TWC's 4Rs: Regulation, Reporting, Risk & RegTech

3 news to start your week: March 16

Written by TWC Staff | Mon, Mar 16, 2026

Italy fines Intesa Sanpaolo 18 million euros for illicit processing of customer data

Reuters

Italy's data protection authority announced it has imposed a hefty fine of 17.6 million euros on the nation's largest bank, Intesa Sanpaolo, for unlawful handling of data belonging to approximately 2.4 million customers who were unilaterally switched to its digital platform, Isybank. 

The authority highlighted that the bank had engaged in profiling its clients based on criteria such as age (specifically those under 65), the frequency of their use of digital channels, and the nature of their investment products and financial assets. This profiling had significant consequences for customers, potentially leading to the assignment of their accounts to a different data controller and to unilateral alterations to their contractual agreements. 

Furthermore, the authority criticized the bank's communication regarding the migration process as insufficient, noting that vital information was often sent during the summer and buried in the app's archive section, with no push notifications. 

In determining the fine level, the agency factored in the substantial customer impact while also acknowledging the bank's lack of intent and its cooperative stance throughout the investigation.

PRA fines UK Insurance Limited £10,625,000

Bank of England

The Prudential Regulation Authority (PRA) has levied a hefty fine of £10,625,000 against UK Insurance Limited (UKI Limited) due to a miscalculation of its Solvency II balance sheet in 2023 and 2024. This error led UKI Limited to present an inflated solvency status both to the PRA and the market. 

UKI Limited, a key subsidiary and principal underwriter of Direct Line Group (DLG), is now part of Aviva plc. The miscalculation stemmed from inadequate preventive and detective controls, along with staffing challenges in its finance and actuarial departments, which went unnoticed by DLG’s internal controls for an extended period. 

Upon discovering the error, DLG promptly issued a Regulatory News Service announcement acknowledging the mistake and its impact on the reported SCR Coverage Ratio and provided the corrected figure. Senior management at DLG reported the issue to the PRA without delay, conducted in-depth investigations to determine the root cause of the miscalculation, and took steps to rectify the situation. 

Since acquiring DLG in 2025, Aviva has focused on enhancing the finance and actuarial control framework at DLG. The PRA allowed UKI Limited to participate in the Early Account Scheme (EAS), leading the firm to make timely admissions and agree to a resolution, which earned it a 50% reduction in the financial penalty—bringing it down from £21.25 million.

Trump administration is reportedly set to be paid $10 billion for brokering the TikTok deal 

The Guardian

Reports indicate that the Trump administration is on the verge of receiving $10 billion from investors as part of an agreement to establish a US-controlled version of TikTok. This sum, deemed a transaction fee by the US government, will be paid by administration-friendly investors who have acquired control of TikTok's US operations from its parent company, ByteDance. 

The investors backing this popular social media platform include Oracle, a software giant; MGX, an investment firm based in the United Arab Emirates; and the private equity firm Silver Lake. These investors initially contributed $2.5 billion to the US treasury upon closing the deal in January and are obliged to make additional payments until the total reaches $10 billion in this unconventional agreement. 

Trump has emphasized that the US stands to gain a substantial "fee-plus" merely for facilitating the deal, and he has expressed his desire not to let this opportunity slip away. In September, he signed an executive order to green-light the transaction amid bipartisan concerns about the national security risks posed by TikTok's Chinese ownership, especially given its widespread use among Americans.