AMLR's beneficial ownership rules were written for a world of reasonably traceable ownership chains -- a company with identifiable shareholders, a controlling individual, a documented structure. Modern football club ownership is, with increasing frequency, none of those things. Multi-club groups, layered fund vehicles and nominee arrangements are becoming the norm at exactly the moment the rule requires them to become transparent. And buried in the same regulation is a football-specific exemption most clubs have not read closely enough -- one that will not apply uniformly, and that is likely to produce genuinely different outcomes from one EU member state to the next.

Ask most people in football compliance what AMLR requires on personnel, and the answer comes back as some version of "a compliance officer and an MLRO." It is a reasonable shorthand, and it is not quite what the Regulation actually says. AMLR does not use the term MLRO anywhere in its own text. Getting this precisely right -- what Article 9 actually requires, what role sits alongside it, and what genuinely counts as "designated" rather than a title on a business card -- is the difference between a compliance structure that would survive scrutiny and one that only looks right on paper.

I write and talk to club C-suite about the Independent Football Regulator for a living. Lagom Sports Compliance advises clubs on it, we draft the guidance and sit across the table from boards trying to work out what a mandatory condition actually requires of them in practice. But every so often it is worth stepping back from the advisory language and asking a more honest question: if I actually sat in the chief executive's chair at a regulated club right now, what would genuinely keep me up at night? Not the version of the IFR that reads cleanly in a briefing note. The version that lands on my desk, my inbox, my own personal record with the Regulator, and the people I am responsible for.

Most discussion of the Independent Football Regulator's discretionary licence conditions treats them as a club-by-club matter: the IFR identifies a concern at an individual club and attaches a condition to that club's licence. What almost no commentary has addressed is that, for financial discretionary conditions specifically, the Act gives competition organisers -- the Premier League, the EFL -- a genuine opportunity to step in and offer a commitment as an alternative to the proposed club-level condition or variation. This is a governance lever competition organisers should be thinking about proactively, not a mechanism clubs discover only once a condition has already landed on their own licence.

A quality of earnings report tells a buyer whether the numbers are real. A legal due diligence report tells a buyer whether the contracts hold up and the litigation history is disclosed. Neither tells a buyer whether the target club would survive an IFR owner suitability determination, whether its governance evidence would satisfy the corporate governance condition, whether its ownership structure creates a beneficial ownership problem under AMLR, or whether its squad cost ratio is quietly heading toward a UEFA significant breach. That gap, not a rounding error in an existing workstream but a missing one, is what this article addresses.

A plan that has never been tested against a realistic adverse scenario is a hypothesis, not a capability. That is the principle at the heart of the fourth and final discipline in the operational resilience framework, and it is the one that most decisively separates genuine resilience from a document sitting in a drawer. Football has already experienced the exact category of disruption this article describes -- more than once, and more recently than most boards realise.

Identifying important business services, setting tolerances for their disruption, and mapping who delivers them are three disciplines a club can complete largely through its own effort. The fourth is harder, because it requires the club to hold a third party to a standard the club does not control. Financial services firms have a specific regulatory framework for exactly this problem. Football clubs, for the most part, do not -- and it shows.

Schedule 9 of the Football Governance Act 2025 gives the Independent Football Regulator the power to require a club to appoint a specialist, nominated by the IFR itself, to help bring an unresolved compliance failure to an end. It is easy to mistake this for a version of the advisory support clubs already engage voluntarily. It is not. The distinction between choosing your own adviser and having one nominated for you by your regulator is the entire point of this article and the most useful thing any club can take from it is exactly what it looks like to never need one.

A single Premier League matchday can involve well over a thousand people who are not employed by the club at all. Stewarding, catering, cleaning, ticketing technology and much of the infrastructure that makes a fixture happen sits with a small number of specialist operators serving much of the league at once. Mapping exposes exactly how concentrated that dependency really is -- and most clubs, when they do this exercise properly for the first time, are surprised by what they find.

