Header image

Premier League introduces new cybersecurity rules for football clubs

The Premier League is implementing new cybersecurity regulations for its clubs, aiming to bolster data protection and mitigate cyber threats.

The Premier League has established new mandatory cybersecurity standards for its 20 clubs, moving from a non-prescriptive baseline to enforceable rules with deadlines. These regulations address critical areas such as backups, incident response, risk management, and security assurance, according to Tech Radar. 

Clubs failing to meet these requirements by set deadlines, starting April 30, 2027, face potential fines of up to £100,000 or referral to an independent commission. 

This initiative comes as football clubs handle vast amounts of sensitive personal and financial data, making them prime targets for cyberattacks. Recent incidents, including a ransomware attack on Bologna FC and data exposure through a vendor breach affecting Ajax, highlight the urgent need for these measures. 

Experts emphasize that while the fines are modest compared to club revenues, the true value lies in compelling clubs to build robust resilience and recovery capabilities before an incident occurs. The phased timeline, though pragmatic, is considered slow by some given the current threat landscape, underscoring the importance of proactive security rather than reactive measures.

Source: Tech Radar

Kelley Damore
Kelley Damore Chief Content Officer CyberRisk Alliance

Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.

Kelley Damore
Kelley Damore Chief Content Officer CyberRisk Alliance

Kelley Damore is Chief Content Officer at CyberRisk Alliance, where she leads content strategy across the company’s digital brands, research, communities and live events serving CISOs and security practitioners. At CyberRisk Alliance, she is focused on delivering 365-day engagement, trusted journalism and actionable insights to help security leaders navigate an increasingly complex threat landscape.

Upcoming Events

No events found.