Sharing of Personal Data Globally

[Hughesy60]

I was recently ejected and banned from ECB-sanctioned events under suspicion of transmitting live information from the venue. I want to emphasise the term ‘suspicion’ because the sole basis for this decision is the discovery of a mobile games controller in my possession, no images or videos support the claims. This lack of evidence arises because I was not actively using the controller, the controllers purpose has only ever been for playing games on my mobile device. During my interaction with the ACU officer, they took a mugshot of me and photos of my belongings. They also gathered my personal information from the ticket I held.

I have initiated an ongoing appeal against this decision. However, my primary concern lies not in whether the decision will be overturned, but in the letter they issued to me (excerpt below). This letter asserts their right to share my personal data with cricket authorities across the globe, encompassing up to 15 countries. It’s disconcerting that such an extensive data sharing is based solely on one individual’s suspicion and no evidence. This strikes me as excessively intrusive.

After this unfortunate incident, I took it upon myself to fully understand the accusations being directed my way and discovered the term “pitchsiding.” As it happens, pitchsiding is not a criminal offense, an unlawful act, or a form of fraud. However, it is against the terms and conditions of entry.

If anyone can provide advice or insights regarding personal data matters, I would greatly appreciate it. Alternatively, if you could direct me to lawyers specializing in personal data law, I would be grateful. Most of the firms I’ve come across seem to focus solely on the business aspects of personal data.

Excerpt from Letter

Sharing your personal data. We will share the necessary elements of your personal data for the same purposes with:
- other cricket organisations including first class county cricket clubs, county cricket boards and, where relevant, other international or national cricket associations (such as the International Cricket Council)

Legal Basis: We process (including sharing) your personal data with your consent or because it is in out legitimate interests and those of others in cricket and other sports to do so (and your rights and freedoms do not override these interests) in order to ensure compliance with ground regulations and anti-corruption rules and also to uphold standards and protect the reputation and integrity of sport and, where applicable because it is necessary for the prevention or detection of crime or unlawful acts, preventing fraud, to safeguard a child / individual at risk and/or the establishment, exercise or defence of legal claims.

I've had trouble uploading the full letter and will attempt to try again tomorrow.

[PallasAthena]

Have you spoken to the ICO [Information Commissioner's Office]? They are the obvious source of expert advice before you spend money on a solicitor.

I'm not an expert on this but I do know that "legitimate interests" is one of the legal exemptions under the Data Protection Act which permits data processors to share your personal data without your permission. ICO guidance on it here:

What is the "legitimate interests" basis? | ICO

I'd never heard of "pitchsiding" either so to save others here looking it up it is (copied from an Australian media source, hence Aussie references)

"[Pitchsiding] involves a spectator using an electronic device to bet - or relay information - to someone who places a live in-play bet which takes advantage of the slight time difference in overseas broadcasts to potentially gain an advantage over bookmakers before odds are changed. Cricket Australia and the International Cricket Council's anti-corruption unit have worked tirelessly in recent years to stamp out the activity; while not illegal in NSW, is not a good look for a sport trying to distance itself from the shady underworld of match-fixing."

[Hughesy60]

Thanks a lot for this, I will have a good read and consider next steps.