Enhancing Protection of Personal Data in Gambling Operations, by ANJ and CNIL

ANJ and CNIL have created a guide

To support operators in implementing their obligations regarding the protection of players’ personal data while taking into account the specific framework of gambling, the National Gambling Authority (ANJ) has published a practical guide, developed in collaboration with the National Commission on Informatics and Liberties (CNIL).

As part of their activity, legally authorized gaming operators are required to process a significant volume of personal data, and this processing must be carried out in compliance with the General Data Protection Regulation (GDPR) of April 27, 2016.

In response to difficulties expressed by some operators regarding the interaction between the GDPR and specific gambling law provisions—particularly obligations related to preventing excessive gambling and combating money laundering—the ANJ has developed a guide, in collaboration with the CNIL, to help operators align their practices with GDPR requirements.

Specific topics related to the protection of personal data

After recalling the main principles applicable to data protection, the guide addresses in greater detail three specific topics:

-Player account management and commercial prospecting

-Prevention of excessive or pathological gambling

-Combating money laundering and terrorist financing

The guide was subject to consultation with all licensed operators and reviewed by both the ANJ and CNIL boards.

It is now available to operators, two weeks before the start of the Football World Cup, a key moment for operators in terms of commercial prospecting.