WADA Agrees to Restrict Apply of Athlete Data to Anti-Doping Purposes

The World Anti-Doping Agency (WADA) has agreed to limit the use of athletes’ highly sensitive personal information to strictly “anti-doping purposes,” resolving a years-long investigation by the Office of the Privacy Commissioner of Canada (OPC). The agreement, announced on Tuesday, March 17, 2026, addresses concerns about how athlete data was being shared and utilized by international sports federations.

Investigation Triggered by Data Sharing Concerns

The OPC launched an investigation in November 2024 following a complaint alleging that WADA disclosed biological sample information to international sporting federations. The complaint stated these federations were using the information to assess athletes’ sex-based eligibility without their knowledge or consent [Privacy Commissioner of Canada]. Such actions, if substantiated, would violate Canadian privacy law, to which WADA became subject in 2015.

Terms of the Compliance Agreement

Under the terms of the compliance agreement, WADA will update the World Anti-Doping Code by January 1, 2027, to explicitly state that athlete information collected through its Anti-Doping Administration and Management System can only be used for anti-doping activities [Global News]. WADA must also communicate this change to all anti-doping organizations within one month of signing the agreement and report on the mechanisms used to ensure compliance within six months.

The agency will submit quarterly reports to the OPC detailing its progress in implementing the remedial measures until they are fully in place. Privacy Commissioner Philippe Dufresne retains the authority to seek a court order to enforce compliance if necessary.

WADA’s Position and Commitment

WADA has stated it is “pleased” to enter the compliance agreement and resolve the investigation [WADA]. A spokesperson emphasized that WADA takes athlete data privacy seriously and maintains compliance with applicable laws, including Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

While WADA has not admitted to any violation of privacy rules, it has committed to working with regulators to address evolving privacy best practices. The agency’s spokesperson clarified that WADA’s decision to enter the agreement does not constitute acceptance of the OPC’s jurisdiction over the matters addressed, and WADA reserves its rights in that regard.

Timing and Context

The agreement comes shortly after the conclusion of the Winter Olympic Games in Italy and with the FIFA World Cup, co-hosted by Canada, the U.S., and Mexico, scheduled to begin in three months.