DGOJ renews Spain’s National Security Scheme certification

The Directorate General for the Regulation of Gambling (DGOJ), Spain’s national gaming regulator, has successfully renewed its certification under the National Security Scheme (ENS). This development underscores the regulator’s continued compliance with strict cybersecurity and data protection standards that apply across the country’s public sector.

The renewal followed a comprehensive biennial audit conducted by AENOR CONFIA, an accredited entity tasked with assessing institutions against the ENS framework. With the certification confirmed, the DGOJ has reinforced its standing as a public body committed to safeguarding the integrity of digital infrastructures and sensitive data within Spain’s regulated gambling environment.

Understanding the National Security Scheme

The National Security Scheme, commonly referred to by its Spanish acronym ENS, is a regulatory framework that sets out minimum requirements for information systems operated within the public sector. It was established under Royal Decree 311/2022 and functions as a cornerstone of Spain’s digital governance policies.

The ENS outlines principles, security measures, and technical standards designed to mitigate risks in public administration systems. The ultimate aim is to ensure the confidentiality, availability, and integrity of information handled by state institutions.

For the DGOJ, maintaining compliance with the ENS goes beyond regulatory formality. As a body entrusted with supervising Spain’s licensed gambling market, the regulator deals with sensitive financial and personal data on a daily basis. From operator licensing information to consumer details, the volume and sensitivity of the data managed require strict adherence to cybersecurity protocols.

The role of AENOR CONFIA in the audit

AENOR CONFIA, a recognized certification body in Spain, carried out the audit that confirmed the DGOJ’s continued compliance with the ENS. Its involvement is important not only because of its technical expertise but also because of its independence from government operations.

The audit process assessed whether the regulator’s systems and procedures aligned with the security measures mandated by the ENS. This included reviewing technical safeguards, organizational policies, and incident response capabilities. The successful outcome confirms that the DGOJ’s systems meet the standards expected for handling sensitive information securely.

The DGOJ within Spain’s regulatory framework

The DGOJ is a public agency operating under the Ministry of Social Rights, Consumer Affairs, and Agenda 2030. Its mandate includes regulating, authorizing, supervising, and controlling gambling activities conducted at the national level in Spain. This covers both online gambling operators and broader activities that fall under state jurisdiction.

By ensuring compliance with national and European Union regulations, the DGOJ plays a critical role in balancing market growth with consumer protection. The renewal of the ENS certification is part of that broader responsibility, as secure data management is increasingly linked to safeguarding players and maintaining trust in regulated gambling.

Link to recent market performance

The ENS renewal coincides with the regulator’s recent publication of its Q2 2025 report on Spain’s gross gaming revenue (GGR). The figures highlight the continuing expansion of the country’s regulated gambling market.

Deposits during the quarter rose 23.7% year-on-year, reaching €1.35 billion ($1.59 billion). GGR itself amounted to €410.3 million, an increase of 18.6% compared to the previous year. Within this total, casino games accounted for 52.7%, while sports betting contributed 41.8%. Other verticals such as poker and bingo represented smaller but still notable portions of the overall revenue.

New customer registrations also increased, with 504,853 accounts opened during the quarter—an 11.7% year-on-year rise. This growth was accompanied by a sharp increase in marketing expenditure, which rose 37.1% to €164.5 million. These figures underline the competitiveness of Spain’s regulated market and the importance of robust oversight to ensure industry practices align with consumer protection policies.

Focus on safer gambling initiatives

Beyond financial indicators, the DGOJ has recently prioritized player protection. In August, the regulator published a draft framework for a new system designed to identify early signs of risky gambling behavior. The initiative stems from a Royal Decree, which grants the regulator two years to design and implement the system.

The objective is to introduce proactive monitoring tools that can detect harmful patterns before they escalate. Such mechanisms are expected to complement existing responsible gambling measures already embedded in Spain’s legal framework.

