ARTICLE · 05 MARCH 2025

The GDPR Applied To World Anti-Doping Code

AKD

Contributor

AKD

AKD

AKD is a leading international law firm, with over 600 lawyers, tax advisers, civil-law notaries...

View firm profile

Explore more from AKD

The European Data Protection Board (EDPB) examined the revised World Anti-Doping Code and its International Standards for Data Protection (ISDP) and Intelligence and Investigations (ISII) to assess their compliance with the GDPR and adopted on 11 February 2025 its Recommendations.

BelgiumPrivacy

Sara Ataei

Olivier Belleflamme

Paul Van den Bulck

Adopted on 11 February 2025

The European Data Protection Board (EDPB) examined the revised World Anti-Doping Code and its International Standards for Data Protection (ISDP) and Intelligence and Investigations (ISII) to assess their compliance with the GDPR and adopted on 11 February 2025 its Recommendations. While acknowledging improvements, the EDPB did identify some key concerns that require further adjustments.

First, the legally binding nature of the Code varies across Member States, and the EDPB stresses the need for GDPR-compliant national implementations to ensure a consistent level of data protection. Additionally, the roles of World Anti Doping Agency (WADA) and National Anti-Doping Organisations (NADOs) remain unclear, particularly regarding data processing responsibilities within the Anti-Doping Administration and Management System (ADAMS).

We operate a free-to-view policy, asking only that you register in order to read all of our content. Please login or register to view the rest of this article.

Register for freeORLog in

Related Articles

Received A Request For Access? This Is What Your Organisation Should Know (And Do)

Een Inzageverzoek Ontvangen? Dit Moet Uw Onderneming Weten (En Doen)

Hoe organisaties kunnen voldoen aan de Europese interoperabiliteitsregels bij gegevensdeling of -uitwisseling

European UnionPrivacy

How Organisations Can Comply With European Interoperability Rules For Data Sharing And Data Exchange

European UnionPrivacy

CJEU Judgment In The Jautiva Case

European UnionPrivacy

Legal Intelligence Newsletters: sign up for the latest legal and regulatory news on your chosen topics

Read more about

Privacy
- Privacy Protection
- Data Protection

Related Comparative Guides

Comparative Guide

Data Protection & Cybersecurity

See more popular content from

PrivacyAKD

How Organisations Can Comply With European Interoperability Rules For Data Sharing And Data Exchange

The European Union's data strategy introduces comprehensive interoperability obligations through the GDPR, Data Act, and Data Governance Act, fundamentally transforming how organizations handle data portability, switching between service providers, and data intermediation services. Organizations providing data processing services and those operating as data intermediaries face new compliance requirements, registration procedures, and operational standards that demand immediate attention and strategic implem

European UnionPrivacy

The EU Data Act Now Applies | Key Compliance Points For Businesses Selling Connected Products And Services

The Data Act (Regulation (EU) 2023/2854) applies across the EU as from 12 September 2025. It reshapes access to and use of data generated by connected products and related services...

European UnionPrivacy

Can I Send Marketing E-Mails Without Consent (Opt-In) To Former Customers?

On 29 December 2021, a data subject filed a complaint with the Belgian Data Protection Authority (BDPA) due to the receipt of a direct marketing e-mail from a company which he had not been a customer for two years.

Transfer Of Personal Data Outside The European Economic Area: What's New?

From 27 June 2021, companies can use the European Commission's long-awaited new standard contractual clauses as an appropriate safeguard for transferring personal data to countries...

European UnionPrivacy

CJEU Judgment In The Jautiva Case

The Court of Justice of the European Union has ruled that Latvian legislation requiring unrestricted public access to shareholder information violates fundamental rights protections under the EU Charter. While the Court acknowledges the legitimacy of anti-money laundering, counter-terrorism, and sanctions objectives, it finds that these goals can be achieved through less intrusive measures that restrict access to competent authorities, obliged entities, and persons with legitimate interests. The judgment le

European UnionPrivacy

EU General Court Upholds EU–US Data Privacy Framework

On 3 September 2025, the EU General Court (T-553/23, Latombe v Commission) dismissed an action challenging the European Commission's adequacy decision 2023/1795 of July 2023 on the EU–US Data Privacy Framework.

Belgium Publishes Law Implementing GDPR

On September 5, the official journal published the Belgian law implementing the GDPR (source documents in French and in Dutch).

Workplace Data Privacy Update No. 6, January 2026

As we start 2026, it's time for a new year update on workplace privacy, where employee rights remain a priority and regulatory activity shows no signs of slowing down.

Competitors May Challenge GDPR Infringements As Unfair Commercial Practices

On October 4, 2024, the Court of Justice of the European Union (CJEU) issued a significant judgment (Case C-21/23) regarding the ability of competitors...

European UnionPrivacy

Challenge To EU- US Data Transfers Fails

The Court of Justice for the European Union (CJEU) has handed down its judgment in the case of Latombe v Commission, underscoring the continuing validity of the EU-US...

European UnionPrivacy

Jurisdiction Clause In General Conditions Ineffective Despite Reference On Invoices In An On-Going Business Relation

This case dealt with an arbitration clause which is mentioned in the FENEX Conditions.

NetherlandsLitigation, Mediation & Arbitration

Exchange Of Information In Tax Matters And Fundamental Rights Of Taxpayers

On 6 October 2020, the Court of Justice of the European Union ("CJEU") delivered a landmark ruling in Joined Cases C-245/19 and C-246/19 about the fundamental...

European UnionTax

Employee Consent

A hospital was processing personal data of employees related to their affiliation to a trade union "B".

The Cyber Resilience Act: Setting New Cybersecurity Requirements For Digital Products

As digital elements become increasingly integrated into everyday products—from routers and smart meters to robot vacuum cleaners and smart fridges—and we are increasingly reliant on these products with digital elements in our daily routines, the risk of cyber incidents occurring increases accordingly.

BelgiumTechnology

Personality Rights In The World Of Sports

In the sports industry, an athlete's identity is more than just a name or a face; it is a valuable asset. Athletes are constantly in the spotlight due to sponsorships and media coverage, but with fame comes the need for protection.

BelgiumMedia, Telecoms, IT, Entertainment

Chapter 11 — Enough Is Enough

Prospects for economic recovery in the shipping industry remain poor, with little or no sign of a recovery in the short term.

NetherlandsTransport

Hot Air Becomes Reality

On May 19 2005 the first wave of requirements under the International Convention for the Prevention of Pollution from Ships (MARPOL) Annex VI - environmental regulations imposing global and regional limits on air emissions from ships - came into force.

NetherlandsTransport

Court Decides Takeover Battle For Privatised Hospital

The Netherlands still has relatively little experience with hospitals that are entirely in the hands of an investor.

NetherlandsLitigation, Mediation & Arbitration

Chapter 11 Or Catch-22 - That Is The Question

The economic situation in the shipping industry remains poor, with no sign of a recovery in the short term.

NetherlandsInsolvency/Bankruptcy/Re-Structuring

Developments In Respect Of "Disclosure" In Dutch Law

Dutch law does not know a general rule of disclosure as applies in the common law system.

NetherlandsLitigation, Mediation & Arbitration