Webinar recording: EU Legislation Impacting UK Football Clubs
Assessing the regulatory risks most clubs are not preparing for.
Brexit ended the United Kingdom's membership of the European Union. It did not end the reach of EU law into English football.
EU obligations attach to activities, to counterparties and to data. An English club can reach all three by trading with European clubs, signing European players, taking European sponsorship money, sitting in a group with a European sister club, or selling tickets and shirts to supporters in the EU. Most boards can describe their domestic regulatory position with reasonable confidence. Very few can describe their European one.
In our latest webinar, co-founders Isabel Lemes and Jonathan Greenstein mapped where EU legislation actually reaches an English club. They covered what evidence a club is likely to be asked for, and what a board can reasonably do about it now. The full recording is below.
Watch a recording of the webinar below:
The exposure is rarely the club itself
The most costly assumption we hear is that an obligation sitting with somebody else does not affect the club. When a European bank, sponsor, investor, agent or club has a due diligence obligation, it discharges that obligation by asking you. The request arrives as a contractual warranty, a questionnaire, a request for beneficial ownership evidence, or a payment that does not move until a question is answered.
The obligation belongs to the counterparty. The delay, the disclosure and the commercial friction belong to the club.
The session sets out the three routes by which EU rules reach a club with no EU establishment at all:
An EU footprint. This means a subsidiary, sister club, academy or trading entity inside the Union.
EU counterparties. These include European clubs, agents, sponsors, lenders and investors.
EU markets and data. This covers selling goods or services to people in the Union, or monitoring their behaviour.
Why 2029 is not the date to start
Under EU Regulation 2024/1624, professional football clubs and football agents come inside the European anti-money laundering framework from 10 July 2029. Because that date is three years away, it tends to be filed under future work, and nobody owns it.
Meanwhile, clubs keep signing multi-year sponsorship agreements, agent arrangements and group funding structures that will still be running when the regime starts. The practical question is not whether a club is compliant in 2029. It is whether the transactions it enters into this season will be explainable in 2029, with documents, to anyone entitled to ask.
Six exposure areas, one risk picture
The webinar works through six areas, each looked at as part of the same underlying question: can the club explain and evidence its own transactions, data and supply relationships?
Anti-money laundering and financial crime. This covers counterparty due diligence, beneficial ownership, and source of funds and wealth. It also shows the direct overlap with the Independent Football Regulator's provisional licence application.
Data protection. Topics include when EU data protection law applies directly, the EU representative requirement, and the risks in medical, biometric and scouting data.
Agents and transfers. This explains how the Diarra judgment and FIFA's transfer reforms are reshaping the club contract file.
Supply chain and sustainability. Due diligence expectations reach clubs by contract, through sponsors, lenders and parents that are themselves in scope.
Digital, AI and the fan. This covers biometric ticketing, AI procured through suppliers, and accessibility requirements for services sold into the EU.
Sanctions and screening. The section looks at why screening once at onboarding is not enough, and what an ownership and control test adds.
Worked examples and a full gap assessment
To make the framework practical, the session applies it three ways:
A four-question perimeter test for a single transaction.
A multi-club ownership scenario, which is the fastest route into European scope.
A full EU exposure gap assessment of Ashfield Rovers FC, a fictional Championship club.
Ashfield is realistic and competently run, yet it scores 14 out of 30. That result does not come from bad decisions. It comes from the club never having been asked to evidence this dimension. The assessment ends with a sequenced ten-week remediation plan.
The central message is that most of the work is shared. One due diligence standard, one screening cycle, one data map and one register of obligations can serve both the EU perimeter and the domestic licensing application. With the IFR's provisional licence application window opening on 1 November 2026, that shared foundation is already being built at many clubs.
Questions asked in the session & responses
Does the European anti-money laundering regulation apply to English clubs?
Not directly, as a general matter. It applies to professional football clubs and football agents within the European Union, from the tenth of July 2029, and for clubs it is directed at defined categories of transaction. Member States may also exempt certain lower-risk professional football clubs following the conditions and risk assessment set out in the Regulation.
