#compliance

At what point do state Attorney Generals and the federal investigators step in? This wasn't just a normal data breach, they got patient info AND provider account information. It is probably much worse than this press release even admits.

https://portal.ct.gov/dss/press-room/press-releases/connecticut-department-of-social-services-and-gainwell-technologies-notice-of-data-security-incident?language=en_US

https://dallasexpress.com/national/h-1b-fraud-claims-back-in-spotlight-after-fox-segment-on-fake-degrees/

Nearly 7 million visas processed since 2015

➡️ 70% from India

➡️ 12% from China

🔹 A former official told Newsweek 80-90% of applications from India involved fraudulent documents or unqualified applicants

🔹 A network of universities selling fake degrees is now under investigation with one university allegedly selling 36,000+ fake degrees

Any rumors? Hearing Compliance will be impacted.

Waters hasn't been posting salary ranges for US-based roles in MA and California. Pay transparency, y'all! State fines are definitely incoming. HR is messed up. Live your legend!

I wonder if Dell will have its ethics and compliance training this year?

Coming from an unethical and corrupt group of people would be pretty ridiculous.

CDF Labor Law will host an online webinar on June 18, 2026. It offers practical advice for handling workforce reductions. The program aims to minimize legal risks and compliance traps. Attorneys Todd Wulffson and Alessandra Whipple will present the session. This event targets employers, HR professionals, and in-house counsel.

https://www.cdflaborlaw.com/events/cdf-webinar-less-layoff-litigation-pro-tips-for-conducting-reductions-in-force-in-california

There have been reports of some H-1B employees at CVS, particularly those approaching visa renewal periods, being encouraged to relocate to Canada after the company decided not to continue visa sponsorship or pursue employment-based green card processing. In certain situations, these contractors reportedly continue working remotely for CVS from Canada shortly after relocating.

This raises important questions regarding cross-border employment arrangements, immigration compliance, and tax obligations in both the United States and Canada. Remote work from Canada for a U.S.-based employer may require appropriate authorization and adherence to Canadian immigration and labor regulations.

Concerns have also been raised about whether all necessary Canadian work authorization and compliance processes are being consistently reviewed or monitored for individuals in these arrangements. Given the potential legal and regulatory implications, this is an area that may warrant greater transparency and oversight.

#H1B #Immigration #WorkVisa #RemoteWork #CanadaJobs #USImmigration #CrossBorderEmployment #VisaSponsorship #EmploymentLaw #GlobalWorkforce #ImmigrationCompliance #TaxCompliance #WorkAuthorization #CorporateCompliance #LaborLaw #GreenCard #TechWorkers #HealthcareIndustry #CVS #InternationalWorkers #SaveAmericanJobs

when you optimize for one thing, you usually suboptimize something else.

so now we spend energy on trivial stuff like badging, attendance, and proving people are physically present, while less time goes into the actual work. the work is still there. it just gets buried under another layer of compliance theater.

wells fargo has always had a problem with truth and trust. in good times, people work around it. in tough times, it gets harder to hide.

that’s when the cracks show.

The most recent mandatory course on fincrimes included an example of bad things happening when firms operate outside the law - the GS Malaysian corruption scandal that cost GS $600 million to settle. Anyone wanna guess the initials of one of the GS execs implicated. (Google it)

How is this allowed when STS is so behind on tech compared to others in industry? When others cant do anything that will get approved by compliance

https://www.streetinsider.com/dr/news.php?id=26170519&gfv=1

https://www.stocktitan.net/sec-filings/FTDR/form-4-frontdoor-inc-insider-trading-activity-f2fdb9b25268.html

Overnight decision to move then out of the sla-ghter house currently known as Tech moves under Nish. Do we really need a chief privacy officer in that model and do we need over twenty people in a second line role where all of their functions were first line centric ? If we think of efficiencies and what matters for members this is pretty easy. This groups previous leadership fought tooth and nail when anyone dared to mention they belong in second line. (Judy and her leadership team) time to clean house I guess this is a no brainer. Any bets on what happens to a 25 person first line team moving into second line ?

Anybody notice an increase in compliance related terminations. I have seen both announcements on bulletin boards about disciplinary action. The company is taken against people for various things recently as well as hearing about individuals who have been terminated. Do we think this is an increase?

