All articles tagged with #compliance
Starbucks has reached a nationwide settlement with Florida over DEI-related hiring practices, agreeing to pay $1 million, stop race- and sex-based hiring goals, and submit annual compliance certifications for four years, with no admission of liability; the deal ends the Florida Civil Rights Act suit while applying to all Starbucks operations.
Beijing will restrict Chinese citizens from leaving the country if they violate tech export controls, tightening oversight of overseas tech transfers as firms expand globally; all industries are covered, and companies with global operations must close loopholes that let people or money exit without Beijing’s oversight, with Singapore and Japan likely most affected.
FanDuel and GeoComply renewed a multi-year fraud-prevention and identity-verification partnership, with GeoComply embedding engineers inside FanDuel’s product and operations teams to deepen geolocation, device intelligence, and real-time fraud detection as FanDuel scales across 26 U.S. markets ahead of football season. The deal maintains billions of player checks with a 99.7% pass rate and 99.999% service availability, continuing FanDuel’s focus on a compliant, high-integrity customer experience, alongside announced extensions with Caesars, DraftKings, and Hard Rock.
The DoD is reviewing the Cybersecurity Maturity Model Certification (CMMC) program and has suspended third-party assessments to reduce burdens on small defense contractors. It will hold nationwide listening sessions, gather 60 days of feedback, and issue a final report with recommendations by late September; the review could overhaul or tweak CMMC 2.0, possibly via interim rules. The department cites cost and assessor capacity as barriers; self-assessments remain allowed, while DIBCAC/NSA/DC3 services cover only part of the required NIST controls, and there are about 1,000 certified assessors versus a projected 2,000–3,000 needed.
Goldman Sachs has instructed employees to limit their prediction-market bets to sports and entertainment due to compliance risks tied to material non-public information, with breaches potentially costing a job. The internal memo underscores banks' regulatory concern as platforms like Kalshi and Polymarket expand into financial bets on events such as elections and rates, drawing scrutiny over profits from advance knowledge; Kalshi is even exploring a multibillion-dollar funding round.
Polymarket is launching a US re-entry backed by a high-profile compliance push, including former DOJ/FBI officials and Coinbase alumni, and via the QCEX acquisition to operate under CFTC rules. The USD-based platform will be more tightly regulated and smaller in scope than its international counterpart, as executives emphasize “trust is the product.” The effort faces scrutiny over past offshore marketing practices and faces competition from Kalshi as US market volumes rise.
Kalshi says it will begin collecting users’ employer information for bets on markets with heightened insider risk, to identify presumptive insiders and block trades before they’re placed. A risk-scoring system will flag high-risk markets (such as national-security topics) for heightened scrutiny, part of broader efforts to curb insider trading on prediction markets amid ongoing regulatory and enforcement scrutiny.
Allison Sheehan, a Goldman Sachs wealth manager known online as Investment Baker, left the firm last year after compliance flagged her branding and posts about baking while employed on Wall Street; she has since built Alleycat Baking Co., now producing up to 30 desserts weekly and pursuing an MBA at Northwestern while exploring retail and baking-product ventures.
The U.S. Treasury Department said banks should be vigilant for red flags linked to customers who are in the country illegally, urging stronger due diligence amid ongoing regulatory scrutiny as Treasury Secretary Scott Bessent testified before a Senate committee.
Nvidia CEO Jensen Huang reportedly urged Super Micro to tighten trade/compliance controls after Taiwan detained three people for allegedly misdeclaring AI servers made by the U.S. partner, per Bloomberg.
Young bankers’ viral photos and a PwC consultant’s public posts highlight a clash between Wall Street’s hush-hush culture and a generation that brands itself online, showing how social media can threaten reputations, compliance risks, and career progression in an industry that prizes discretion.
EU member states approved the Omnibus I package, dramatically reducing sustainability obligations by keeping the CSRD’s 1,000-employee cutoff but adding a €450 million annual revenue threshold that excludes about 90% of firms, and by raising the CSDDD thresholds to 5,000 employees and €1.5 billion in revenue. The package also eliminates the climate-transition plan requirement and the EU-wide liability regime, caps penalties at 3% of global revenue, and delays CSDDD compliance to July 2029. It limits reporting demands on smaller suppliers and allows reliance on reasonably available information. The aim is to cut red tape, simplify rules, and boost EU competitiveness with publication to follow and entry into force 20 days after.
U.S. Treasury’s OFAC fined IMG Academy $1.72 million for processing tuition payments for two students whose parents were linked to a Mexican drug cartel, reporting 89 sanctions violations over five years; the school allegedly failed to screen sanctioned individuals and received wire transfers from Mexico. IMG says it disclosed the issue, had no sanctions program at the time, and has since implemented a comprehensive compliance program.
The US regulator has eased some compliance requirements for Citigroup, potentially reducing regulatory burdens on the bank.
Strava plans to comply with Garmin's API attribution requirements by November 1, despite previous pushback and a lawsuit, indicating potential app updates to include Garmin attribution in line with Garmin's brand guidelines, while continuing negotiations.