Written by: Kacper Osiewalski, Lead Backend Engineer, Digital Colliers
Reuters put a number on something a lot of us have been watching sideways for a year. Corporate political spending into the 2026 US midterms has hit a record $517M, and online betting is now one of the top industries writing those checks. If your product surface includes political event markets, that sentence should change how you scope Q1.
The reason is simple. When your parent company, your trade association, or a named executive is materially funding candidates in a race your customers are betting on, the compliance perimeter isn't where it was last cycle. Regulators, journalists, and plaintiff firms will draw a line between the lobbying disclosure and the order book. You want to be the operator who drew that line first, internally, with receipts.
The hard deadline is November 2026, but the work is Q1
US midterms settle on 3 November 2026. That's your immovable date. Everything upstream of that, the primaries, the debates, the Senate control markets, will trade heavily from spring onward. Which means the governance work needs to be sitting in production well before summer, not scrambled together in October.
A useful way to think about the calendar:
- Q1 2026: policy, attestations, data joins live in staging
- Q2 2026: full related-party monitoring in prod, tested against primaries
- Q3 2026: incident playbooks rehearsed, external counsel on retainer
- Q4 2026: you're just running the thing, not building it
Operators who compress this into Q3 will be doing forensic work under deadline pressure. That's the exact condition under which the 1 in 4 UK-licensed operators fail their first AML assessment. Different regime, same failure mode: controls built the week before an audit don't survive contact with real data.
Three controls that actually matter
Most of the governance conversation around political markets stays abstract. Here's the concrete version.
Employee attestations, refreshed quarterly. Anyone with access to trading systems, odds models, or settlement affirms in writing: no personal political donations above a disclosed threshold, no household members working for a campaign or PAC on any market you offer, no board seats or advisory roles at organisations funding candidates in your markets. Quarterly, not annually. Campaign staffing changes fast.
Related-party monitoring on the account graph. You already have KYC. What you probably don't have is a scheduled join between your customer table and the public FEC, OpenSecrets, and state-level lobbying registries. Names, addresses, employers, and known aliases of registered lobbyists, campaign staff, and PAC treasurers should flag on account open and re-flag on any material deposit or position change. This is a nightly batch job, not a real-time system. Cost is small. Absence is very hard to defend after the fact.
Lobbying disclosure joined to your own trading data. This is the one most teams skip. Your parent company's lobbying spend, your trade association's donor list, and any named executive contributions are public. Joining that to internal trading exposure by market gives you a single dashboard your DPO and Head of Legal can actually use. When a journalist asks whether your CFO's PAC donation intersects with a Senate market you booked $40M on, you want the answer inside a query, not inside a Slack search.
Cost is not the reason to skip this
Kindred publicly reported a £14M compliance-team cost in 2023. That's the ceiling for a large, mature operator running full-spectrum AML, RCI, and safer gambling. Standing up political-market governance on top of an existing compliance function is not a new £14M. It's a data engineering project with a legal review attached.
Compare that to the downside. UK AML breaches at the serious end run up to 15% of gross gaming yield. GDPR sits at up to 4% of global turnover. US enforcement on political-market operators is less mature, but the trajectory from the SEC, CFTC, and state AGs points the same direction. The regulator you're pricing against isn't the one that exists today. It's the one that exists on 4 November 2026, reading the same Reuters story you did.
What good looks like on 3 November 2026
On election night, the winning operators will have three artefacts sitting in a repo. A dated log of every employee attestation, with diffs. A monitoring history showing which accounts hit the related-party rules and how they were resolved. A dashboard joining lobbying disclosure to trading exposure, per market, per week, going back to Q1. None of that is exotic engineering. It's just work that has to be done before the deadline, not after.