Compliance Updates
First and Only GLI-GSF-1 v1.0 Gaming Information Security (GIS) Common Controls Audit Re-Released for Public Comment
Gaming Laboratories International (GLI®) has achieved another milestone, releasing the first and only gaming information security standard, “GLI Gaming Security Framework Module 1 (GLI-GSF-1): Gaming Information Security (GIS) Common Controls Audit.” Now the company has re-released the draft of the module for initial industry-wide comment.
“GLI developed the GSF to address the industry’s strong demand for a comprehensive framework for gaming security,” said Joseph Bunevith, GLI’s Vice President of Government and Regulatory Affairs. “To create the GLI-GSF, we drew on 35 years of knowledge and insights into the gaming industry and conducted a thorough review of global best practices for information security. We worked closely with Bulletproof Solutions and gathered feedback from industry stakeholders to establish this framework for gaming security.”
The draft of the GLI-GSF-1 is provided to industry stakeholders for review and comment. Stakeholders include wagering, gaming and lottery regulators, suppliers, test laboratories, security firms, operators, and industry trade associations. The previous comment period was to familiarize stakeholders with the CIS Controls, while this second comment period will introduce additional common controls specific to the gaming industry, along with Gaming Implementation Group indications.
The comment period is underway and concludes on August 31, 2024. Written comments are encouraged and should be recorded in the comment template linked below and submitted to the “GLI Compliance” mailbox at [email protected].
GLI-GSF-1 v1.0 Public Comment Draft
GLI-GSF-1 v1.0 Comment Template
GLI will process the comments received from industry stakeholders and collaborate as needed to address their interpretation, evaluation, and resolution in the context of the revision to this module.
This module of GLI-GSF sets forth the common controls necessary for auditing a gaming organization. These common controls apply to all forms of gaming, effectively replacing the technical security controls previously established in GLI-27 for land-based gaming operations and, in the near future, will replace the technical security controls previously established in Appendix B of GLI-19 and GLI-33 for interactive gaming and event wagering as other modules are released.
This module of the GLI-GSF integrates the CIS Controls, developed by the Center for Internet Security (CIS), as foundational components to ensure robust security measures across all aspects of gaming operations. The CIS Controls represent a globally recognized set of cybersecurity best practices designed to help organizations bolster their security posture and defend against a wide range of cyber threats. These controls serve as foundational pillars for building a resilient and secure gaming environment, safeguarding against evolving cyber threats, and ensuring the integrity of gaming organizations. The CIS Controls are available for free download at www.cisecurity.org.
Each module in the GLI-GSF is a culmination of industry best practices and is continually updated based on industry feedback. The GLI-GSF was created using a collaborative approach that involved thousands of gaming industry stakeholders. This framework was intended to assist regulators by creating baseline security guidelines that they can adopt and/or utilize as they see fit. In addition to assisting regulators, this framework is of tremendous value to gaming organizations seeking comprehensive guidance and recommendations for enhancing security across all aspects of gaming operations, saving both time and expense.
California
CGCC Gaming Policy Advisory Committee (GPAC) Meeting: Jan 20, 2026
The California Gambling Control Commission (CGCC) has scheduled a meeting of the Gaming Policy Advisory Committee (GPAC) for 1:00 p.m. on Tuesday, January 20, 2026.
The committee is established under Business and Professions Code Section 19817 to provide advisory recommendations to the Commission on regulatory policy, with a specific focus on integrity and problem gambling.
Meeting Attendance Information
The meeting will be conducted in a hybrid format, allowing for both in-person and remote participation.
-
In-Person Location: 2399 Gateway Oaks Drive, Hearing Room 100, Sacramento, CA 95833.
-
Virtual Access: Zoom Meeting Link
-
Phone Access: 1-888-475-4499 (Toll-free) | Meeting ID: 285 757 8614
Key Agenda Items
The agenda focuses on internal governance, regulatory controls for third-party providers, and administrative updates:
-
GPAC Roles and Responsibilities: A review of the mission statement, adherence to the Bagley-Keene Open Meeting Act, and expectations for member conduct and responsiveness.
-
Current Projects: Update and discussion on Third-Party Providers of Proposition Player Services (TPPPS) – Internal Controls, led by subcommittee members Kirill Yermanov and Michael Hill.
-
New Discussion Items:
-
Third-Party Provider Employee Table Coverage.
-
Procedures for Lost or Damaged Employee Badges.
-
-
Administrative Updates: An update on the Category G vacancy (Public Member with accounting/business background).
2026 Committee Composition
The committee consists of 10 members (expanding to 12 if pending legislation like AB 77 is finalized), split equally between the cardroom industry and the public.
| Member Name | Category / Role | Term Expiry |
| Trevor Dewar | Category A (Bureau of Gambling Control) | 12/31/2026 |
| Sosha Marasigan-Quintero | Category B (Problem Gambling/Addiction) | 12/31/2026 |
| Michael Hill | Category C (TPPPS Representative) | 12/31/2027 |
| David Fried | Category D (Cardroom with 25+ Tables) | 12/31/2026 |
| Michael Koniski | Industry Representative | — |
| Emmanuel Macalino | Industry Representative | — |
| Linda Ng | Public Representative | — |
| John Stacy | Industry Representative | — |
| Kirill Yermanov | Public Representative | — |
Advisors: Lisa Wardall (Executive Director) and Jason Pope (Chief Counsel).
