The World Anti-Doping Agency (WADA) published the revised International Standard for the Protection of Privacy and Personal Information (ISPPI) on the 1st of June. The ISPPI came to effect on the same day.
The main purpose of the ISPPPI is to ensure that organizations and persons involved in anti-doping in sport apply appropriate, sufficient and effective privacy protections to personal data that they process.
In March 2018, WADA published a proposed ISPPPI, which was made available to stakeholders for consultation. The Agency would like to thank all those that provided comments and suggestions, which were carefully assessed and taken into account as highlighted in a redline version of the revised ISPPPI.
On 16 May 2018, WADA’s Executive Committee approved the revised version of the ISPPPI, highlighting WADA’s ongoing efforts to ensure athletes’ data and corresponding rights are protected. The revised ISPPPI reflects the principles of the European Union’s new General Data Protection Regulation (GDPR) and promotes the highest data privacy standards currently available.
Below is a short summary of the main amendments contained in the revised ISPPPI:
• In Article 3.2, the definitions for “Security Breach” and “Sensitive Personal Information” were revised to align with the definitions in the GDPR.
• Revisions in Article 4 aim to ensure that Anti-Doping Organizations (ADOs) keep accurate records of their processing activities and are able to demonstrate their compliance with the ISPPPI.
• Revisions in Article 6 clarify the different legal bases on which personal data can be processed.
• Revisions in Article 7 aim to ensure that athletes are provided with all relevant information, including with whom their personal information is being shared, for how long and for what purpose, as well as who they can contact in the event they have a complaint or question regarding their information.
• Revisions in Article 9 specify how ADOs can maintain the security of the personal information in their possession, including maintaining records of security breaches and applying suitable contractual controls to third-party agents.
• Revisions in Article 11 clarify the rights of any individual concerning his or her personal information.
It should be noted that a number of stakeholders commented on the retention schedule in Annex A. As that table was created through a multi-stakeholder process in connection with a prior consultation, it was not under consideration for this revision. However, it will be circulated for consultation as part of the three-phase 2021 Code Review Process that is currently underway, which involves review of a number of International Standards. The second phase of the Code review and first phase of Standard review will be launched on 4 June 2018 and run until 14 September 2018. The entire Code and Standard review process culminates with approval at the next World Conference on Doping in Sport, which will be held in Katowice, Poland in November 2019 with the revised 2021 Code and Standards entering into effect on 1 January 2021.
For more information about the revised ISPPPI, please contact privacy@wada-ama.org.
