Why This Matters

• Millions of UK gamblers may have had their personal data collected illegally, raising risks of profiling, targeted advertising, and data misuse.
• The findings challenge the effectiveness of GDPR enforcement in a high-risk sector like gambling, where data could be used to target vulnerable individuals.
• Potential regulatory action by the Information Commissioner's Office could set precedents for cookie compliance across other industries.

Background

The gambling industry has faced growing pressure over both consumer protection and data privacy. GDPR, which came into effect in 2018, requires websites to obtain clear, informed consent before placing tracking cookies. Cookie banners have become a common tool, but regulators have increasingly scrutinized "dark patterns" that make it easier to accept tracking than to reject it.

Key Perspectives

Regulators (ICO): Likely to view these findings as evidence of systemic non-compliance, potentially prompting investigations or fines to uphold GDPR standards. Gambling operators: May argue that minor technical issues or user error contribute to non-compliance, though the scale (86%) makes this difficult to sustain. Privacy advocates: See the study as further proof that self-regulation fails and that stronger enforcement and clearer rules on cookie banners are urgently needed.

What to Watch

• Whether the Information Commissioner's Office announces an investigation or issues fines against named operators.
• Responses from major gambling firms — any changes to cookie banner design in the coming weeks.
• Broader regulatory push for a UK-specific online data protection code that tightens rules for gambling sites.