The post CGCC Gaming Policy Advisory Committee (GPAC) Meeting: Jan 20, 2026 appeared first on Americas iGaming & Sports Betting News.
Compliance Updates
Finland’s Gambling Reform Is Official – What Happens Next?
The wait is over: The Finnish Parliament has officially approved the new gambling legislation. In a decisive plenary session, MPs voted 158 in favor to 9 opposed, with 32 abstaining. The text remained unchanged from the version presented in previous weeks, solidifying the framework for Finland’s transition from a monopoly to a licensed market.
With the political uncertainty resolved, the focus now shifts to implementation. For operators, this means the race to compliance—and market entry—has effectively begun.
The Confirmed Timeline

With the legislation passed, the roadmap to the market opening is now set. Operators must use the coming months to prepare for a rigorous licensing process.
-
Early 2026: The application window is expected to open. The regulator will begin accepting and reviewing license applications.
-
2026 (Throughout): The “preparatory year.” This period is dedicated to vetting applicants, ensuring technical compliance, and establishing the new supervisory authority.
-
January 1, 2027: The regulated Finnish market officially opens. Licensed operators can go live with betting and online casino services.
Entering the Finnish Market with Nordic Legal
Navigating a new jurisdiction is complex, but it doesn’t have to be inefficient. With extensive experience advising on gaming licences across the Nordic markets, Nordic Legal brings a proven, practical approach to the Finnish process.
Efficiency Through Synergy If you already work with us in Denmark or Sweden, we ensure your Finnish licence application isn’t a “start from scratch” project. We build directly on our existing knowledge of your organisation and systems.
Your usual Nordic Legal contact will coordinate directly with our Helsinki team at no extra cost. This integrated approach saves you time and avoids the frustration of duplicating work you’ve already done for other Nordic licenses.
Our Approach We focus on smart compliance:
-
Reusing documentation where regulations overlap.
-
Anticipating regulatory questions before they are asked.
-
Aligning requirements for technical standards and responsible gambling.
-
Engaging constructively with the Finnish authority to ensure a smooth process.
The Finnish Licence Application Package
To support your entry, we offer a comprehensive package designed to handle the heavy lifting:
-
Translation of all required documents.
-
Guidance and completion of complex application forms.
-
Full project management from start to submission.
-
Direct communication with the Finnish regulator on your behalf.
Next Steps
The window for preparation is narrowing. Contact your usual Nordic Legal advisor today to discuss the new legislation or our Licence Application Package. Alternatively, reach out to us directly to secure your place in Finland’s upcoming regulated market.
The post Finland’s Gambling Reform Is Official – What Happens Next? appeared first on Gaming and Gambling Industry Newsroom.
Compliance Updates
Updated FATF Lists of High-risk Jurisdictions
Reading Time: < 1 minute
The Danish Gambling Authority has called attention to FATF’s (Financial Action Task Force) updated lists of high-risk jurisdictions: the Grey List (jurisdictions under increased monitoring) and Black List (call for actions). Among other things, gambling operators must include FATF’s lists of high-risk jurisdictions when risk assessing players.
Jurisdictions listed on the Grey List:
Algeria, Angola, Bolivia, Bulgaria, Cameroon, the Ivory Coast, DR Congo, Haiti, Kenya, Laos, Lebanon, Monaco, Namibia, Nepal, South Sudan, Syria, Venezuela, Vietnam, the Virgin Islands and Yemen.
Jurisdictions listed on the Black List:
Democratic People’s Republic of Korea, Iran and Myanmar
Gambling operators are required to conduct enhanced customer due diligence (EDD) pursuant to section 17(1) of the Danish AML Act, if a player is assessed to impose a higher risk of the gambling operator being misused for money laundering or terrorist financing.
Gambling operators shall conduct this risk assessment based on Annex 3 to the AML Act (high-risk factors) which includes the FATF high-risk country lists (the so called black list and grey list)
It is not required that gambling operators perform EDD if a country is listed on the FATF’s list. EDD are only a requirement for players from jurisdictions listed in the EU Regulation of High Risk Third Country list pursuant to. 17(2) of the AML Act.
The post Updated FATF Lists of High-risk Jurisdictions appeared first on European Gaming Industry News.
-
Hold and6 days agoPragmatic Play Rings in 2026 with Joker’s Jewels Hold & Spin™
-
iGaming News 20266 days agoSpinomenal Rings in 2026 with Japanese-Inspired “Kami Reign Ultra Mode”
-
Latest News6 days agoFrom ‘Mummyverse’ to Crash Games: Belatra Reviews a Landmark 2025
-
Five Elements Slot6 days agoPG Soft Concludes 2025 with High-Volatility Launch: Mythical Guardians
-
Barbarossa Dragon Empire5 days agoPeter & Sons Expands Ontario Footprint with Major Casino Time Content Deal
-
Akshat Rathee5 days agoIndian Esports 2026: Strategic Growth and the Asian Games Milestone
-
Bespoke Gaming Studio5 days agoCreedRoomz and Casumo Forge Strategic Partnership to Elevate Live Casino Experience
-
Aztec Slot5 days agoEvoplay Unveils Sunstone Riches: An Aztec Adventure Powered by the Sun



