Tell me, don’t sell me, the GDPR version.

The Dutch Data Protection Authority (AP) has imposed a fine of 525,000 euros on tennis association KNLTB for selling personal data without proper consent.

In 2018, the KNLTB unlawfully provided personal data of a few hundred thousand of its members to two sponsors for a fee. The Royal Dutch Lawn Tennis Association (KNLTB) provided the sponsors with personal data such as name, gender and address, so that they could approach a selection of KNLTB members with tennis-related and other offers.

AP held that consent is required for the sale of personal data and that legitimate interest was not an appropriate legal basis for such actions.

Details from Autoriteit Persoonsgegevens.

[View source.]