18 January 2018
Brussels – The European Gaming and Betting Association (EGBA) has asked the Norwegian Data Protection Inspectorate (DPI) to urgently investigate a Norwegian payment blocking scheme for serious breaches of the privacy of Norwegian citizens when conducting online payments. The scheme established by the Norwegian Gaming Authority (NGA) is in contravention of Norwegian Data Protection laws and the European Convention on Human Rights according to the EGBA, representing Europe’s leading online gambling operators.
The Norwegian Payment Blocking Regulation exists since 2010 and essentially prohibits businesses from carrying out payments of bets and prizes in online gambling services which do not have a licence in Norway. Despite the NGA’s own analysis which determined the payment blocking regulation to be ineffective, in March of 2017 the NGA suddenly imposed orders on Norwegian banks to block transactions to 7 identified account numbers.
According to the EGBA, the manner in which the NGA obtained that account number information breaches the privacy protection rules of Norwegian citizens, including citizens that do not have any financial relation with online gambling service providers. The only place the NGA could have obtained the information about these account number is from a database containing data of Norwegian citizens (the Foreign Exchange Register) to which the NGA has no right to access according to Norwegian law. To obtain the account information the NGA would have scanned and obtained login data of payment details belonging to Norwegians citizens that may or may not be related to online gambling services – and this contravenes Norwegian citizens’ privacy rights as laid down by the European Convention of Human Rights.
Maarten Haijer, Secretary General of EGBA, comments: “Online data protection and the right to privacy are a major concern to all Norwegian and European citizens and rightly so. As more and more of our information goes online, we must be able to trust that our online data is protected. The data protection rules for online gambling companies are very stringent, and these companies are rightly expected and forced to comply with those rules – but the law requires the same from public authorities like the NGA. In this case we believe the NGA has made a clear breach of data protection rules which the Norwegian DPI should investigate and take appropriate action if necessary.”
“The underlying issue is that the current Norwegian online gambling law does not fit with today’s digital reality. Rather than focusing on keeping the Monopoly model in place with increasingly repressive but ineffective enforcement measures, the regulation should focus on the actual needs of Norwegian consumers and provide a safe and competitive offer which enables consumers to play online in a secure and highly regulated environment based on Norwegian law,” Haijer added.
– ENDS –
For more information, please contact:
European Gaming and Betting Association (EGBA)
About the EGBA:
The EGBA is an association of leading European gaming and betting operators Bet-at-home, BetClic, GVC Holdings PLC, Expekt, Kindred Plc, ZEAL Network, Betsson Group and Bet365. The Gibraltar Betting and Gaming Association (GBGA) and Branschföreningen för Onlinespel (BOS) are affiliate members of EGBA. As a Brussels-based non-profit association, EGBA promotes the rights of more than 20 million adult European citizens to participate in online gambling of their choice in an informed, regulated, safe and secure environment. While online gambling remains a smaller part of the total gambling market (15%), based upon innovation, technology and digital consumer demand, online gambling transformed itself into an industry champion of the European digital economy with material spin-off effects towards other digital economies and strong synergies with sports. EGBA members have invested more than €600M into digital security and contributed to sports with more than €800M, mainly via sponsorship deal and purchasing innovative sports streaming rights. www.egba.eu