Section 65 of the Football Governance Act 2025 is the Independent Football Regulator's most fundamental information-gathering power, and it is also the one most likely to arrive at a club without any warning that an investigation is under way. Unlike the expert reporter power under section 66, which involves the IFR commissioning an independent third party, section 65 is the IFR's own direct power to require any person to hand over, generate or even collect information it does not currently hold. Understanding exactly what a notice under this section can require, and what happens if a club gets its response wrong, matters to every regulated club, not only those already facing a live enquiry.

Most of the published guidance on the Independent Football Regulator's licensing regime, including Lagom Sports Compliance’s own, explains how to apply, what the Threshold Requirements ask for, and what a club's evidence pack needs to contain. Almost none of it explains what actually happens if the application does not succeed. Given that the consequence of an unresolved refusal is a club being unable to operate a team in a specified competition, that is a significant gap. This article closes it.

Ask a club how quickly it would recover from a serious system failure and the honest answer is usually "as fast as possible." That is not an impact tolerance. It is a hope. The discipline that financial services firms were forced to adopt under the FCA's operational resilience framework requires something much harder: a specific, defensible, board-approved limit for how much disruption each critical service can absorb before the harm becomes unacceptable. This article explains how a football club sets one properly, using the club's own most time-critical services as the test case.

Section 66 of the Football Governance Act 2025 gives the Independent Football Regulator a power that has attracted almost no dedicated commentary: the ability to appoint an independent expert reporter to prepare a report on a specific matter at a regulated club, with the possibility that costs or expenses may be made payable by the club under IFR rules. It is frequently confused with the IFR's separate power to appoint a skilled person. The two are not the same tool, they are not triggered at the same point, and understanding the difference matters to any club that wants to know what a genuine IFR enquiry actually looks like.

Ask a club's leadership team what the business actually does and the answer, understandably, will be some version of football. Ask which specific services genuinely cannot be allowed to fail, and most boards have never been asked to answer with any precision. The exercise is narrower and more revealing than it first appears, and doing it properly is the essential first step of any genuine operational resilience programme.

Most football clubs have a business continuity plan. Very few have thought about operational resilience, and the distinction is not semantic. A continuity plan tells you what to do after something breaks. Operational resilience asks a harder question: can the club keep delivering the services that matter, throughout the disruption, not just after it. Financial services firms were forced to make this shift five years ago. Football clubs are about to discover why it matters to them too.

If you hold a senior role at a regulated English football club, or are about to, the Independent Football Regulator may have already assessed you. If not, it will. Since 5 May 2026, every person carrying out one of six Senior Management Functions at a regulated club requires the IFR's prior approval. That approval is personal, not delegable, and the consequences of operating without it are enforceable against you individually.

For most of English football's history, how a club engaged with its supporters was a matter of choice. The Football Governance Act 2025 has ended that. Fan engagement is now a mandatory condition of the IFR operating licence every regulated club must hold. This article explains what the requirement demands, what it does not demand, and why the clubs that treat it as a governance opportunity rather than a compliance burden will emerge from the licensing process in the stronger commercial and reputational position.

Every club that aspires to enter UEFA competition must hold a licence. Every licence depends on satisfying six categories of criteria. Of those six, the legal criteria, and specifically the ownership integrity requirements contained in Articles 63 to 65 of the UEFA Club Licensing and Financial Sustainability Regulations, Edition 2025, are where the compliance burden is most easily underestimated and the consequences of failure are most immediate. This article explains what those requirements actually demand.

The Independent Football Regulator's Owners, Directors and Senior Executives regime came into force on 5 May 2026. It is not a future obligation. It is not a consultation. Every regulated club in the top five tiers of English men's professional football must comply with it now, and most clubs are only beginning to understand what that compliance actually requires.

Every regulated club in the top five tiers of English football must hold an IFR operating licence to compete from the 2027/28 season. Here is exactly how the licensing regime works, what it requires, and what it costs to get it wrong.