We have decided to bring HR, Legal, Compliance and Corporate Affairs together under Keeley Aleman in an expanded role as Waters General Counsel and Head of Global Human Resources.

We are grateful for Cheryl Kennedy’s leadership and contributions over the past year, as she helped support our people and advance our HR strategy during an important period for the company. Cheryl has left Waters and we wish her the very best.

Who in their right mind would “bring HR, Legal, Compliance and Corporate Affairs together?”

Went in office for only a couple hours connecting with the IP address and HR counts as a compliance on Workday.

It is an open secret that many employees across major hubs—including Hopkins—are navigating the RTO mandate by doing the bare minimum, coming in person for few hours/two days a week, leaving laptops on Monday locked with Kensington T-Bar laptop Lock ($15) at or under a desks overnight to simulate presence, and take them off on Thursday or Friday. They all got 100% RTO compliance for last 4-5 months given RTO enforcement uses IP address tracking which is also our OFFICIAL "Talent" and "Performance" Metric for year 2026 (no other company or bank has this metric).

It’s an open secret that most employees hit 60-100% compliance while they were actually working from home, just by using U.S.bank Teams (attend meetings from home) and Outlook (compose reply emails) all from mobile phones at home or elsewhere (Hawaii vacation). I myself tried last month at Knoxville and yes it worked, but made sure to just get 60% RTO compliance so I do not get caught, but surprised to see many doing it without any fear.

Question: Why did Gunjan approved this ineffective 60% RTO compliance by our D-MB SEVP-HR with IP tracking as performance metric? What were she thinking? Is Gunja equally D-MB - like the CXO suite mocks her?

US House of Representatives
SELECT COMMITTEE ON THE CHINESE COMMUNIST PARTY
548 Cannon House Office Building Washington, D.C. 20515
(202) 225-6002

May 2, 2023

Mr. John Donahoe
President, and Chief Executive Officer Nike, Inc.
One Bowerman Drive Beaverton, OR 97005

Dear Mr. Donahoe,

On March 23, 2023, the House Select Committee on the Strategic Competition between the United States and the Chinese Communist Party (CCP) held a hearing entitled, "The Chinese Communist Party's Ongoing Uyghur Genocide." At the hearing, we heard first-hand witness accounts about the CCP's concentration camps and expert testimony regarding the perpetration of genocide. We also received written testimony in which an expert assessed that "American companies are financing the state-sponsored forced labor programs in the Uyghur Region."1 We seek additional information regarding this matter.

The U.S. Department of State has determined that the CCP is committing genocide against Uyghurs and other minority groups in Xinjiang. 2 In response to the CCP's atrocities, Congress passed the Uyghur Forced Labor Prevention Act (UFLPA) with bipartisan support. On December 23, 2021, the UFLPA was signed into law. The UFLPA prohibits the "importation of any goods made with forced labor, including those goods mined, produced, or manufactured wholly or in part in the Xinjiang Uyghur Autonomous Region."

1. We received expert testimony which revealed that products made by Uyghurs in forced labor camps are still entering the United States. 4 One expert told the Select Committee that Nike is "sourcing garments made not only from cotton from the Uyghur Region but also viscose, lyocell, polyester, leather, and linen from the region."5 Continuing to import goods produced in part with

1 The Chinese Communist Party's Ongoing Uyghur Genocide: Hearing before the Select Comm. on Strategic Competition between the U.S. and CCP, 118 Cong. (Mar. 23, 2023) (Written Testimony ofNury Turkel) ("CCP's Uyghur Genocide Hearing").
2 Edward Wong & Chris Buckley, U.S. Says China's Repression of Uighurs Is 'Genocide', N.Y. TIMES (July 27,
2021).
3 Uyghur Forced Labor Prevention Act, H.R. 6256, I 16th Cong. (2021).
4 CCP's Uyghur Genocide Hearing (Written Testimony ofNury Turkel).
5 Id; According to a Sheffield Hallam University study, Nike is at high risk of having Xinjiang cotton in its supply chain due to its relationship with international intermediary manufacturers and Chinese textile companies sourcing

the forced labor of Uyghurs potentially violates the UFLPA and creates the conditions in which the CCP is able to continue committing genocide.
We would like to offer Nike an opportunity to respond to these serious allegations and to provide information regarding its compliance with the UFLPA. We therefore request that you respond to the following questions by May 16, 2023:

