Cookies on the Gambling Commission website

The Gambling Commission website uses cookies to make the site work better for you. Some of these cookies are essential to how the site functions and others are optional. Optional cookies help us remember your settings, measure your use of the site and personalise how we communicate with you. Any data collected is anonymised and we do not set optional cookies unless you consent.

Set cookie preferences

You've accepted all cookies. You can change your cookie settings at any time.

Skip to main content
  1. Home
  2. About us
  3. Data Protection Policy

Policy

Data Protection Policy

The Data Protection Policy for the Gambling Commission.

Published
20 March 2025

Last updated
20 March 2025 - Changes

Document actions
Print or save (opens in new tab)

  1. Contents
  2. 4 - Roles and Responsibilities

4 - Roles and Responsibilities

4.1. All members of staff are responsible for complying with this Policy and completing mandatory training on an annual basis.

4.2. Specific roles are assigned throughout the Gambling Commission to manage the personal data we process and the associated risks in terms of responsibilities, decision making and monitoring compliance.

4.3. The Data Protection Officer (DPO) is primarily responsible for advising on and assessing the Commission’s compliance with the Data Protection Act (DPA) and UK General Data Protection Regulation (GDPR) and making recommendations to improve compliance. The DPO can be contacted at dpo@gamblingcommission.gov.uk.

4.4. Senior Information Risk Owner (SIRO) is responsible for the implementation and maintenance of security standards across the organisation and for ensuring correct procedures and delegations are in place to respond to security incidents. The Senior Information Risk Owner is the Chief Technology Officer.

4.5. Information Asset Owners (IAOs) have responsibility for data protection compliance related to the information assets assigned to them through the Commission’s Information Asset Register.

4.6. Information Management Team (IMT) provide advice, guidance and training on Data Protection issues.

4.7. Information Champions (IC) provide local support to their teams.

Previous section
3. Scope - Data Protection Policy Next section
5. Policy review - Data Protection Policy
Is this page useful?
Back to top