 September 2022 restricting its activities without FCA consent.
• Clients will be written to within 8 weeks of the appointment explaining how money and assets will be returned and how to claim.
• The FSCS may cover shortfalls in client money or assets and distribution costs up to £85,000 for eligible clients.

FCA signs lease for new Leeds office, relocating in 2028

A short FCA news update on a property matter rather than a policy change: the regulator has agreed a new long-term office in Leeds. It matters mainly to staff, suppliers and local stakeholders tracking the FCA's regional footprint and its 2030 workforce target.

• The FCA has signed an agreement for a new office at 2 Wellington Place, Leeds.
• The new site will provide 36,097 sq ft of space and becomes the FCA's long-term Leeds home from 2028.
• The FCA's current Leeds office at 6 Queen Street opened in 2022 and has continued to grow since.
• The move supports the FCA's five-year strategy ambition of 1,000 roles based outside London by 2030.
• The FCA says it will share more about the new office and plans closer to 2028.

SRB closes recruitment for internal auditor post in Brussels

A staffing notice rather than a policy document: the Single Resolution Board advertised an internal auditor role reporting administratively to its Chair and functionally to the Board in Plenary Session. The vacancy has now closed, but the posting sets out the mandate and reporting lines for an internal audit function at the EU's bank resolution authority.

• The role is graded AD6, based in Brussels, with an estimated monthly basic salary of €6,961.29.
• The contract is a three-year renewable Temporary Agent position within SRB.CM.IA, the Internal Audit area.
• Audit and advisory engagements are to be performed in line with the 2024 Global Internal Audit Standards (GIAS).
• The Internal Audit function reports administratively to the SRB Chair and functionally to the Board in its Plenary Session.
• The reserve list from this selection procedure remains valid until Friday, 31 December 2027.

IRS finalizes rule on stock basis timing for consolidated group transfers

Treasury and the IRS have finalized a narrow but technical fix to the consolidated return regulations governing intragroup section 351 exchanges. The rule resolves a basis-reduction timing question that has been open since 2001 and affects how large corporate groups compute stock basis after an internal asset transfer involving assumed liabilities.

• The final rule revises 26 CFR 1.1502-80(d)(1) and adds paragraphs (d)(3) and (d)(4), effective October 16, 2026.
• It applies to consolidated return years for which the return due date, without extensions, falls after October 16, 2026.
• No comments were received on the December 30, 2024 proposed regulations (REG-134420-10), and no public hearing was held or requested.
• The final rule removes an example from the 2024 proposal that Treasury and the IRS said was no longer relevant following amendments to section 357(c)(1)(B) by the American Jobs Creation Act of 2004.
• The Office of Information and Regulatory Affairs designated the rule as not a major rule under the Congressional Review Act, and it was exempted from Executive Order 12866 review under a July 4, 2025 Treasury-OMB memorandum of agreement.

Norway fines Xandr €8.6m over Grindr real-time bidding data

The Norwegian Data Protection Authority has fined Xandr Inc., now part of Microsoft, EUR 8,600,000 for processing Grindr users' data without a lawful basis. The case, dating to a 2020 complaint by the Norwegian Consumer Council, turns on real-time bidding and joint controller consent obligations under the GDPR.

• The Norwegian DPA imposed an administrative fine of EUR 8,600,000 on Xandr Inc. on 2 October 2026.
• The case stems from a 2020 complaint by the Norwegian Consumer Council concerning real-time bidding in the Grindr app.
• Xandr was found to have processed advertising IDs, IP addresses and the fact of Grindr use, which the DPA classifies as data concerning sexual orientation under Article 9(1) GDPR.
• The DPA found Xandr's reliance on Grindr's consent invalid under Articles 4(11) and 7 GDPR, and held that accountability cannot be outsourced between joint controllers.
• The DPA found the infringements of Article 6(1) and Article 9(1) GDPR to be at least negligent and of high seriousness.

ICC judges amend Code of Judicial Ethics on social media and enforceability

The International Criminal Court has amended its Code of Judicial Ethics, binding on sitting judges, to address social media conduct and to clarify that the code's standards are enforceable. The change took effect immediately on publication. This briefing sets out what the two amended articles now say and what it means for how judicial conduct is assessed.

• The revised Code of Judicial Ethics entered into force on 16 October 2026, upon publication on the ICC website.
• Judges agreed the amendments at a Judges' Retreat held on 29 September 2026, under regulation 126 of the Regulations of the Court.
• A new sub-paragraph 3 to article 10 requires judges to exercise caution when using social media and other information technologies.
• Article 12 now expressly states that the code's ethical standards are binding and that non-compliance may amount to misconduct.

SEC investment management chief outlines retail alternatives agenda at Stanford

A senior SEC official sets out, in his own words, how the Division of Investment Management intends to expand retail access to alternative assets. The speech matters because it previews a policy agenda built on recent no-action letters, exemptive orders and pending rule proposals rather than a single new rule, giving compliance teams an early map of where the Division is headed.

• Daly said the Commission's 'Responsible Retailization' initiative rests on three components: access, transparency and incentives.
• The speech references Executive Order 14330, directing that 401(k) retirement account participants have more private market investment options, signed Aug. 7, 2025.
• Daly cited Division staff actions over the past year and a half covering fund seeding, co-investment, multiple share classes, and scheduling and sizing of redemptions, including specific no-action letters and exemptive orders listed in the footnotes.
• A proposed rule on interval fund modernization and multiple share classes for closed-end funds and BDCs was issued Sept. 30, 2026, per Release No. 33-11444.
• A separate proposed rule, Investment Adviser Performance-Based Compensation Modernization, was issued the same day, per Release Nos. 33-11443 and IA-7022, to expand advisers' ability to charge performance fees to a wider client base.