UKGC Data Destruction Contract Revealed

Article Content

UKGC Discloses Details of Confidential Waste Contract

A Freedom of Information (FOI) request has revealed details of the UK Gambling Commission's (UKGC) contract for the destruction of confidential waste. The disclosure outlines the cost, supplier, and duration of the agreement, offering a glimpse into the regulator's operational procedures for data security.

According to the response, published following a request dated 2 June 2025—a date which appears to be a typographical error on the Commission's website—the regulator has a contract valued at £3,800 for this service.

Why This Data Matters

As the regulatory body for gambling in Great Britain, the UKGC handles a vast amount of sensitive information. This includes confidential commercial data from licensed operators, details of investigations, and potentially personal data from consumers involved in disputes or complaints. The secure and permanent destruction of physical documents and data is a critical component of its responsibilities under UK data protection law. This disclosure provides assurance that professional measures are in place to handle such material.

Breakdown of the Contract

The key details from the disclosure are as follows:

• Supplier: The contract is held by Restore Datashred, a specialist secure data destruction company.
• Contract Value: The total value is £3,800.
• Duration: The initial term is 14 months, starting on 13 December 2024.
• Procurement: The service was procured via the ESPO 981-23 framework, a purchasing vehicle used by public sector bodies to ensure value and compliance.
• Extensions: The contract includes two optional 12-month extensions, which could see the agreement run until February 2028.

A decision on whether to use these extension clauses has not yet been made.

Transparency and Redactions

The Commission responded to the request under the Environmental Information Regulations 2004 (EIRs), as waste management falls under this specific legislation rather than the more commonly cited Freedom of Information Act.

While the UKGC provided most of the requested information, it redacted the personal details of the procurement officer and senior officer responsible for the contract. This is a standard procedure for public bodies, which cited regulation 12(3) of the EIRs to protect the personal data of staff in non-senior or non-public-facing roles. Instead, the Commission provided a generic email address for its procurement department: procurement@gamblingcommission.gov.uk.

Significance for the Industry

The use of a dedicated, professional shredding service like Restore Datashred demonstrates that the UKGC is following established best practices for data lifecycle management. While the contract value is modest, it represents a specific and necessary operational cost for a regulator charged with overseeing a data-rich industry. This level of transparency helps build public confidence that sensitive information is being handled and destroyed responsibly.