English clubs are affected indirectly, and often substantially, through European group entities, European counterparties, agents, transfers, sponsors and investors. Separately, the domestic licensing application already asks English clubs to explain how they satisfy themselves that proposed funding is lawful and not illicit.
We have no European entity and no European sponsor. Is there anything we should do at all?
Yes, and it is a short list. Confirm the position rather than assuming it, because retail, ticketing and scouting often reach the European Union when nobody expected them to. Then make sure that the due diligence, screening and record-keeping you are already doing for domestic purposes is done to a standard that would survive a counterparty asking.
Our owner is buying a club in Europe. What changes for us?
Practically, a great deal. Group-level policies and standards tend to be set once and applied across both clubs. Shared systems create cross-border data flows that need a documented basis and processor terms. The same agents and intermediaries will often act for both clubs, which means the same counterparties are assessed under two regimes.
The single most useful step is to agree, at the point of acquisition, which policies are group-level and which are local, and who owns the difference.
Does the United Kingdom's adequacy status mean we can ignore European data protection law?
No. Adequacy addresses one question: whether personal data can flow from the European Economic Area to the United Kingdom without additional safeguards. It was renewed in December 2025 and runs to December 2031, and it is monitored.
It does not affect whether European data protection law applies to your own processing. If you offer goods or services to people in the Union or monitor their behaviour, it can apply directly, including the requirement to designate a representative in the Union.
Who should own this work inside the club?
One named person with enough authority to ask questions of finance, football operations, commercial and data, and with a direct route to the board. The role can be part of a wider remit at most clubs, but it cannot be an undefined share of several people's jobs.
The practical test is whether there is somebody who could answer a counterparty's due diligence questionnaire without convening a working group.
How much of this does our licensing work already cover?
A substantial amount of the foundation, and very little of the European-specific perimeter. Beneficial ownership work, source-of-funds evidence, governance, risk management and compliance ownership can transfer across.
What licensing does not do is tell you which of your entities, counterparties and data flows touch the European Union, or prepare you for a counterparty's evidence requests. That gap is the work we have described today.
Our agents are based in Europe. Does that change how we contract with them?
In time, yes. From 2029 football agents in the European Union become obliged entities in their own right, with no turnover threshold and no exemption route of the kind available to some clubs. That means they will be conducting due diligence on you, and asking for evidence about your ownership and funding.
It also means agent engagement terms should already anticipate information sharing, data protection terms and record retention. Those clauses are much easier to include at engagement than to negotiate in the middle of a transfer.
What should a board do in the next thirty days?
Commission the perimeter map and give it an owner and a date. Ask for a one-page summary of every European counterparty relationship, including the sister club if there is one. Ask whether the club has a representative in the European Union, and whether it needs one. Ask for the inventory of artificial intelligence systems in use.
Then agree one due diligence standard and one screening cycle, and put both on the board calendar for review. That is a month of focused work, not a programme.
Do clubs have responsibility to appoint a MLRO/money laundering reporting officer?
Not directly, saying that, the IFR has powers to set thresholds requirements on financial and non-financial resources, including governance. This is where expectations of financial crime systems and controls apply. Having appointed someone with appropriate expertise in the field will ensure the club has taken into consideration Financial crime risks within the club environment and it managing such risk and the regulator expectations.
It is with noting that the IFR is still consulting on detailed rules and guidance on that point.
The other angle to consider is the impact of EU AML regulations, uK clubs are not obliged entities in their own right, unless they are part of a wider group with EU hubs. So if they are a stand along UK based entity they will still be required to respond and provide appropriate information on AML queries related to the club. So appoint someone capable of dealing with complex AML regulations both domestic and foreign seems the appropriate step forward
What is your next step?
European legislation will not arrive at your club as a letter from Brussels. It will arrive as a question from a bank, a clause in a sponsorship agreement, or a request for evidence about a payment made three years earlier.
Lagom Sports Compliance offers confidential exposure reviews and practical support across European obligations, IFR licensing, governance, risk, compliance and anti-financial crime.
Get in touch to discuss your club's position today.
Ashfield Rovers FC is a fictional club used for illustration, and its scores are not a regulatory or industry benchmark. This article is for general information only and does not constitute legal or regulatory advice. Regulatory dates are correct at the time of publication.