1. Do any garments imported into the United States by Nike contain inputs sourced from Xinjiang and/or inputs made with forced labor ofUyghurs?
2. Please provide a detailed description of the steps Nike has taken since the UFLPA took effect to examine its supply chains with respect to forced labor risk in the manufacture of its products. How do these steps differ, if at all, from the methods utilized before the UFLPA took effect?
3. Please provide a detailed description of the steps Nike has taken since the UFLPA took effect to ensure garments it sells that are made from cotton, viscose, lyocell, polyester, leather, and linen are not manufactured using forced labor by Uyghurs or other minority groups who are subjugated by the CCP.
4. Please provide a detailed description of the steps Nike has taken to examine its other supply chains to ensure that other products it sells are not produced by forced labor undertaken by Uyghurs or other minority groups who are subjugated by the CCP.
5. Do any of Nike's garment suppliers use fabric and/or yarn from any of the following corporations (including their subsidiaries): Jiangsu Lianfa Group, Luthai Textile, Huafu Fashion, Texhong Textile, or Weiqiao Textile?
6. Is fabric and/or yarn made by any of the corporations referenced above used in the production of Nike clothing sold in the United States? If so, please list each corporation whose fabric and/or yarn is used in the manufacture of Nike clothing sold in the United States.
7. If fabric and/or yarn from one of the corporations referenced above is used in the production of Nike clothing sold in the United States, what specific steps does Nike take to ensure that none of this material is made in, or contains cotton from, Xinjiang?
8. Has Nike contractually obligated all its garment suppliers to ensure that no inputs from Xinjiang are used in the manufacture of its clothes sold in the United States? Please provide all relevant documents to support such obligations.

cotton and employing state-sponsored labor transfers from the Uyghur Region. Most of the Chinese textile companies identified in the study have subsidiaries in Xinjiang that have employed state-sponsored labor transfers. See, Laura T. Murphy et al., Laundering Cotton: How Xinjiang Cotton Is Obscured in International Supply Chains, SHEFFIELD HALLAM UNIVERSITY (Nov. 2021).

1. What specific methods, other than mere written or verbal assurance from a garment supplier, does Nike use to verify that the supplier is not using inputs from Xinjiang?

I 0. What audit methods does Nike use to verify that suppliers in China-in and outside of Xinjiang-are not exploiting Uyghurs through state-sponsored labor transfers, given that workers in China cannot speak to auditors about forced labor without fear of government retaliation? Please provide all policies, guidelines, requirements, reviews, assessments, analyses, audits, PowerPoint or other presentations, or other documents that describe, govern, implement, or report conduct, processes, or results (without regard to the title of a given document) that are relevant to the conduct of such audits, as well as copies of any communications pertaining to any incident involving actual, alleged, or anticipated noncompliance with the UFLPA.

1. Has Nike conclusively identified every supplier of fabric, cotton, and yarn in its global supply chain for products sold in the United States? If yes, please provide documents and evidence to substantiate Nike's conclusive identification of such fabric, cotton, and yarn suppliers, including any documents evidencing Nike's methodology with respect to this determination. If not, please provide a detailed explanation of how Nike assesses whether its clothing imports comply with the UFLPA, including any documents describing Nike's methodology with respect to such assessments.

2. Does Nike allow cotton and/or other inputs produced in Xinjiang to be used in the manufacture of Nike clothing sold in markets outside of North America?

3. In 2020, reporting revealed that hundreds of Uyghur laborers worked in a factory that manufactures 8 million pairs ofNikes each year.6 Nike claims to have verified that this factory-owned by a leading Nike Supplier, TKG Taekwang-no longer uses Uyghur forced labor. Given its track record of using forced labor, how did Nike verify that TKG Taekwang no longer uses forced labor? And why does Nike still consider TKG Taekwang to be a suitable business partner?

