[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fafGPbVT6WTeuRfh_AX6K1JZ74_jd2NmVddSdNWRtgLs":3},{"article":4,"iocs":39},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"full_text":11,"url":12,"image_url":13,"published_at":14,"ingested_at":15,"relevance_score":16,"entities":17,"category_id":21,"category":22,"article_tags":26},"2ee44e98-8c55-4030-af63-6e34a25a3f59","CJEU - C‑209\u002F23 - RRC Sports","cjeu-c-209-23-rrc-sports-39fd4a","← Older revision Revision as of 07:57, 22 July 2026 Line 46: Line 46: |EU_Law_Name_3=Article 56 TFEU|EU_Law_Link_3=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Ftreaty\u002Ftfeu_2012\u002Foj\u002Feng|EU_Law_Name_4=Article 101 TFEU|EU_Law_Link_4=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Ftreaty\u002Ftfeu_2012\u002Foj\u002Feng|EU_Law_Name_5=Article 102 TFEU|EU_Law_Link_5=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Ftreaty\u002Ftfeu_2012\u002Foj\u002Feng}} |EU_Law_Name_3=Article 56 TFEU|EU_Law_Link_3=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Ftreaty\u002Ftfeu_2012\u002Foj\u002Feng|EU_Law_Name_4=Article 101 TFEU|EU_Law_Link_4=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Ftreaty\u002Ftfeu_2012\u002Foj\u002Feng|EU_Law_Name_5=Article 102 TFEU|EU_Law_Link_5=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Ftreaty\u002Ftfeu_2012\u002Foj\u002Feng}} The Court finds that the GDPR precludes the disclosure and publication, by a federation such as FIFA, of any sanction imposed on agents or their clients and of detailed information on all transactions involving agents. The CJEU held that rules by a federation such as FIFA decreeing the disclosure and publication, by a federation such as FIFA, of all sanctions imposed on agents or their clients and of detailed information on all transactions involving agents are incompatible with the GDPR. ==English Summary== ==English Summary==","The Court of Justice of the European Union (CJEU) has ruled that FIFA's regulations requiring the disclosure and publication of sanctions against football agents and detailed transaction information are incompatible with the GDPR. The court found that such broad disclosure mandates, as outlined in the FIFA Football Agent Regulations (FFAR), violate data protection principles.","CJEU rules FIFA's agent transaction disclosure rules violate GDPR.","Help CJEU - C‑209\u002F23 - RRC Sports: Difference between revisions From GDPRhub Jump to:navigation, search ← Older editVisualWikitext Revision as of 09:05, 21 July 2026 view sourceBms (talk | contribs)Bureaucrats, Interface administrators, noContributionReport, Administrators213 editsTag: Visual edit← Older edit Latest revision as of 07:57, 22 July 2026 view source Bms (talk | contribs)Bureaucrats, Interface administrators, noContributionReport, Administrators213 editsTag: Visual edit Line 46: Line 46: |EU_Law_Name_3=Article 56 TFEU|EU_Law_Link_3=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Ftreaty\u002Ftfeu_2012\u002Foj\u002Feng|EU_Law_Name_4=Article 101 TFEU|EU_Law_Link_4=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Ftreaty\u002Ftfeu_2012\u002Foj\u002Feng|EU_Law_Name_5=Article 102 TFEU|EU_Law_Link_5=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Ftreaty\u002Ftfeu_2012\u002Foj\u002Feng}}|EU_Law_Name_3=Article 56 TFEU|EU_Law_Link_3=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Ftreaty\u002Ftfeu_2012\u002Foj\u002Feng|EU_Law_Name_4=Article 101 TFEU|EU_Law_Link_4=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Ftreaty\u002Ftfeu_2012\u002Foj\u002Feng|EU_Law_Name_5=Article 102 TFEU|EU_Law_Link_5=https:\u002F\u002Feur-lex.europa.eu\u002Feli\u002Ftreaty\u002Ftfeu_2012\u002Foj\u002Feng}} The Court finds that the GDPR precludes the disclosure and publication, by a federation such as FIFA, of any sanction imposed on agents or their clients and of detailed information on all transactions involving agents.The CJEU held that rules by a federation such as FIFA decreeing the disclosure and publication, by a federation such as FIFA, of all sanctions imposed on agents or their clients and of detailed information on all transactions involving agents are incompatible with the GDPR. ==English Summary====English Summary== Latest revision as of 07:57, 22 July 2026 CJEU - C‑209\u002F23 RRC Sports Court: CJEU Jurisdiction: European Union Relevant Law: Article 6(1)(f) GDPR Article 7 CFRArticle CFRArticle 56 TFEUArticle 101 TFEUArticle 102 TFEUArticle 16 FIFA Football Agent Regulations (FFAR)Article 19 FIFA Football Agent Regulations (FFAR) Decided: 16.07.2026 Parties: FT (an agent for players and Vice-President of Football Forum) RRC Sports GmbH Fédération internationale de football association (FIFA) Case Number\u002FName: C‑209\u002F23 RRC Sports European Case Law Identifier: AG Opinion: ECLI:EU:C:2025:362 Judgement: ECLI:EU:C:2026:597 Reference from: LG Mainz (Germany)9 O 129\u002F21 Language: 24 EU Languages Original Source: AG OpinionJudgement Initial Contributor: bms The CJEU held that rules by a federation such as FIFA decreeing the disclosure and publication, by a federation such as FIFA, of all sanctions imposed on agents or their clients and of detailed information on all transactions involving agents are incompatible with the GDPR. Contents 1 English Summary 1.1 Facts 1.2 Advocate General Opinion 1.3 Holding 2 Comment 3 Further Resources English Summary Facts Fédération internationale de football association (FIFA) is a Switzerland-based non-profit that acts as the global governing body for football. A large number of football clubs and national football associations are member of FIFA and bound by its regulations. In January