Finland proposes standardised gambling-account data reporting from 2027
Regulation3 min read
In brief
- Finland notified the European Commission on 2 November 2026 of draft rules on gambling-account data reporting.
- The National Police Board drafted the rules; they are expected to take effect on 1 July 2027.
- Operators would enter data into a dedicated data vault under a technical annex.
- The notification gives 3 February 2027 as the end of the standstill period.
Finland has notified the European Commission of a draft technical regulation setting out how licensed operators must send gambling-account transaction data to the supervisory authorities. The notification was made on 2 November 2026 under Directive (EU) 2015/1535, and the rules are expected to enter into force on 1 July 2027.
The text was drafted by the Finnish National Police Board (Poliisihallitus) through its gambling supervision unit. It specifies which transactions must be reported, the data structure, the permitted content and the point at which the information must be generated. Under the draft, account-transaction information would be made available through a dedicated data vault, into which licence holders would enter data according to the specifications in a technical annex.
The proposal falls within Finland's new gambling legislation, Act 10/2026, which requires licence holders to give the supervisory authority information on gaming transactions and player account movements. The measure is a technical application of Article 45(2) of the new gambling law, which obliges licence holders to send data in the format set by the competent authority.
The stated aim is a standardised reporting system so that all operators send uniform information, regardless of differences in products, IT set-ups and organisational models. According to the notification, the absence of uniform technical rules would risk data arriving in different formats, making processing harder and limiting the use of automated supervision tools. Standardisation would allow the supervisory authority to monitor how systems work in a preventive and timely way and to identify anomalies, irregularities or technological risks. The Finnish government says structured information is a fundamental element for effective IT supervision, for preventing abuse and offences, and for protecting players' rights.
The documentation sent to Brussels states that the draft was the subject of consultation with operators and other interested parties. The comments received led to several changes to the technical specifications, intended to improve clarity and reduce the burden of applying them. One change was the removal of a provision, included in the initial draft, on a player identifier assigned by the supervisory authority. The Finnish authorities consider a single data-transmission model preferable to individual instructions for each operator. The assessment attached to the notification says individual instructions could fragment technology solutions and lead to differing criteria for licence holders. The proportionality assessment says any adjustment costs for businesses would be justified by the general-interest objectives of consumer protection, fraud prevention and security of the gambling system.
The notification is registered as TRIS/(2026) 3094 and gives 3 February 2027 as the end of the standstill period for examining the draft. The notification message states that the communication does not start any further standstill periods. The measure contains no fiscal provisions, was not submitted under the urgency procedure and is accompanied by an impact assessment.