Football has become one of the pioneering sports in integrating Artificial Intelligence (AI) technologies into its operations, as the sport has undergone fundamental changes in its business model over the years. One of the most complex processes in football, scouting, which is critical for team performance, has become largely automated. Traditional methods, such as long travel times and questionable reports, have been replaced by fast and efficient systems based on the analysis of millions of objective data points.

The role of AI in club operations is not limited to analysis processes. By using daily training data, AI can predict players' injury risks, and both external loads (distance covered, acceleration data, etc.) and internal loads (biomarkers, metabolites, etc.) can be systematically monitored. As a result, decision-making processes have become more information-based than ever before. Similarly, AI technology plays a role during matches, analyzing tactics and player movements in real-time, contributing significantly to both opponent analysis and decision support systems.

However, this technological advancement has raised the need for new regulations, particularly in legal systems such as those of the European Union (EU) and the United Kingdom. A study conducted by Darah Holmes, a student in the Master's program in Sports Management and Legal Skills at ISDE (Digital Law Business School) and the Barça Innovation Hub, thoroughly examined the regulatory framework that clubs must comply with to ensure responsible AI usage.

The study emphasizes that the fundamental issue raised by AI applications is transparency. The "black box" effect refers to the inability to understand the rationale behind the outcomes of AI systems. This becomes particularly important when decisions that could lead to a player receiving less playing time or leaving the club at the end of the season are made. It is crucial that these decisions are made based on principles of objectivity and fairness. In this regard, clubs must be able to justify the decisions made by AI systems and provide accessible, understandable information about these decisions.

Another significant issue is the internal biases observed in AI systems. Since AI is developed as a digital reflection of human knowledge, it can carry human errors and biases. Many AI applications have been found to produce discriminatory outcomes, a concern that affects not only the system providers but also the football clubs using these systems. Clubs must regularly monitor and check AI systems to ensure that biases are not perpetuated.

With the advancement of technology, cybersecurity has also become a priority. Data collected by clubs about players or transfer candidates could be vulnerable to malicious cyberattacks. Such breaches could threaten individuals' privacy and professional careers.

The EU's Artificial Intelligence Law will come into effect on August 2, 2026. However, clubs are advised to implement mandatory measures before this date. Otherwise, clubs could face fines up to 35 million euros or penalties up to 7% of their previous year's turnover. Although the UK does not yet have a binding legal framework, the White Paper published in 2023 predicts that flexible and up-to-date regulations will be developed over time.

Regarding legal obligations, it is important to differentiate between the providers and users of AI systems. According to EU regulations, providers are the parties that develop and market the system, while users are those who apply the systems in operational processes. However, in certain special use cases, clubs may assume the role of the provider. Customizing or restructuring systems with their own brand could lead to such responsibility transitions.

Under EU law, using AI systems to profile individuals classifies these systems as "high-risk" in all cases. When clubs use such systems, human oversight must be provided by competent, authorized individuals who have received the necessary training. Additionally, six fundamental legal bases for processing and storing data have been defined:

• Explicit consent from the individual (e.g., using players' biometric data for analysis),

• Contractual necessity (linking statistics to a bonus system),

• Compliance with legal obligations (tax or employment reporting),

• Protection of vital interests (emergency medical intervention),

• Public interest (stadium security, etc.),

• Legitimate interest (using data for marketing purposes, etc.).

In conclusion, clubs must not only classify the AI systems they use within the legal frameworks but also establish risk management systems to periodically review these systems. Moreover, clear and transparent communication between clubs and system providers is essential to ensure that the systems operate fairly, respect individual rights, and serve their intended purpose.

Holmes' study notes that while these obligations may seem complex and challenging at first, compliance processes can be manageable in practice if clear policies and procedures are developed. It emphasizes that football clubs need to adopt a proactive approach to both AI integration and legal compliance