◆ The Daily Brief
Enforcement actions, regulatory deep dives, and the frameworks worth your time. Updated weekdays. 605+ articles in the archive.
● Live · Updated daily
SEC · DOJ · OCC · FFIEC enforcement
Breaking Regulatory Compliance
The Gotbit SEC settlement shows crypto market-manipulation risk is still live. Here are the wash-trading controls compliance teams should test.
By Rebecca Leung · Aug 3, 2026
◆ Models · Governance · NIST AI RMF
Long form · Updated weekly
Feature · AI Risk
A June 2026 survey found 72% of banks are unprepared to shut down a malfunctioning AI model or report an AI failure to regulators—the two most basic controls in any AI incident-response playbook. OCC and Fed examiners have made AI a permanent standing topic in every routine bank examination. Here's what kill switch documentation, vendor disentanglement testing, and data boundary enforcement look like when an examiner walks in.
By Rebecca Leung · Jul 31, 2026
◆ RCSA · KRIs · TPRM · Compliance Strategy
Frameworks · Deep dives
Feature · Compliance Strategy
On July 8, 2026, a bipartisan coalition of 46 state attorneys general announced a $45M settlement with Block Inc. over Cash App's fraud disclosure failures, identity verification gaps that enabled fraudsters, and the absence of any official customer support phone number. Combined with the January 2025 CFPB order, Block paid $220M in 18 months. Here's what that enforcement record means for your compliance program.
By Rebecca Leung · Aug 2, 2026
◆ Data privacy laws · Incident response
State laws · IR playbooks
Feature · Data Privacy
On April 29, 2026, NYDFS issued a $2.25 million consent order against Delta Dental of New York—its first 2026 cybersecurity enforcement action. The underlying breach was a 2023 MOVEit zero-day. The violations were late notification, inadequate data disposal, and insufficient incident response plan detail. And the consent order bars insurance reimbursement. Here's what the enforcement record tells your program.
By Rebecca Leung · Aug 2, 2026
◆ BCP · DR · Operational continuity
BCP · Disaster recovery
Feature · Business Continuity
On July 31, 2026, the ECB published results of its thematic geopolitical risk reverse stress test covering 110 directly supervised euro area banks—and urged the sector to improve. The OCC's Spring 2026 Semiannual Risk Perspective added geopolitical risk as a prominent new concern for the first time. Most US bank business continuity programs are built for IT failures and natural disasters. They are not built for this class of scenario.
By Rebecca Leung · Jul 31, 2026