Data, Privacy and Doping: WADA's Revised ISPPI Comes Into Effect

From WADA: on June 1, 2018 the World Anti-Doping Agency published "a revised International Standard for the Protection of Privacy and Personal Information (ISPPPI) that takes effect immediately. The main purpose of the ISPPPI is to ensure that organizations and persons involved in anti-doping in sport apply appropriate, sufficient and effective privacy protections to personal data that they process."

Here is a summary of the main amendments contained in the revised ISPPPI: 

  • In Article 3.2, the definitions for “Security Breach” and “Sensitive Personal Information” were revised to align with the definitions in the GDPR.
  • Revisions in Article 4 aim to ensure that Anti-Doping Organizations (ADOs) keep accurate records of their processing activities and are able to demonstrate their compliance with the ISPPPI.
  • Revisions in Article 6 clarify the different legal bases on which personal data can be processed.
  • Revisions in Article 7 aim to ensure that athletes are provided with all relevant information, including with whom their personal information is being shared, for how long and for what purpose, as well as who they can contact in the event they have a complaint or question regarding their information.
  • Revisions in Article 9 specify how ADOs can maintain the security of the personal information in their possession, including maintaining records of security breaches and applying suitable contractual controls to third-party agents.
  • Revisions in Article 11 clarify the rights of any individual concerning his or her personal information.