EU Court Allows Naming Doped Athletes After Privacy Review
EU court ruled athletes' doping names can be publicly disclosed after privacy checks.
Why it matters: This ruling clarifies how EU data privacy laws apply to doping disclosures, guiding legal experts on balancing transparency with athlete privacy rights. It affects compliance strategies for sports bodies and their legal advisors across the EU.
- Court ruling date: July 14, 2026, by the Court of Justice of the EU (CJEU).
- Four Austrian athletes challenged Austria's mandatory public naming for doping violations.
- Publication allowed only after a case-by-case GDPR proportionality test assessing fairness and necessity.
- Athletes can challenge publication by filing complaints with data protection authorities.
On July 14, 2026, the Court of Justice of the European Union (CJEU) ruled that EU member states may publish names of professional athletes sanctioned for doping only after conducting an individual GDPR proportionality test. This test evaluates whether the privacy infringement is justified by the public interest.
The case began when four Austrian athletes contested Austria’s law requiring mandatory online publication of athletes’ names, doping offenses, and sanctions, on the grounds that this violated their privacy rights protected under the General Data Protection Regulation (GDPR).
The CJEU acknowledged that publishing such information supports important public interests like deterring doping and preserving fair competition in sports. However, the court emphasized the publication is not automatic or indefinite. Authorities must assess each case individually, weighing factors such as the athlete’s public profile, the gravity of the doping offense, and how long the data is retained and accessible. For instance, a permanent ban does not justify indefinite online posting after the athlete retires.
Athletes maintain their core data protection rights, including the ability to object to publication by lodging complaints with national data protection authorities, which must then review whether the publication meets GDPR standards.
This decision limits automatic disclosures by anti-doping agencies such as the World Anti-Doping Agency (WADA), requiring a balance between transparency and protection of individual privacy. It sets a precedent for compliance officers and legal teams advising sports organizations on managing reputational risks linked to doping disclosures under EU privacy law.
By the numbers:
- July 14, 2026 — date of CJEU ruling (Case C-474/24).
- 4 — number of athletes involved in the Austrian challenge.
- 2-step test — case-by-case GDPR assessment plus athlete right to complain before publication.
Yes, but: While the ruling mandates privacy assessments, it does not precisely define how proportionality should be applied, potentially leading to varied interpretations across member states.
What's next: Authorities and sports bodies will need to develop clear guidelines to operationalize GDPR proportionality assessments for doping disclosures.