The Premier League has introduced a new package of rules affecting all 20 top-flight clubs, with a particular focus on cybersecurity.
According to The Athletic, clubs that fail to comply with the new requirements could face fines of up to £100,000.
Just days before the start of the new season, the league announced that, for the first time, it will implement a mandatory set of cybersecurity measures designed to protect clubs from cyberattacks.
Cybersecurity becomes mandatory
Under the new rules, all clubs will be required to meet specific standards in key areas, including:
- Data storage and backups;
- Cyber incident response;
- Risk management;
- Verification and security of systems.
Violations will not result in points deductions, but the Premier League can impose disciplinary measures and financial penalties.
The league’s board may deal with a breach through its own disciplinary process or refer the matter to an independent commission.
Clear deadlines for implementation
Clubs must meet the first set of requirements by 30 April 2027.
Before that deadline, an interim assessment must be completed by 10 January 2027.
If a club is found to be failing to meet the required standards, it will have 28 days to submit a detailed plan to the Premier League outlining how it intends to comply.
The measures are aimed at protecting clubs against cyberattacks and threats to their digital systems, data and technological infrastructure.
Additional requirements are expected to be introduced over the following two years.
Premier League clubs voted in favour of the new cybersecurity package during the league’s Annual General Meeting in June.
Greater transparency over refereeing decisions
Cybersecurity is not the only major change for the new season.
The Premier League has also decided to give fans greater access to assessments by the Key Match Incidents Panel (KMI), which reviews controversial refereeing decisions.
Previously, the opinions of the panel’s five members were shared with clubs but were not fully made public.
From the 2026/27 season, that will change. The panel’s assessments will be published in full, including comments from each member.
The KMI consists of three former players or coaches, one Premier League representative and one representative from the refereeing body, Pro Ref.
“Match Centre” to provide more explanations
The Premier League will also expand its Match Centre, where direct statements from officials explaining post-match decisions are expected to be published.
Another new feature will be the use of Ref Cam, a camera worn by the referee that is expected, for the first time, to include audio.
The aim is to help fans better understand the decision-making process and the reasoning behind controversial incidents.
However, greater transparency could also increase pressure on referees, as their decisions will be examined and publicly debated in greater detail.
