€15,000 Penalty for Insisting on Covid Certificate During Sports Test in La Gomera

:

Data Privacy Fine for Race Organizer Over Health Data Collection

A race organizer has been fined €8,000 by a data protection agency for violating data privacy regulations during a 2021 event. The organization required participants to provide COVID-19 vaccination certificates, proof of recovery, or negative test results within 48 hours of the event. The agency steadfast this practice was unlawful as participants were not adequately informed or asked for explicit consent regarding the processing of their sensitive health data.

Despite defending the measure as necessary due to the epidemiological situation at the time and having the support of the local health service, the organization’s arguments were dismissed. The agency cited failures including a lack of clear information about data processing, lacking legal basis to demand health information, and a failure to register data processing activities.

The fine is broken down into three parts: €8,000 for inappropriately collecting data, €1,000 for failing to provide sufficient information to participants, and €6,000 for failing to ensure informed and freely given consent. The organization argued that no participants were prevented from registering due to lack of documentation, and most runners did not submit the required tests. However, the agency maintained that even voluntary data collection impacting sensitive personal information is a violation.

What legal basis did the individual in La Gomera have for requesting Covid certificates?

The Case: A Breach of Health Regulations in La Gomera

A recent incident in La Gomera, Canary Islands, has resulted in a considerable €15,000 penalty levied against an individual for demanding Covid certificates during a non-regulated sports test. This case highlights the evolving legal landscape surrounding Covid-19 restrictions and the importance of adhering to current health protocols, particularly concerning access to events and activities. The incident occured on August 26, 2025, during a local amateur running event.

Understanding the Current Regulations in the Canary Islands

as of August 2025, the Canary islands have largely lifted mandatory Covid-19 restrictions. Though, specific regulations remain in place, primarily focusing on healthcare settings and vulnerable populations.Crucially, demanding proof of vaccination or negative Covid tests for events not specifically designated as requiring them is considered a breach of current health guidelines.

No General Requirement: There is no longer a general requirement for Covid certificates to access most public spaces or events in the Canary Islands.

Healthcare Settings: Covid protocols, including mask-wearing and potential testing, remain in effect within healthcare facilities.

Vulnerable Groups: Specific measures may be implemented to protect vulnerable populations in certain settings, such as care homes.

Event Organizers’ Discretion (limited): While event organizers can implement stricter measures, they must be justified and proportionate, and cannot discriminate based solely on vaccination status.This requires a clear risk assessment and adherence to data protection laws.

Why the €15,000 Fine? – Legal Basis & Justification

The penalty imposed stems from a violation of regulations protecting citizens’ rights and preventing discrimination related to health status. The individual in La Gomera was found to have acted outside the scope of permitted health checks and imposed an unauthorized requirement on participants.

Discrimination Concerns: Insisting on Covid certificates for an event where they are not legally mandated is considered discriminatory.

Breach of Privacy: Requesting health information without a legal basis can violate data protection regulations (GDPR applies to the Canary Islands).

Overstepping Authority: The individual was not an authorized health official and had no legal standing to demand health documentation.

Public Health Order: The action was deemed to contradict the current public health order aimed at normalizing activities and removing unneeded restrictions.

Implications for Event Organizers in the Canary Islands

this case serves as a critical warning for event organizers across the Canary Islands. It underscores the need for a thorough understanding of current regulations and the potential legal consequences of implementing unauthorized restrictions.

1. Consult Legal Counsel: Before implementing any health-related requirements, organizers shoudl consult with legal professionals specializing in public health law.
2. Risk Assessment: conduct a comprehensive risk assessment to determine if any additional measures are necessary, justifying them based on specific event characteristics and potential risks.
3. Clear Interaction: Clearly communicate any health protocols to participants in advance, ensuring transparency and avoiding ambiguity.
4. Compliance with GDPR: Ensure any collection or processing of health data complies with GDPR regulations.
5. Stay Updated: Regularly monitor changes in public health guidelines and adjust protocols accordingly. Resources include the official website of the Canary Islands Health Service (https://www.gobcanarias.org/sanidad/).

Real-World Examples & Similar Cases

while the €15,000 penalty in La Gomera is a significant figure, similar incidents have been reported across Spain and Europe. these cases frequently enough involve individuals or businesses attempting to enforce restrictions beyond those mandated by law.

Barcelona Restaurant Fine (2024): A restaurant in Barcelona received a fine for requiring proof of vaccination for indoor dining after the national mandate was lifted.

**Italian Gym Dispute (