Gambling White Paper: Gambling Commission Timeline

Light touch vulnerability checks will use publicly available data (like history of unpaid debts and  bankruptcy records) to identify risks of harm.

Frictionless financial risk assessments will be more detailed risk assessments, which will run as a pilot program first which would allow operators and credit agencies to test how they would share data as it relates to identifying gambling harm. The pilot of this system will only involve the largest operators.

The pilot of the frictionless financial risk assessments is expected to run from 30 August 2024 to 31 March 2025 (although this could extend to 30 April 2025).

i. a minimum 5 second game speed for all non-slot games;

ii. a requirement for operators to display net spend and net time information for casino games;

iii. a ban on autoplay for all online gambling products;

iv. a ban on operators offering features that facilitates playing multiple simultaneous games (as it relates to casino products);

v.  a ban on audio or visual effects associated with a win of returns less than or equal to the amount staked (which now extends to casinos and not just slots);

vi. a ban on features that reduce the time for a result to be known (e.g., turbo and quick spin) to all online gambling products; and

vii. new information security controls found in ISO27001:2022.

The Gambling Commission Summer 2023 consultation closed on 18 October 2023.  The Gambling Commission recently published its response, here, as it relates to new requirements on remote game designs which are due to come into force in 2025.

Updated requirements for security audits will come into effect on 31 October 2024 – meaning all annual security audits conducted after 01 November 2024 will need to be updated to the ISO27001:2022 standard.