4. Please provide a detailed description of the steps Nike is taking to examine and monitor its supply chains on an ongoing basis. Please provide all policies, guidelines, requirements, reviews, assessments, analyses, audits, PowerPoint or other presentations, or other documents (without regard to the title of a given document) that describe, govern, implement, or report conduct, processes, or results relevant to the conduct of such examination and monitoring.

5. Please provide a detailed description of your audit and compliance plan(s), and the steps taken thus far to implement controls to ensure that Nike products are not produced by forced labor and that all Nike products are obtained and sold in compliance with the requirements of the UFLPA. Please provide all policies, guidelines, requirements, reviews, assessments, analyses, audits, PowerPoint or other presentations, or other documents (without regard to the title of a given document) that describe, govern,

6 Anna Fifield, China compels Uighurs to work in shoefacto,y that supplies Nike, WASH. POST (Feb. 29, 2020).

implement, or report conduct, processes, or results relevant to Nike's audit and compliance plan(s).

The House Select Committee on the Strategic Competition between the United States and the Chinese Communist Party has broad authority to "investigate and submit policy recommendations on the status of the Chinese Communist Party's economic, technological, and security progress and its competition with the United States" under H. Res. 11. Upon your receipt of this letter, please maintain and preserve all hard copy and electronic documents, including electronic communications, related to the subject matter of these questions.

To make arrangements to deliver a response, please contact Select Committee majority and minority staff at (202) 226-9678 and (202) 225-2489, respectively.

Thank you for your attention to this important matter and prompt reply.

Sincerely,

-
Mike Gallagher
Chairman

Ranking Member

How strict is VG on the background check for licensed client facing roles?

• Clean U4
• Clean credit 820+ score
• Don’t drink/do dr-gs
• No felonies
• 2 misdemeanors that were dismissed. One was for stopping payment on a check b/c merchant delivered broken goods. Went to court judge ordered me to pay the amount of the check to the merchant, and the merchant had to deliver working goods. After that was done, judge dismissed.

Other misdemeanor was an as--ult charge. Where I live Sheriff can file without grand jury and did. Judge ruled no probable cause at initial hearing and threw it out with prejudice after admonishing the Sheriff and DA for wasting the courts time.

Fidelity, UBS, Chase had no issues, Merrill and USAA did.

USAA has a policy that all new roles are in office. Remote employees that post for new roles must move to an office location if they want a new role. It also has a policy that all roles are posted for at least 5 business days. This does not appear to apply to all people. Good ole boys get special treatment. The bank just hired a new chief compliance officer and the role was not posted. The new chief compliance officer is also remote and does not appear to have moved to an office location. What gives? Why is there special treatment for certain people while the rest of us remote employees are stuck in our roles unless we are willing to move?

They are hiding Compliance and other areas of Corporate Risk headcount numbers from regulators.

We remain unethical and shady.

Has anyone noticed that the new FAQs about time tracking don't state punishments for low compliance?

A new job has been posted, they are looking to hire someone to develop AI to take processes, procedures, analysis, etc out of the hands of current workers and into the bowels of AI. The worst part is that the job description includes making the AI in compliance with audit standards and SOX public standards. All while following the rules of controls and separation of duties? How can this be taken seriously? Trusting that data is properly handled, accounting is done up to high standards, and that our financial statements are accurate in the hands of newly developed AI? More layoffs coming to FP&A if this job gets filled? Whoever takes this job will be a yes-man and completely wreck our financial accuracy.

The company doesn’t believe or care about Work Life Balance anymore. To the company it’s all about compliance reports.

Great article regarding the 7 years of CMS non compliance - all under Gail, Fiona and Gloria’s watch. Be clear this is not a difference of opinion on what it takes to be CMS compliant, I believe there were decisions made that it was easier to just fake it and see what they could get away; it was cheaper to risk non compliance than to spend the money to get the data in order. Why won’t they let Pete testify? Doesn’t sound transparent or ethical and it is not good leadership. The Board members who weren’t part of the FA stage need to hold those that were accountable and make some changes cause they are about to enter the FO stage.

https://www.healthcare-brew.com/stories/2026/05/04/elevance-estimates-935m-avoid-CMS-sanctions

Too bad they dont have CS on the board of Microsoft so we can all get the Microsoft 365 reminder to "integrate copilot into your workday to prevent yourself from falling below 3 days a week!"

