Premier League Clubs Face £100,000 Fine Under New Cybersecurity Rules
Premier League clubs could be hit with fines of up to £100,000 if they fail to meet newly introduced cybersecurity requirements.
The rule has been introduced for the first time and applies to all 20 clubs ahead of the 2026/27 season.
The Premier League has placed greater emphasis on protecting clubs from cyberattacks, with mandatory measures covering areas such as data backups, incident response, risk management and security checks.
Clubs must meet the first set of requirements by April 30, 2027. An interim review must also be completed before January 10, with clubs that fall short given 28 days to submit a plan explaining how they will address the issues.
Failure to comply could result in sanctions of up to £100,000. The Premier League board can deal with breaches through its disciplinary procedures or refer cases to an independent commission.
The cybersecurity measures were approved by Premier League clubs at the Annual General Meeting in June.
Meanwhile, fans are set to gain greater insight into controversial refereeing decisions during the new campaign.
From the 2026/27 season, the full verdicts of the Key Match Incidents Panel will be made public. The panel’s weekly assessments, which were previously shared privately with clubs, will now be released in full.
The Premier League Match Centre will also provide direct quotes from officials explaining major decisions after matches, while Ref Cam will feature audio for the first time.
