Lab: synthetic dataSynthetic datadeferred
Player analysis only with a lawful basis, deletion after 90 days
The coaching staff analyzes each player only for the allowed purpose, and wearables data deletes itself after 90 days.
- Club
Health data falls under GDPR Art. 9. The use case stays in the lab with synthetic data until the lawful basis for live operation is clear.
Problem
Wearables, match statistics and the injury log describe single players. Health data falls under GDPR Art. 9, and profiling of athletes falls under the AI Act. Every analysis needs a lawful basis and a purpose.
Solution
The club publishes the data as Offers under the Policy for personal data. The coach requests data with the purpose training analysis. The Policy checks the lawful basis: explicit consent (Art. 9(2)(a) GDPR). The club aggregates per player. The Policy blocks comparisons between players without separate consent.
Benefit
The club shows purpose and lawful basis for each request in the Audit Trail, and the Policy enforces the deletion period. The use case runs in the lab with synthetic data, so no proven figure exists.
Data providers
- Club
Data consumers
- Coaching staff
Data objects (technical identifiers)
player-performance-profilestraining-wearables-datamatch-performance-statisticsinjury-medical-logroster-contract-details