# Data Protection Act 2018, Paragraph 28


(1) This condition is met if the processing—
(a) is necessary for the purposes of measures designed to protect the integrity of a sport or a sporting event,
(b) must be carried out without the consent of the data subject so as not to prejudice those purposes, and
(c) is necessary for reasons of substantial public interest.
(2) In sub-paragraph (1)(a), the reference to measures designed to protect the integrity of a sport or a sporting event is a reference to measures designed to protect a sport or a sporting event against—
(a) dishonesty, malpractice or other seriously improper conduct, or
(b) failure by a person participating in the sport or event in any capacity to comply with standards of behaviour set by a body or association with responsibility for the sport or event.

---
Source: https://www.legislation.gov.uk/ukpga/2018/12/schedule/1/paragraph/28 (the official version)
Page: https://openlegislation.uk/data-protection-act-2018/schedule-1/paragraph-28
Contains public sector information licensed under the Open Government Licence v3.0. Source: legislation.gov.uk, The National Archives.