RTO has become AITO

Your notices go out May 1!

Mandatory voluntary compliance for AI user metrics...Now someone tell me AI is not a bubble

Block laid off 984 California employees in its recent job cuts. This represents about one-fourth of its total global workforce reduction. The company attributed these layoffs to its adoption of artificial intelligence tools. Block initially faced noncompliance issues with state WARN Act filings. The company is now largely compliant with the California EDD.

Oakland, California

https://www.sfexaminer.com/news/technology/california-takes-big-hit-in-blocks-massive-layoffs/article_3bb72b47-4305-49de-bb80-9dae9f52c7c3.html

Just please lets all look out for each other, and do what we are told. It's awful but working in an office beats getting fired for non-compliance and then not having one to work in at all...

After all, it's what we all make of it.

It appears that the majority of the doctors were fired and now we can't meet client commitments - or even basic compliance requirements in many cases. Does anyone know what the plan is for EviCore?

How is this model sustainable? We're going to lose major clients if this keeps going on.

22 days x .60 =13.2.

To hit 60 percent, we have to hit at least 14 days or get written up for non compliance????

For months conversations have swirled around a changing risk environment @PNC and today, unfortunately several folks in Risk, Compliance and i believe the change office were displaced after an organizational realignment. This comes on the heals of FirstBank and the BAM's. Sadly, it seems like this is just the beginning, not just with PNC, but banking in general. The financial landscape is drastically changing...it feels like 2008 all over again.

In Compliance and we had some layoffs. We were told there were more coming. Any other groups get hit today?

On April 15, 2026, every file-based Citrix license stops working. The new License Activation Service (LAS) is a cloud-based control mechanism.
No more on-premises static license files - install and forget - but external cloud dependency, connectivity testing, failover validation, etc. In some highly regulated business, it creates an architectural problem requiring more effort.
And LAS does not work with older versions of Citrix products: some big organizations have to upgrade their entire Citrix stack, and install all kind of patchs, sometimes provoking problems of ... license expiration.

I see customers complaining about the lack of support, probably overwhelmed by requests to solve the problems created by this new LAS.
And also customers questioning the costs of this LAS migration, that is imposed to them, for more constraints and no tangible benefit. Mandatory stay on supported versions. Citrix telemetry to verify usage data. Compliance checking. And wondering if the effort to migrate to another platform would not be better.

Sometimes I think that Citrix management is doing all they can to lose customers. Customers layoffs I suppose.

How many months in a row can someone be out of compliance before an action is taken? What's the sequence of events that follows?

Is it legal to suddenly change this RTO performance policy metrics and make people noncompliant? Previously, under 11 day RTO attendance, I was at 100% compliance. However, now that they changed their metrics calculation method, I am noncompliant. By them retroactively changing my compliant reports to noncompliant reports from Nov 2025 to March 2026, wouldn’t that be considered data manipulation by the company, which is illegal? They also failed to disclose IP usage to monitor which is also illegal.

So do we think those that are now showing under 60% the last 5 months are going to be fired? Doesn't seem ethical to change it and then use it against us. I was hitting 11 days but that isn't hitting this new 60% goal.

Heard Privacy moving to Compliance. Anyone else hear anything?

It’s updated and now shows me as non compliant. They clearly changed the expectations. I’m surprised there isn’t any communication on this from the company.

Nothing says ‘competitive advantage’ like posting the Permian well logs, 1533’ core spacing, and perforation clusters. This is what winning looks like.

Thank you ST for posting that to LinkedIn

Flowers in the townhall: “We are not going to stop focusing on risk. On the contrary. We will continue to focus on risk management.”

Also Flowers: “Pick up co-pilot. Use it. Experiment. Get familiar with it. It is our future”

lol. How many people are using co-pilot to knowingly or unknowingly sp-t out nonsense right now. These banks are highly regulated. Zero controls in place for how outputs are being used. Most managers are reviewing nothing. No one has a clue hoo o w often people are using AI or where.

I’ve seen people submit so much gibberish to me over the past month. Clearly AI outputs.

Good job guys. Not only is RCSA a joke in terms of quality but now we are layering in more risk to every process without understanding the impact.

What could go wrong?