Finnland Gambling
Reliability and security of gaming systems under the Gambling Act
The proposal provides for the reliability and data security of gaming systems under the Gambling Act (xx/2025). The regulation includes the requirements for ensuring the reliability and data security practices of gaming systems and lottery equipment, for the testing thereof, and the accreditation of inspection bodies.
Licence holders would be obliged to ensure the technical reliability and data security of their systems and to assist with audits by accredited external inspection bodies. Data security testing should be carried out every two years and vulnerability scans should be conducted once per year.
The regulation lays down an obligation to report detected vulnerabilities and deviations. An approved data security audit will be required before the commencement of gambling operations. Following an unsuccessful audit, corrections and a new audit must be carried out within 90 days. The regulation also lays down requirements on responsible persons and reporting.
The regulation would enter into force on 1 January 2027.
Keywords: gambling act, gambling, data security, auditing