Finland's Data Protection Authority Rules Against Sports Ethics Center in Harala Doping Case

Finland's deputy data protection ombudsman has ruled that the Finnish Center for Ethics in Sports (Suek) should not have disclosed the name of athlete Lotta Harala when she was investigated for doping in 2020. The decision, which Harala received favorably, could pave the way for damages claims.

Suek had announced Harala's ban on January 29, 2021, even though the suspension had officially ended on January 12, 2021. Furthermore, Suek informed Harala on March 2, 2021, that it was investigating whether she had violated her ban, while the investigation was still in progress. The deputy ombudsman, Heljä-Tuulia Pihamaa, found that Suek had violated the EU's General Data Protection Regulation (GDPR) in both instances.

“

Suek had violated the European Union's data protection regulation in both matters.

Harala had been waiting for this decision for over five years. The delay was partly due to a similar case in Austria reaching the European Court of Justice in 2023, prompting the Finnish ombudsman to await a precedent. The court ruled on July 14, 2026, that publishing an athlete's name, ban duration, and reasons for sanctions is permissible under GDPR if assessed on a case-by-case basis. However, Pihamaa determined that there were no grounds to disclose Harala's name.

This ruling creates a conflict with the World Anti-Doping Agency (WADA) guidelines, which mandate that information about doping violations remain public for at least 30 days after the ban concludes. Olli Rauste, a sports law expert, noted in his blog that Harala could potentially seek compensation from Suek for lost sponsorship contracts due to the improper disclosure.

“

Harala could claim damages from Suek for lost sponsorship deals.