The Norwegian Data Protection Authority (Datatilsynet) has commented on a draft law aimed at regulating the fight against doping and manipulation of sports competitions.

The authority welcomes the legal codification of anti-doping activities, intended to replace the authorizations and transitional rules dating from 2018. It notes improvements compared to a previous consultation in 2022. However, it considers that the consequences of the draft on the protection of personal data require further analysis. The draft law implements the missions of Anti-Doping Norway, the X Foundation, and sports organizations in accordance with the World Anti-Doping Agency (WADA) Code which will come into force on January 1, 2027, implying significant processing of sensitive data. Datatilsynet requests a more thorough assessment of the concrete obligations of the WADA Code and their impact, particularly regarding the proportionality of measures for amateur athletes.

The authority has also made other recommendations. It suggests studying the extension of the confidentiality obligation to persons within sports organizations. It approves the choice to publish doping decisions by default in an anonymized form, contrary to the WADA Code, but emphasizes the importance of ensuring the effectiveness of this anonymization. Datatilsynet requests the repeal of all transitional rules from 2018, including those concerning anti-doping controls in fitness centers. Finally, it recommends defining thresholds and a stricter framework for the Lottery Authority's access to information on clients and transactions held by financial institutions.