French data protection agency provides guidance to sports clubs on health data collection during COVID-19 pandemic

French data protection authority, Commission nationale de l’informatique et des libertés (CNIL) has issued a guidance to sports clubs regarding the collection and processing of personal health data during the COVID-19 pandemic. It noted that the processing of health data by sports clubs is prohibited given the sensitive nature of personal health data. However, during the Coronavirus pandemic, there are a few exceptions to ensure the safety of athletes and staff. For instance, data collection is permitted when sports structures obtain consent from the individual concerned. Also, sports clubs are allowed to collect health data when the collection is justified for public interest.