Royal Dutch Tennis Association ('KNLTB') – €525,000 Fine (Netherlands, 2020)

€525,000Autoriteit Persoonsgegevens3 March 2020Netherlands
final
Fine

General GDPR enforcement action

This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.

The Dutch Data Protection Authority fined the Royal Dutch Tennis Association €525,000 for selling member data to sponsors without consent. The fine was later reduced to €250,000 after a settlement. This case underscores the importance of obtaining consent before sharing personal data.

What happened

The Royal Dutch Tennis Association sold member data to sponsors without obtaining consent.

Who was affected

Members of the Royal Dutch Tennis Association whose data was sold to sponsors.

What the authority found

The authority found no legal basis for the data sale, as consent was not obtained and no legitimate interest was established.

Why this matters

This decision emphasizes that organizations must have a valid legal basis, such as consent, before selling personal data. It serves as a warning to sports clubs and similar entities about the risks of unauthorized data sharing.

GDPR Articles Cited

AI-verified

Art. 5(1)(a) GDPR
Art. 5(1)(b) GDPR
Art. 6(1) GDPR
View original scraped data
Art. 5 GDPR
Art. 6 GDPR

Original data from scraper before AI verification against source document.

Source verified 6 March 2026
amount discrepancy
articles corrected
date discrepancy
Full Legal Summary
Detailed

The Dutch Data Protection Authority has fined the Royal Dutch Tennis Association ('KNLTB') with EUR 525,000 for selling the personal data of more than 350,000 of its members to sponsors who had contacted some of the members by mail and telephone for direct marketing purposes. It was found that the KNLTB sold personal data such as name, gender and address to third parties without obtaining the consent of the data subjects. The data protection authority also rejected the existence of a legitimate interest for the sale of the data and therefore decided that there was no legal basis for the transfer of the personal data to the sponsors. ---UPDATE--- Following the CJEU's court ruling, the controller and the DPA agreed to settle the case and reduce the fine from EUR 525,000 to EUR 250,000. The controller also admitted their wrongdoing.

Related Enforcement Actions (0)

No other enforcement actions found for Royal Dutch Tennis Association ('KNLTB') in NL

This is the only recorded action for this entity in this jurisdiction.

Details

Fine Date

3 March 2020

Authority

Autoriteit Persoonsgegevens

Fine Amount

€525,000

Enforcement Tracker ID

ETid-218

About this data

Data: CMS GDPR Enforcement Tracker
Licensed under CC BY-NC-SA 4.0
AI-verified and classified

Cite as: Cookie Fines. Royal Dutch Tennis Association ('KNLTB') - Netherlands (2020). Retrieved from cookiefines.eu

Report Inaccuracy

Last updated: