Tell me, don’t sell me, the GDPR version.
The Dutch Data Protection Authority (AP) has imposed a fine of 525,000 euros on tennis association KNLTB for selling personal data without proper consent.
In 2018, the KNLTB unlawfully provided personal data of a few hundred thousand of its members to two sponsors for a fee. The Royal Dutch Lawn Tennis Association (KNLTB) provided the sponsors with personal data such as name, gender and address, so that they could approach a selection of KNLTB members with tennis-related and other offers.
AP held that consent is required for the sale of personal data and that legitimate interest was not an appropriate legal basis for such actions.