FEDERACIÓN DE BALONMANO DE CASTILLA LA MANCHA – €17,000 Fine (Spain, 2023)
General GDPR enforcement action
This case relates to broader data protection obligations, not specifically to cookie or consent banner compliance. It is not included in cookie statistics or the Risk Calculator.
The Spanish DPA fined FEDERACIÓN DE BALONMANO DE CASTILLA LA MANCHA for requiring athletes to upload sensitive health information without proper consent. The organization did not have a valid reason to process this health data, which is protected under GDPR. This case serves as a reminder for sports organizations to handle personal health information carefully.
What happened
FEDERACIÓN DE BALONMANO DE CASTILLA LA MANCHA required athletes to upload vaccination certificates without a valid legal basis.
Who was affected
Athletes who were required to submit their vaccination status to participate in sports competitions.
What the authority found
The Spanish data protection authority found that the organization lacked a valid legal basis for processing sensitive health data and failed to provide adequate information.
Why this matters
This ruling highlights the need for organizations to have clear legal grounds for processing sensitive personal data. Sports organizations must ensure they comply with data protection rules when handling health information.
GDPR Articles Cited
The Spanish DPA has imposed a fine of EUR 17,000 on FEDERACIÓN DE BALONMANO DE CASTILLA LA MANCHA. Athletes were required to upload the vaccination certificate against COVID with the complete vaccination schedule or a certificate of recovery from the disease or an antigen test with a negative result to the controller's website 48 hours before sports events in order to participate in sports competitions. During its investigation, the DPA found that the controller did not have a valid legal basis for processing this sensitive health data. The DPA also found that the controller had not provided sufficient information about the processing of personal data.
Related Enforcement Actions (0)
No other enforcement actions found for FEDERACIÓN DE BALONMANO DE CASTILLA LA MANCHA in ES
This is the only recorded action for this entity in this jurisdiction.
Details
Fine Date
25 September 2023
Authority
Agencia Española de Protección de Datos
Fine Amount
€17,000
Enforcement Tracker ID
ETid-2048
About this data
Cite as: Cookie Fines. FEDERACIÓN DE BALONMANO DE CASTILLA LA MANCHA - Spain (2023). Retrieved from cookiefines.eu
Last updated: