SB 5196
In CommitteeSenate
Gambling commission/PRA
Concerning public inspection and copying of proprietary financial and security information submitted to or obtained by the gambling commission.
This status may be delayed. See Action History below for the latest updates.
How does a bill become law?
- Introduced: The bill is filed and assigned a number.
- Committee: A subject-matter committee holds hearings, takes public testimony, and decides whether to advance the bill.
- Floor Vote: The full chamber (House or Senate) debates and votes on the bill.
- Opposite Chamber: The bill repeats the committee and floor vote process in the other chamber.
- Governor: The Governor reviews the bill and decides whether to sign or veto it.
- Signed: The bill has been signed into law.
AI Analysis
This bill adds strong protections for sensitive financial and security data submitted to the Gambling Commission, making it exempt from public disclosure under the Public Records Act (PRA). It aims to safeguard proprietary business and security information — such as internal system designs, financial statements, and cybersecurity details — to protect competitive and operational integrity, while still requiring disclosure of routine quarterly reports.
- Amends RCW 42.56.270 to explicitly exempt 'proprietary financial and security information' submitted to or obtained by the Gambling Commission from public disclosure under the Public Records Act (PRA).
- Defines 'proprietary financial and security information' to include financial statements, bank records, player tracking data, security camera specs, building access controls, facility schematics, firewall configurations, source code, and risk assessment reports.
- Clarifies that quarterly license reports are NOT exempt — meaning some basic financial and operational data remains publicly available.
- Expands the scope of protected information to include data from tribes operating gaming facilities under approved tribal/state compacts.
- Adds new subsection (10)(b) specifically listing examples of exempt information: internal control documents, auditor reports, financial statements, and security system details for gaming facilities.
Who is affected
- Gambling license applicants and licensees — Gambling license applicants and licensees (including tribes with compacts) must submit sensitive financial and security data that is now protected from public disclosure under this bill.
- Gaming facility operators — Gaming facilities (e.g., tribal casinos, racetracks with slot machines) that provide internal operational, security, and equipment data to the Gambling Commission will have that information shielded from public records requests.
- General public / media / watchdog groups — The public may have less access to detailed financial and security information about gambling operations, reducing transparency around how gaming facilities are run and secured.
- Gambling Commission — The Gambling Commission gains clearer legal authority to withhold certain sensitive data, but must still comply with other public records laws for non-exempt information (e.g., quarterly reports).
Pro/Con Analysis
Stronger case for concerns
Potential Benefits (2)
Protecting proprietary security and operational system details (e.g., firewall configurations, source code, risk assessments) helps prevent cyberattacks, intellectual property theft, and competitive sabotage against gaming operators—supporting operational continuity and reducing costly downtime or breach-related losses. This strengthens the industry’s resilience without directly harming the public, as routine disclosures (e.g., quarterly reports) remain intact.
Business & EmploymentRef: Sec. 1, RCW 42.56.270(10)(b)(iii)Exempting financial statements, bank records, and loan agreements from public disclosure helps protect competitive positioning and proprietary business strategies, reducing the risk of competitors exploiting sensitive financial data—potentially encouraging investment in Washington’s gaming sector by improving perceived security of business intelligence.
Business & EmploymentRef: Sec. 1, RCW 42.56.270(10)(b)(i)
Potential Concerns (4)
Withholding detailed security schematics, firewall configurations, and incident response plans from public view reduces transparency around how gaming facilities protect against cyberattacks, theft, and physical threats—information that could be critical for assessing whether facilities meet baseline public safety standards. While the Gambling Commission may use this data internally, the public and oversight bodies lose the ability to independently verify security adequacy, especially in light of rising casino-related crime and fraud concerns in other states.
Public SafetyPeopleRef: Sec. 1, RCW 42.56.270(10)(b)Excluding quarterly license reports from the exemption means only high-level financial summaries remain public, while granular data—including player tracking, cash-out procedures, and audit reports—are shielded. This limits the public’s ability to monitor for money laundering, problem gambling mitigation, or disproportionate impacts on vulnerable communities, especially given Washington’s history of tribal gaming compacts and concerns about predatory practices in commercial casinos.
Public SafetyPeopleRef: Sec. 1, RCW 42.56.270(10)(b)(i)Local governments—especially municipalities hosting tribal or commercial casinos—lose the ability to independently audit facility operations, security protocols, or economic claims made by operators, reducing their capacity to enforce local zoning, tax compliance, or emergency response planning. This asymmetry in information access weakens local oversight despite direct community impacts.
Local GovernmentPeopleRef: Sec. 1, RCW 42.56.270(10)(b)(ii)Shielding player tracking data and personally identifiable information control procedures from public scrutiny reduces accountability for how sensitive consumer data is handled—especially concerning problem gamblers or individuals subject to self-exclusion programs—potentially undermining informed consent and data privacy rights under Washington’s Consumer Protection Act and emerging data protection norms.
Rights & LibertiesLean peopleRef: Sec. 1, RCW 42.56.270(10)(b)(iii)
Who Is Most Affected
Tribal gaming operators benefit from stronger protection of sensitive financial and security data, reducing competitive exposure and cyber risk. However, they may face increased scrutiny from federal regulators (e.g., NIGRC) or internal tribal oversight bodies that lack access to the same level of transparency.
Commercial casino operators (e.g., racetrack casinos) gain clearer legal shielding for proprietary systems, reducing legal exposure to FOIA-style requests. However, they may face heightened regulatory pressure to self-certify security compliance without external verification, increasing liability risk if breaches occur.
Local governments lose the ability to independently verify facility security, financial claims, or environmental compliance—especially problematic for municipalities hosting large gaming facilities. This weakens local oversight capacity and may increase public safety risks if facilities are under-resourced or mismanaged.
Watchdog groups, journalists, and researchers lose access to detailed operational data, limiting their ability to investigate money laundering, problem gambling impacts, or regulatory capture. However, routine quarterly reports remain public, preserving some baseline accountability.
Gambling Commission staff gain clearer legal authority to withhold sensitive data, reducing legal exposure to PRA requests. However, the agency retains responsibility for verifying claims of proprietary status and may face increased internal review burden to avoid over-withholding.