Prestation till varje pris? - Elitidrottens behandling av hälsouppgifter i ljuset av GDPR
(2026) JURM02 20261Department of Law
Faculty of Law
- Abstract (Swedish)
- Dagens elitidrott präglas av en omfattande personuppgiftsbehandling, särskilt av professionella idrottares hälsouppgifter. För att vara konkurrenskraftig, både som idrottare och som idrottslag, krävs en långtgående och detaljerad planering av träning, hälsa och livsstil. Därtill har lag idag tillgång till avancerad teknik som möjliggör närmast minutiös optimering av prestation. Resultatet är att behandlingen av hälsouppgifter i dag utgör en integrerad del av elitidrotten. Sådan behandling sker exempelvis genom regelbundna medicinska undersökningar, såsom blodprover, och genom användningen av så kallade wearables, vilka möjliggör kontinuerlig insamling av data om exempelvis puls, sömn och fysisk belastning. Insamlade data används i sin tur... (More)
- Dagens elitidrott präglas av en omfattande personuppgiftsbehandling, särskilt av professionella idrottares hälsouppgifter. För att vara konkurrenskraftig, både som idrottare och som idrottslag, krävs en långtgående och detaljerad planering av träning, hälsa och livsstil. Därtill har lag idag tillgång till avancerad teknik som möjliggör närmast minutiös optimering av prestation. Resultatet är att behandlingen av hälsouppgifter i dag utgör en integrerad del av elitidrotten. Sådan behandling sker exempelvis genom regelbundna medicinska undersökningar, såsom blodprover, och genom användningen av så kallade wearables, vilka möjliggör kontinuerlig insamling av data om exempelvis puls, sömn och fysisk belastning. Insamlade data används i sin tur för att optimera träningsupplägg, kost och återhämtning i syfte att maximera prestation. Behandlingen medför stora fördelar för den enskilde idrottaren, som i regel har ett starkt intresse av att utvecklas och prestera på högsta nivå. Samtidigt innebär den risker. Hälsouppgifter kan exempelvis användas till idrottarens nackdel, såsom vid beslut om kontraktsförlängning. Om uppgifterna dessutom sprids kan det få negativa konsekvenser även utanför idrotten, exempelvis genom försämrade möjligheter att teckna försäkringar i framtiden.
Denna behandling aktualiserar således betydande dataskyddsrättsliga frågor. Enligt Dataskyddsförordningen utgör hälsouppgifter känsliga personuppgifter, vars behandling som utgångspunkt är förbjuden enligt artikel 9. Uppsatsen syftar därför till att undersöka hur behandlingen av hälsouppgifter som förekommer inom elitidrotten ska bedömas i förhållande till artikel 9, samt i vilken utsträckning den kan omfattas av de undantag från förbudet som förordningen uppställer. Vidare analyseras huruvida GDPR i sin nuvarande utformning lämnar ett tillräckligt rättsligt utrymme för elitidrottens särskilda förhållanden.
Uppsatsen tar sikte på EU-rättsliga källor och utgår från en EU-rättslig metod, med den rättskällehierarki som erkänns inom denna. Med utgångspunkt i detta redogörs för innehållet i GDPR samt innebörden av artikel 9. Därefter tillämpas bestämmelserna på det elitidrottsliga sammanhang som uppsatsen behandlar. Rättsläget präglas emellertid av osäkerhet. Det saknas praxis från EU-domstolen, vilket ger upphov till tolkningsosäkerheter. Redogörelsen mynnar ut i slutsatsen att den behandling som sker inom elitidrotten svårligen, i sin helhet, kan godtas med stöd av någon av undantagsgrunderna i GDPR. Undantaget i artikel 9.2 h kan i viss utsträckning möjliggöra behandling som sker av medicinska skäl, medan behandling som uteslutande syftar till prestationsoptimering framstår som svårförenlig med artikeln. Analysen tar vidare sikte på de fördelar och nackdelar som behandling av hälsouppgifter kan innebära och kulminerar i en diskussion med slutsatsen att GDPR inte är tillräckligt specialiserat för den komplexa verklighet som elitidrotten präglas av. (Less) - Abstract
- Modern elite sports are characterized by extensive processing of personal data, particularly professional athletes’ health data. To remain competitive, both as an individual athlete and as a team, far-reaching planning of training, health, and lifestyle is required. In addition, teams have access to advanced technology that enables the maximization of performance. As a result, the processing of health data has become an integral part of elite sports.
The processing consists of, for example, regular medical examinations, such as blood tests, as well as the use of so-called wearables, which enable the monitoring of heart rate, sleep, and physical load. The data is used to optimize training, nutrition, and recovery to enhance performance.... (More) - Modern elite sports are characterized by extensive processing of personal data, particularly professional athletes’ health data. To remain competitive, both as an individual athlete and as a team, far-reaching planning of training, health, and lifestyle is required. In addition, teams have access to advanced technology that enables the maximization of performance. As a result, the processing of health data has become an integral part of elite sports.