By focusing on prevention, the DGOJ aims to strike a balance between market growth and social responsibility. The regulator’s efforts mirror a broader European trend where national authorities are placing increasing emphasis on early detection of gambling-related harm.

Why certification matters for Spain’s gambling market

For consumers, the renewal of the ENS certification may appear largely technical. However, its implications are far-reaching. The certification provides assurance that the regulator operates under secure and resilient digital systems. In a market where operators process large volumes of personal and financial data, ensuring security across the regulatory chain is crucial.

For operators, the certification confirms that the regulatory authority itself meets high standards of compliance. This strengthens Spain’s position as a stable jurisdiction for licensed operators and investors. A regulator that demonstrates best practices in cybersecurity sets the tone for the entire industry.

For policymakers, the certification supports the credibility of Spain’s regulatory system at both national and European levels. It shows alignment with broader EU initiatives on cybersecurity, digital transformation, and consumer rights.

Future outlook for DGOJ and regulatory oversight

With the ENS certification secured for another biennium, the DGOJ is positioned to continue its oversight of Spain’s gambling industry with strengthened credibility. Looking ahead, the regulator is likely to focus on three main priorities:

• Implementing the early detection system for risky gambling behavior within the two-year deadline.
• Ensuring continued compliance with both national and EU standards on data security and consumer protection.
• Monitoring the industry’s growth trajectory, particularly in light of rising marketing expenditures and increasing customer registrations.

Spain’s regulatory framework has already established itself as one of the most structured in Europe. The DGOJ’s renewed certification reinforces that position and signals its ongoing commitment to safeguarding consumers and ensuring that market growth does not come at the expense of public trust.

Conclusion

The renewal of the National Security Scheme certification marks an important step for the Directorate General for the Regulation of Gambling as it continues to oversee Spain’s dynamic gaming sector. By passing the biennial audit, the regulator has reaffirmed its commitment to protecting sensitive data, ensuring transparency, and maintaining compliance with both national and European standards.

This achievement also comes at a time of significant growth in Spain’s gambling market, with rising revenues, new customer registrations, and increased marketing activity. Against this backdrop, the DGOJ’s strengthened focus on player protection and the development of tools to detect risky behavior highlight a forward-looking regulatory strategy.

Ultimately, the ENS certification serves not only as a technical validation of secure operations but also as a broader assurance to consumers, operators, and policymakers that Spain’s gambling regulator is committed to safeguarding the integrity of the industry while upholding public trust.

FAQs

What is the National Security Scheme (ENS)?
The ENS is Spain’s regulatory framework for information security in public administration systems, established by Royal Decree 311/2022.

Why is ENS certification important for the DGOJ?
The certification ensures that the regulator meets high standards of cybersecurity and data protection, which is vital when handling sensitive information.

Who conducted the DGOJ’s ENS audit?
The accredited certification body AENOR CONFIA carried out the biennial audit of the DGOJ’s systems and procedures.

How often is ENS certification renewed?
The certification is subject to renewal every two years, following a comprehensive audit process.

What does the DGOJ regulate in Spain?
The DGOJ oversees and supervises gambling activities conducted at the national level, ensuring compliance with Spain’s gambling laws.

What did the Q2 2025 GGR report reveal?
The report showed a 23.7% rise in deposits to €1.35 billion and an 18.6% increase in GGR to €410.3 million compared to the previous year.

Which gambling segments are most popular in Spain?
Casino games accounted for 52.7% of gross gaming revenue in Q2 2025, followed by sports betting with 41.8%.

What is the DGOJ’s new responsible gambling initiative?
The regulator is developing a system to detect early signs of risky gambling behavior, with a two-year timeline for implementation.

Why are marketing expenditures relevant?
Marketing spend rose 37.1% in Q2 2025, which may have contributed to the rise in new account registrations.

How does ENS certification benefit consumers?
It assures players that the regulator manages data securely, which strengthens trust in Spain’s regulated gambling framework.