La Rioja has published a comprehensive order in the regional official bulletin establishing mandatory biometric identification systems for gambling access across both physical establishments and online platforms. The regulation, which takes effect on 30 April 2026, represents one of Spain's most stringent approaches to player verification and access control.
The order classifies biometric identification as a matter of "essential public interest" specifically designed to prevent access by minors and individuals registered in the Interdiction Registry. This technical framework moves beyond simple recommendations to establish binding operational requirements for all gambling operators within the jurisdiction.
Two-Stage Verification Process
The new admission control system operates through a dual-phase verification model. During an initial visit, customers must present official identification documents and register their biometric data within the system. Subsequent access relies entirely on biometric recognition technology, with each entry automatically logged with precise date and time stamps.
"This guarantee measure and effective ensures real and automatic compliance with the restrictions provided for in the Gaming Law."
— Jesús Ángel Garrido, Director General de Tributos de La Rioja
The system's core functionality centres on "reliable and unequivocal" identity verification capabilities. Each access point must maintain supervision by designated personnel responsible for monitoring the control process.
Real-Time Integration Requirements
The order mandates direct real-time connectivity between operator systems and La Rioja's Interdiction Access Section. This integration enables immediate blocking of both registration attempts and venue access for prohibited individuals, creating an automated enforcement mechanism for existing gambling restrictions.
Jesús Ángel Garrido positioned the biometric requirement as a public health initiative, describing it as a:
"A tool in service of the public interest, especially in matters of health and consumer protection."
— Jesús Ángel Garrido, Director General de Tributos de La Rioja
The implementation will proceed under comprehensive impact assessments with maximum data protection guarantees, according to regional officials.
Technical Infrastructure
Biometric systems must comply with GDPR Article 9 requirements for processing special category personal data, requiring explicit consent and implementing privacy-by-design principles. Operators typically choose between fingerprint, facial recognition, or iris scanning technologies, with fingerprint systems being most cost-effective at €15,000-25,000 per venue installation.
Implementation Timeline
Operators receive a maximum of one year (one year) to adapt their admission systems to meet the new technical requirements and obtain necessary homologation approvals. This timeline applies equally to land-based venues and online gambling platforms operating within La Rioja's jurisdiction.
The regional approach focuses on regulatory development rather than legislative overhaul. Garrido emphasized:
"We are not seeking to change the Law, but rather to develop it so that it reaches its full potential."
— Jesús Ángel Garrido, Director General de Tributos de La Rioja
Broader Implications for Spanish Gaming
La Rioja's biometric mandate establishes a significant precedent within Spain's decentralised gambling regulatory framework. The order's classification of biometric verification as essential public interest could influence similar measures across other autonomous communities, particularly those seeking enhanced underage prevention capabilities.
The real-time interdiction system integration represents a technological benchmark that may pressure other jurisdictions to adopt comparable automated enforcement mechanisms. Operators with multi-regional exposure will need to evaluate whether standardising biometric systems across territories proves more cost-effective than maintaining jurisdiction-specific compliance approaches.
Similar access control measures have been implemented elsewhere in Spain, as seen when Navarra enforced mandatory access controls for gaming venues and Valencia's comprehensive gaming freeze, halting new licenses for salons and betting establishments.
According to AzarPlus.