FIFA published the FIFA Football Agent Regulations (FFAR). FFAR regulated the conduct of player’s agents. In particular, FFAR provided maximum limits to agents’ remuneration and prohibited specific types of contractual arrangements between clubs, agents, and agencies. In order to ensure compliance with these rules, Article 12 FFAR required agents to disclose certain information to FIFA. In particular, agents had to disclose: Information about any agreement with a client, other than a representation agreement; Information on any arrangement between agents to cooperate in the provision of their services, or to share the revenue or profits of their services; Information about their relationship with agencies, including the names of all of the agency’s employees. Additionally, FIFA would make the information available to a number of stakeholders including agents, players, and football clubs. Three applicants (an agent, a company acting as a players’ agent, and the Vice-President of a players’ agents’ associations) challenged FFAR in the Regional Court of Mainz (Germany). The Court referred four questions to the CJEU for a preliminary ruling. In essence, the Court asked the CJEU whether the FFAR was compatible with Articles 101 TFEU (prohibition on cartels), 102 TFEU (prohibition on abuse of a dominant position), 56 TFEU (freedom to provide services), and 6 GDPR (legal bases for processing personal data). With regards to Article 6 GDPR specifically, the referring court essentially asked whether there was a lawful basis under the GDPR for a collection of personal data, such as required under the FFAR’s mandatory disclosure rules. Advocate General Opinion The referring question did not specify what legal basis had to be examined in order to assess the compatibility of FFAR disclosures with the GDPR. However, the AG opined that interest under Article 6(1)(f) was the relevant legal basis, based on the nature of the FFAR rules and on other information on the order for reference. Therefore, the AG focused on the legal basis of legitimate interest exclusively. The AG recalled that the mandatory disclosure under FFAR were compatible with the GDPR if they met three cumulative requirements: They genuinely pursued an interest worthy of protection; They were limited to what was strictly necessary to that end; They did not place an intolerable burden on the data subjects as regards their right to privacy and their financial interests. The AG opined that in the case at hand, the processing of personal data pursued an interest worthy of protection (that is, FIFA’s interest in ensuring that the conduct of agents was consistent with the core objective of the football transfer systems, and other objectives related to the good functioning of the player market). However, the AG was more cautious about the other two requirements. With regards to the requirement of necessity, the AG noted that FFAR required the collection of a substantial amount of personal data, including delicate data about agents’ remuneration and contractual agreements. Additionally, FIFA would not only receive the data but also make it available to stakeholders such as clubs, players, and player’s agents. The AG opined that such a broad collection and disclosure of personal data could, to some extent, exceed what was strictly necessary to pursue FIFA’s legitimate interest. In that regard, the AG stressed that FIFA should explain to the referring court why the collection and disclosure of the data were necessary, in relation to each type of information. With regards to the balancing of interests, the AG opined that agents operate within a regulatory framework and, therefore, have a reasonable expectation that FIFA would process their data as a regulatory body. In the AG’s view, this expectation could weight favorably on the balancing of legitimate interest. At the same time, the AG opined that the availability of agents’ personal data to both competitors and potential clients, could financially harm agents and erode trust in agent-client relationships. Holding The CJEU held that processing based on Article 6(1)(f) GDPR is lawful only where three cumulative conditions are met. First, the controller or a third party must pursue a legitimate interest. Second, the processing must be necessary for that interest. Third, the interests or fundamental rights and freedoms of the data subject must not override the legitimate interest pursued. Regarding the information agents were required to submit through the controller’s digital platform under Article 16 FFAR, the Court considered that ensuring compliance with the regulatory framework governing football agents could constitute a legitimate interest. This was conditional on the underlying obligations being compatible with EU and national law. The Court found that the information required under Article 16 FFAR appeared capable of identifying attempts to circumvent rules o","https:\u002F\u002Fgdprhub.eu\u002Findex.php?title=CJEU_-_C%E2%80%91209\u002F23_-_RRC_Sports&diff=52433&oldid=52419","https:\u002F\u002Fgdprhub.eu\u002Fimages\u002F8\u002F87\u002FCjeulogo.png","2026-07-22T07:57:40+00:00","2026-07-22T08:00:14.59481+00:00",7,[18],{"name":19,"type":20},"FIFA","vendor","c5c77cdb-f7d7-4990-9436-c81dcbff1163",{"id":21,"icon":23,"name":24,"slug":25},null,"Policy","policy",[27,32,37],{"category":28},{"id":29,"icon":23,"name":30,"slug":31},"3f0f8451-91df-4b6c-9a73-ef3b2509b7f1","GDPR","gdpr",{"category":33},{"id":34,"icon":23,"name":35,"slug":36},"614132b8-5837-4952-b8b5-c6c9a32a1d85","Privacy","privacy",{"category":38},{"id":21,"icon":23,"name":24,"slug":25},[]]