GDPR for Gymnastics Clubs: A Complete Compliance Guide
How gymnastics clubs and British Gymnastics affiliates can handle member data and meet GDPR obligations.
Every gymnastics club in the UK processes personal data — registration forms, medical disclosures, parental consent documents, coaching records, competition entries, and safeguarding logs. That makes every club a data controller under the UK GDPR and the Data Protection Act 2018.
The majority of gymnasts are children, placing gymnastics clubs in a higher-risk category. Clubs also handle health information — injuries and medical conditions — classified as special category data under stricter rules.
Key Compliance Areas
Medical and Injury Data — Health data is special category data requiring explicit consent. Registration forms must include a clearly worded section asking parents to explicitly consent to the club holding and using medical information.
British Gymnastics Affiliation — Clubs must share gymnast names, dates of birth, and contact information with British Gymnastics. Your privacy notice must be transparent about this data sharing.
Parental Consent — Because most gymnasts are under 18, parental consent is the cornerstone of almost all data processing. Each purpose (medical data, photography, video) should be listed and separately ticked.
DBS Checks — All coaches and volunteers with regular unsupervised access to children must be DBS checked. Records of checks must be stored securely.
Video Recording — Explicit written parental consent is required before filming any gymnast under 18. Consent to film for coaching is separate from consent to share footage on social media.
Safeguarding Records — Records must be kept strictly confidential, retained for a minimum of seven years from the last entry, or until the child turns 25 — whichever is later.
Data Retention — Medical records: minimum 7 years. Payment records: 6 years (HMRC). Safeguarding logs: 7 years or until child turns 25.
ICO Registration — Most gymnastics clubs must register with the ICO and pay an annual fee (currently £40/year for Tier 1).
Read the full guide at the canonical URL for the complete compliance checklist and practical steps.
Originally published on Custodia
Top comments (0)