Case study 1: Leisure centre requests excessive personal data from patrons. [2011] IEDPC 1 (2011)

The systematic recording of patrons' names, contact details, and medical information as a condition of entry was a disproportionate and excessive response to the stated aims of health promotion and child protection, and could not be justified under the Data Protection Acts.

Citation: [2011] IEDPC 1
Parties: Complainant: Complainant (Individual); Respondent: Swan Leisure, Rathmines
Jurisdiction: Ireland
Procedural Posture: Data Protection Complaint / Decision by Data Protection Commissioner
Outcome: Complaint upheld
Legal Topics: Excessive Data Collection, Sensitive Personal Data, Medical Data, Child Protection Policy, Data Minimisation

Data Protection Excessive Data Collection Sensitive Personal Data Medical Data Child Protection Policy Data Minimisation

Case Brief

Summary, issues, holding and outcome

More case intelligence is available

Unlock the full research layer for this judgment.

Full judgment text Downloadable case file Legal principles 2 Authorities cited 1 Party arguments 2

Parties

Complainant (Individual)

Complainant

Swan Leisure, Rathmines

Respondent

Procedural Posture

Data Protection Complaint / Decision by Data Protection Commissioner

Legal Issues

1 Whether the leisure centre's requirement for patrons to provide extensive personal and medical data as a condition of entry was excessive and in breach of data protection law

Ratio Decidendi

Court Disposition

Complaint upheld

Orders

Leisure centre changed its policy so that completion of the guest register form is no longer a condition of entry.
Patrons' right not to provide personal information is respected.