Premier League clubs risk an own goal with cyber security failures - VinciWorks

Premier League Introduces Mandatory Cybersecurity Standards, Backed by Fines of Up to £100,000

The Premier League has introduced mandatory cybersecurity requirements for its clubs for the first time, with non-compliant clubs facing fines of up to £100,000. The rules, which apply from the start of the 2026-27 season, mark a shift away from the league’s previous non-prescriptive security guidance towards a formal framework with fixed deadlines and evidence-based assessment. Enforcement will sit within the Premier League’s existing disciplin…

Premier League clubs risk an own goal with cyber security failures - VinciWorks

For a Premier League club, a £100,000 fine may barely register alongside transfer fees and player salaries. Its appearance in the Premier League rulebook is still significant. For the first time, all 20 clubs face mandatory cyber security requirements, annual compliance assessments and potential disciplinary action if they fail to meet them. The new rules form part of the Premier League Handbook for the 2026/27 season, and must be implemented by…