UK Law and Practice Contributed by: Alistair McHenry, Sofia Antipatis and Rebecca Dods, Tyr
Impact of UK GDPR on Sport The UK GDPR requires all processing to be lawful, fair and transparent, supported by a valid legal basis such as: • consent (typically required for health data); • contractual necessity; or • legitimate interest. Organisations must provide clear privacy notices explaining what data is collected, why, on what basis, and with whom it may be shared. Compliance expec - tations have increased, with clubs and NGBs required to: • implement internal governance measures; • update contracts with data processors; • conduct data protection impact assessments; and • maintain robust cybersecurity and breach response processes. Project Red Card illustrates the GDPR’s growing influence in sport. Over 2,000 professional football - ers challenged betting, gaming and analytics compa - nies for using their performance data without a lawful basis, arguing that performance statistics constitute personal data. The case highlighted the commercial value of player data and the scrutiny applied to organi - sations processing it without consent or another valid ground. NGBs and clubs have since faced heightened over - sight and more frequent privacy-related challenges, reflecting the sector’s exposure to the same newly- biting regulatory standards which are applied to other industries.
shape digital interactions, match-day experiences and targeted marketing. Sector research shows that fan- driven insights increasingly guide ticketing strategies, venue operations and broader engagement initiatives across UK sport. Commercial Opportunities Sports data has become a key commercial asset. Rights-holders license official data to betting opera - tors, broadcasters and technology providers, while performance and match data supports live statistics services, analytics platforms, fantasy gaming and broadcast enhancements. Fan-engagement data increasingly informs sponsorship valuation and tar - geted marketing strategies, reflecting industry trends towards technology-driven growth and the expanding international relevance of UK sports products. As demand for real-time data and advanced analytics accelerates across media, betting, digital platforms and performance science, sports organisations are positioning data at the centre of their commercial and competitive models. 5.8 Data Protection Applicable Legal Framework The handling of sports-related data in the UK is pri - marily governed by the UK GDPR and the Data Pro - tection Act 2018. These laws apply to all organisations processing personal data, including NGBs, clubs, event organisers and technology providers. Sports bodies usually act as data controllers, determining how athlete, staff and spectator information is col - lected, used, shared and stored. Sports data is broad and often sensitive. It can include: • biometric data (eg, heart rate, lactate, facial recog - nition); • GPS and performance tracking; • medical and injury information; and • psychological and well-being assessments. Much of this is special category data, requiring enhanced safeguards and stricter justification for processing.
6. Dispute Resolution 6.1 Role of National Court Systems
The national courts in the UK traditionally take a restrained approach to intervening in the regulatory affairs of sport. The long-established position is that sports are best placed to regulate their own disputes, owing to their specialist knowledge, rule-making autonomy and internal disciplinary frameworks. As a result, most sports disputes are resolved through arbi -
364 CHAMBERS.COM
Powered by FlippingBook