The processing consists of, for example, regular medical examinations, such as blood tests, as well as the use of so-called wearables, which enable the monitoring of heart rate, sleep, and physical load. The data is used to optimize training, nutrition, and recovery to enhance performance. The processing entails significant benefits for the athlete, who typically has a strong interest in development and top-level performance. At the same time, it involves risks. Health data may be used to the detriment of the athlete, such as in decisions regarding contract renewals. If such data is disclosed, it may also negatively impact the athlete’s life beyond their sports career by, for example, affecting the athlete’s ability to obtain insurance in the future. The processing thus raises significant data protection concerns. Under the General Data Protection Regulation, health data constitutes a special category of personal data, and the processing of such data is prohibited pursuant to article 9. However, there are a few derogations to this rule which could be applicable in the elite sport processing context. This thesis therefore examines how the processing of health data within elite sport should be assessed in relation to article 9, as well as to what extent such processing may be subject to one of the exceptions set out in the provision. Furthermore, the thesis aims to analyze whether the GDPR, in its current form, provides a sufficient legal framework for the specific nature of sports.
The thesis is based on EU law and adopts an EU law methodology, applying the hierarchy of legal sources recognized within EU law. Based on this, the rules of the GDPR and the meaning of article 9 are examined. The provisions are then applied to the elite sport context addressed in the thesis. The legal position is characterized by uncertainty. There is a noticeable absence of guidance by the Court of Justice through case law, which gives rise to interpretative uncertainties. The analysis leads to the conclusion that the processing of health data, in its entirety, is unlikely to be justified under any of the derogations provided for in the GDPR. The exception in article 9(2)(h) may, to some extent, allow for processing carried out for medical purposes, whereas processing carried out solely for performance optimization appears difficult to reconcile with the provision. The analysis further considers the advantages and disadvantages associated with the processing of health data and culminates in a discussion which concludes that the GDPR is not sufficient for the complex reality characterizing elite sports. (Less)
Please use this url to cite or link to this publication:
https://lup.lub.lu.se/student-papers/record/9226846
- author
- Linderoth, Amanda LU
- supervisor
- organization
- alternative title
- Performance at All Cost? - The Processing of Health Data in Elite Sports in the Light of the GDPR
- course
- JURM02 20261
- year
- 2026
- type
- H3 - Professional qualifications (4 Years - )
- subject
- keywords
- EU-rätt, GDPR, dataskydd, idrottsjuridik, hälsouppgifter
- language
- Swedish
- id
- 9226846
- date added to LUP
- 2026-06-10 17:25:29
- date last changed
- 2026-06-10 17:25:29
@misc{9226846,
abstract = {{Modern elite sports are characterized by extensive processing of personal data, particularly professional athletes’ health data. To remain competitive, both as an individual athlete and as a team, far-reaching planning of training, health, and lifestyle is required. In addition, teams have access to advanced technology that enables the maximization of performance. As a result, the processing of health data has become an integral part of elite sports.
The processing consists of, for example, regular medical examinations, such as blood tests, as well as the use of so-called wearables, which enable the monitoring of heart rate, sleep, and physical load. The data is used to optimize training, nutrition, and recovery to enhance performance. The processing entails significant benefits for the athlete, who typically has a strong interest in development and top-level performance. At the same time, it involves risks. Health data may be used to the detriment of the athlete, such as in decisions regarding contract renewals. If such data is disclosed, it may also negatively impact the athlete’s life beyond their sports career by, for example, affecting the athlete’s ability to obtain insurance in the future. The processing thus raises significant data protection concerns. Under the General Data Protection Regulation, health data constitutes a special category of personal data, and the processing of such data is prohibited pursuant to article 9. However, there are a few derogations to this rule which could be applicable in the elite sport processing context. This thesis therefore examines how the processing of health data within elite sport should be assessed in relation to article 9, as well as to what extent such processing may be subject to one of the exceptions set out in the provision. Furthermore, the thesis aims to analyze whether the GDPR, in its current form, provides a sufficient legal framework for the specific nature of sports.
The thesis is based on EU law and adopts an EU law methodology, applying the hierarchy of legal sources recognized within EU law. Based on this, the rules of the GDPR and the meaning of article 9 are examined. The provisions are then applied to the elite sport context addressed in the thesis. The legal position is characterized by uncertainty. There is a noticeable absence of guidance by the Court of Justice through case law, which gives rise to interpretative uncertainties. The analysis leads to the conclusion that the processing of health data, in its entirety, is unlikely to be justified under any of the derogations provided for in the GDPR. The exception in article 9(2)(h) may, to some extent, allow for processing carried out for medical purposes, whereas processing carried out solely for performance optimization appears difficult to reconcile with the provision. The analysis further considers the advantages and disadvantages associated with the processing of health data and culminates in a discussion which concludes that the GDPR is not sufficient for the complex reality characterizing elite sports.}},
author = {{Linderoth, Amanda}},
language = {{swe}},
note = {{Student Paper}},
title = {{Prestation till varje pris? - Elitidrottens behandling av hälsouppgifter i ljuset av GDPR}},
year = {{2026}},
}