Anti-corruption and betting regulation - information notice

1. Background

This Information Notice is intended to set out in more detail how your Anti-Corruption Related Data (as defined below) will be used and processed by World Rugby for the purposes of implementing the Anti-Corruption and Betting Rules set out in World Rugby Regulation 6.

Any documentation or notice provided to Players by World Rugby should be read in conjunction with this Information Notice.

World Rugby has its principal place of business at World Rugby House, 8-10 Pembroke Street Lower, Dublin 2, Ireland. World Rugby’s data protection officer is Liam McKenna, and you can contact the data protection officer by emailing dataprotection@worldrugby.org.

For more information on World Rugby’s privacy practices, policies and protocols, please see here: https://www.world.rugby/privacy-policy.

Unless defined in this Information Notice, capitalised terms used in this notice have the meanings given in World Rugby Regulation 6 (“Regulation 6”).

2. Scope of this Notice

This processing activities described in this notice apply to you if you are a Connected Person, or if you have otherwise agreed to be or have been required to, comply with and be bound by World Rugby Regulation (for example, on the basis that you will have access to Inside Information).

3. Processing of your Anti-Corruption Related Data (including lawful basis)

3.1 Categories:

Where you are subject to, or bound by Regulation 6, we may, in the circumstances described in Regulation 6, process the following personal data relating to you (referred to here as “Anti-Corruption Related Data”):

• any reports which I submit to World Rugby, any Union, Rugby Body or Anti-Corruption Officer pursuant to my reporting obligations under Regulation 6;
• any reports or evidence submitted to us relating to alleged conduct by you which may be in breach of Regulation 6 (known as “Anti-Corruption Breaches”), whether pursuant to our Confidential Reporting Policy or otherwise;
• any information which World Rugby receives from third parties (including law enforcement authorities, Unions and Rugby Bodies) relating to actual or potential Anti-Corruption Breaches;
• any personal records which, by agreeing to be bound by Regulation 6 (and you acknowledge that agreeing to be bound by Regulation 6 is a condition of participating in Rugby as a Connected Person), you have agreed to provide World Rugby (or Unions, Rugby Bodies or any Anti-Corruption Officer) and/or allow World Rugby (or Unions, Rugby Bodies or any Anti-Corruption Officer) to collect or seize in connection with any investigation into Anti-Corruption Breaches, including telephone records, bank account, credit card and transaction details, betting account records, internet and email records, computers and hard drives and other electronic information storage devices and documents, correspondence, addresses and contact details;
• the results of any investigation into alleged Anti-Corruption Breaches and/or the decisions of any Judicial Officer, Judicial Committee or Appeal Committee pursuant to the procedures set out in Regulation 6.

3.2 Purposes

Your Anti-Corruption Related Data will be processed by World Rugby in the following ways:

• your Anti-Corruption Related Data may be collected (including on request) and processed (e.g. recorded, retained, transmitted, and used) by and amongst the Company, World Rugby, Unions and law enforcement authorities, for the purposes of Regulation 6 and/or applicable laws;
• in any manner World Rugby deems appropriate in accordance with and for the purposes of Regulation 6 (including in connection with any investigation or proceedings under Regulation 6 involving you or any other person);
• to conduct any investigations or procedures set out in Regulation 6;
• to publish any final decisions made with respect to Anti-Corruption Breaches in connection with Regulation 6; and
• for any other connected purpose in the interests of World Rugby in maintaining the integrity of the sport of Rugby Union

3.3 Disclosures and transfers of your data

World Rugby may share any of your Anti-Corruption Related Data relating with any Union, Rugby Body, the Board, law enforcement authorities and/or any competent authority for the purposes of Regulation 6 and/or in accordance with applicable laws or the request of any law enforcement authority or other competent authority.

Some of these organisations may be located in countries outside of the European Economic Area and/or outside of the country in which you are resident and, in such circumstances, the Company shall comply with the requirements of applicable data protection law in respect of transfers of personal data outside of the European Economic Area and/or the country in which you are resident, to the extent that personal data is so transferred;

3.4 Lawful Basis

Our lawful bases for processing your Anti-Corruption Related Data is our legitimate interests in maintaining the integrity of the sport of Rugby Union, as well as any consent you provide in the context of your participation in rugby matches or competitions and/or applicable law which provides for such processing. We may also need to process your Anti-Corruption Related Data, regardless of whether you withdraw or refuse to grant consent, where necessary to establish, exercise or defend legal claims (including in relation to investigations into suspected violations of the Regulation 6 and/or applicable law or proceedings involving suspected violations of World Rugby Regulation 6 and/or applicable law).

4. Retention

We will retain your Anti-Corruption Related Data for as long as is necessary to conclude any investigations or disciplinary procedures in accordance with Regulation 6 and/or applicable law and to fulfil any legal obligations or directions of competent authorities with respect to the retention of such data. Where you are found to have committed an Anti-Corruption Breach pursuant to a decision taken under the procedures set out in Regulation 6, such decision may be published and retained in the interests of legal precedent.

5. Your rights under data protection law

You have the following rights under applicable law, although your ability to exercise these rights may be subject to certain conditions:

• the right to receive a copy of and/or access, correct, and/or modify the personal data that we hold about you, together with other information about our processing of that personal data;
• the right to request that any inaccurate data that is held about you is corrected, or if we have incomplete information you may request that we update the information such that it is complete;
• the right, in certain circumstances, to request that we erase your personal data; and
• the right, in certain circumstances, to request that we no longer process your personal data for particular purposes, or object to our use of your personal data or the way in which we process it.

If you have any questions about this privacy policy, the practices of the sites or your dealings with the sites, you can contact us at the contact details as set out below.

6. Contact

If you have any queries in relation to this notice, or if you would like to contact World Rugby in relation to your rights, please write to us at ataprotection@worldrugby.org or World Rugby House, 8 – 10 Lower Pembroke Street, Dublin 2.

You can contact our Data Protection Officer by emailing dataprotection@worldrugby.org.

7. Complaint

If you are not happy with the way that we have used your information or address your rights, you have the right to make a complaint to the Irish Data Protection Commission by using the following link: https://forms.dataprotection.ie/contact