SPAIN Law and Practice Contributed by: Joaquín Jofre Fernández-Abascal, Jofre Sports Law
Core Legal Framework GDPR
ical staff to monitor GPS-based metrics (workload, heart-rate variability) to prevent injuries. Spectator engagement Spanish clubs use customer relationship management (CRM) systems to analyse fan spending habits and digital footprints. Equipment and public policy The Spanish government, through the CSD, leverages the DEPORTEData portal. This open-data initiative tracks sports habits and facility usage to guide public investment in infrastructure and equipment. Commercial Opportunities The sports analytics market in Spain is a primary driver of the digital economy, presenting several high-growth avenues. Hyper-personalised sponsorships Data allows brands to move beyond generic logos. By analysing fan segments, sponsors can deliver tar - geted digital campaigns, increasing ROI for brands. Scouting and asset valuation Data-driven scouting (using platforms such as Stats Perform) allows smaller Spanish clubs to find under - valued talent globally, creating a “buy low, sell high” commercial model that sustains their financial health. Betting and media rights High-speed data feeds are sold to betting operators and broadcasters to create real-time infographics and interactive betting markets, which are massive rev - enue streams in the Spanish market. Fitness and health tech There is a booming B2B market for start-ups providing Software as a Service (SaaS) solutions to local gyms and amateur academies that want to replicate pro - fessional-grade data tracking for the general public. 5.8 Data Protection In Spain, the legal framework for sports data is a com - bination of EU regulation and specific national adap - tations.
As an EU member, Spain applies the GDPR directly, governing any data processing involving EU citizens. Organic Law 3/2018 This Spanish law adapts and supplements the GDPR. It is crucial because it clarifies specific scenarios, such as the mandatory appointment of a Data Protection Officer (DPO) for sports federations and entities that handle data of minors or large-scale processing. The Sports Law (Law 39/2022) This updated national law integrates data protection principles into the management of professional and amateur sports, particularly regarding the rights of athletes. How the GDPR Affected the Spanish Sports Sector The shift to the GDPR necessitated a move from “reactive” to “proactive” compliance. Key impacts Information regarding an athlete’s health, injuries and biometric performance is treated with the highest level of protection. Use of this data now requires explicit, granular consent or a clear “public interest” justifica - tion (eg, anti-doping). Transparency requirements Clubs and leagues must provide detailed Privacy Policies explaining exactly who has access to perfor - mance data and how long it is stored. Sanctioning power The Spanish Data Protection Agency (AEPD) has become one of the most active in Europe, frequently auditing sports organisations. Interesting Examples and Case Law The LaLiga App In a landmark case, the AEPD fined LaLiga EUR250,000. Its official mobile app used the microphone and GPS of users’ phones to detect whether they were in a bar broadcasting pirated football matches. The AEPD ruled that users were not adequately informed that include the following. Special category data
303 CHAMBERS.COM
Powered by FlippingBook