# Basketball Federation of Castilla and Leon: Insufficient legal basis for data processing

- Type: Enforcement
- Source: Spanish Data Protection Authority (aepd)
- Date: 2020-08-28
- Original: https://www.enforcementtracker.com/ETid-386
- Canonical: https://overview.legal/posts/46501
- Topics: Integrity and Confidentiality Principle, Personal Data, Professional Secrecy, IP Address, Consent, Processing, Security, Supervisory Authorities

## Summary

The Basketball Association transmitted personal data to third parties, which were subsequently published on the Internet without consent of the data subjects. In addition, the data protection authority found that the Basketball Federation also disclosed personal data to a newspaper, violating - in addition - the principle of integrity and confidentiality (Art. 5 (1) f) GDPR).

## Full text

The Basketball Association transmitted personal data to third parties, which were subsequently published on the Internet without consent of the data subjects. In addition, the data protection authority found that the Basketball Federation also disclosed personal data to a newspaper, violating - in addition - the principle of integrity and confidentiality (Art. 5 (1) f) GDPR).

GDPR Articles: Art. 5 GDPR, Art. 6 GDPR
Industry: Individuals and Private Associations

---
Generated by overview.legal · https://overview.legal/posts/46501 · 2026-08-22