Royal Dutch Tennis Assoc.

€525K($567K USD)final

Date Issued

2020-03-03

Regulation

Authority

Dutch Supervisory Authority for Data Protection (AP)

Country

Netherlands

Violation Type

Non-compliance with lawful basis for data processing

Currency

EUR

Violation Summary

The Royal Dutch Tennis Association (“KNLTB”) was fined a total of €525,000 for selling the personal data of more than 350,000 of its members to sponsors. The sponsors have then contacted some of these individuals by email and telephone for marketing purposes. Personal data sold included the name, gender, and address of various individuals. No consent was obtained from the affected individuals beforehand. The Royal Dutch Tennis Association (“KNLTB”) argued that it had a legitimate interest to sell this data, and as such did not commit a GDPR breach. The Dutch Data Protection Authority, however, rejected this and ruled that KNLTB had no legal basis to sell the personal data of its members to third parties.

Articles Violated

Art. 5 GDPRArt. 6 GDPR

Other Fines for Royal Dutch Tennis Assoc.

DateRegulationAmount (USD)Type
2020-03-03GDPR$567,000Non-compliance with lawful basis for data processing