IPC Anti-Doping Privacy Notice
Last Updated: 24 October 2025
The International Paralympic Committee (IPC, we, us, our) is a signatory to the World Anti-Doping Code (the WADC). As the leader of the Paralympic Movement and organiser of the Paralympic Games and Paralympic Winter Games, it has the roles and responsibilities of a Major Event Organisation as set out in the WADC. Separately, in its capacity as the international federation for various Para sports, it has the roles and responsibilities of an International Federation as set out in the WADC.
The IPC has adopted and implemented the IPC Anti-Doping Code (the IPC Code) in accordance with these roles and responsibilities in the WADC, and in furtherance of the IPC’s continuing efforts to eradicate doping in Para sport. The IPC Code is available on the IPC website.
This privacy notice describes how we collect, use and share personal information about you to operate and maintain our anti-doping programme, and thereby help ensure a clean Para sport environment for all Para athletes and other stakeholders.
Furthermore, this privacy notice contains the relevant information pursuant to Art. 13 General Data Protection Regulation (GDPR) and provides information on how we process personal information in an anti-doping context.
This privacy notice is organised in the following sections:
- Types of personal information we process
 
- How and why we use personal information (purposes and legal bases)
 
- Personal information sharing
 
- Personal information rights
 
- Safeguards and retention
 
- Transfers to third countries
 
- Contact details
 
- Updates
Types of personal information we process
 
The types of personal information we process about you will depend on your level as an athlete or your role in Para sport. It will also depend on how the IPC Code applies to you.
For example, if you need a therapeutic use exemption, you will need to provide us with medical information. If you are charged with an anti-doping rule violation, you may need to provide us with evidence in your defence.
We collect the following types of personal information about you, as applicable: 
- Basic information, such as name, contact details (e.g., phone, email, address), date of birth, sport nationality, and the Para sport(s) you participate in.
 
- Education-related information, to ensure you receive and complete relevant trainings about anti-doping, such as course(s) completed, date(s) of completion, and assessment score(s).
 
- Whereabouts information, which indicates where you can be found for anti-doping testing (for example, addresses for activities like training and location(s) where you will be available for testing during a daily one-hour time slot). We will tell you if you need to provide us this information.
 
- Testing information, which is created when we collect samples from you for an anti-doping test (e.g., doping control form(s), type of test(s), sample code numbers, comments and information provided by you during a sample collection session) and the laboratory results from the analysis of your samples.
 
- Athlete Biological Passport (ABP) information, which is another tool to help identify doping based on analysis of laboratory results obtained from anti-doping samples. This may include information such as biological passport ID, blood and steroid biological marker values and ratios, and expert recommendations and assessments.
 
- Medical information, such as details of medical treatment, history and prescriptions when you need to apply for a therapeutic use exemption because you have a medical condition and need to use a substance or a method that is normally prohibited.
 
- Intelligence and investigations information, if we suspect you may have breached the IPC Code. This may include information or evidence obtained from third parties, open-source searches, witnesses and other confidential sources, or through cooperation with law enforcement agencies, including information which relates to potential violations of the Code committed by you or others.
 
- Results and sanction information, if we believe you have breached the IPC Code. This includes information about the anti-doping rule violation you are alleged to have committed, evidence you provided in your defence, and the decision on whether or not you have committed a violation. In the event we determine you have breached the IPC Code, it may result in publication of information such as your name, the Para sport(s) you participate in, details of the violation committed, the sanction(s) imposed and other details of your case.
If you are not an athlete, we still may need to collect personal information about you, such as basic information and education information, but we will not request whereabouts information or other information related to anti-doping testing.
How and why we use personal information (purposes and legal bases)
The fundamental rationale for the IPC’s anti-doping programme is set out in the IPC Code. Our role as an anti-doping organisation (ADO) is to help detect, deter and prevent doping in Para sport, in accordance with the WADC, International Standards (IS), and the IPC Code. This requires processing personal information so we can:
- Contact you in relation to your participation in Para sport.
 
- Provide training in relation to our anti-doping programme, the WADC and International Standards, the IPC Code and other education requirements.
 
- Schedule anti-doping testing at certain dates, times, and locations.
 
- Collect anti-doping testing samples.
 
- Analyse the samples collected and the resulting data.
 
- Review applications for therapeutic use exemptions and follow up on the same.
 
- Investigate your case to assess whether you have potentially committed any violations of the IPC Code.
 
- Contact other ADOs, for example your National Anti-Doping Organisation, other international federations and WADA to exchange relevant information necessary to investigate and manage your case (such as whether you have any previous anti-doping rule violations or a therapeutic use exemption).
 
- Communicate with you regarding any alleged violations of the IPC Code.
 
- Make a determination about any alleged violations of the IPC Code.
We also maintain records to improve, monitor and report on our anti-doping activities. This can include creating statistics by aggregating personal information. For example, we create statistics about anti-doping tests we conduct and anti-doping rule violations for which we are the results management authority.
To the extent applicable law requires a legal basis to process personal information, we will rely on an appropriate lawful basis in consideration of the data processed and relevant purpose(s), including:
- To comply with applicable law, such as any applicable laws relevant to anti-doping, integrity of Para sport, or compulsory legal processes.
 
- To perform a contract to which you are party, or to take steps at your request prior to entering into a contract – for example, an Athlete Eligibility Agreement for a Para sport or the Conditions of Participation Agreement to take part in the Paralympic Games. If we process your data for the fulfilment of a contract concluded between us, you are contractually obliged to provide us with your personal information for the purpose of fulfilling that contract. If you do not provide us with such information, we will not be able to fulfil our obligations to you arising from the contract or exercise our rights arising from it, and you may be unable to participate in Para sport as a result.
 
- To fulfil our legitimate interests to operate and maintain an anti-doping programme to help ensure the integrity of Para sport, and/or the legitimate interests of third parties, such as other ADOs, international federations (IFs), or other organisations involved in anti-doping efforts.
 
- To serve the important public interests tied to the detection, deterrence and prevention of doping in Para sport, such as protecting Para athlete health and the intrinsic values and spirit of Para sport.
If we process sensitive personal information, we will do so in accordance with applicable data protection laws, including where necessary to establish, exercise, or defend against legal claims. 
To the extent consent is required to lawfully process your personal information, we will request your consent in accordance with applicable law. You may have the right to withdraw your consent at any time after providing it, but this will not affect the lawfulness of data processing prior to such withdrawal. If you withhold or subsequently withdraw your consent, this decision could have certain consequences, including preventing you from participating in organised sport. Please also note that withholding or withdrawing your consent in relation to certain data processing activities does not affect the lawfulness of other data processing activities that are carried out pursuant to another valid legal basis described above. Specifically, regardless of whether consent is withheld or subsequently withdrawn, we may still need to process your personal information to: (i) commence or pursue analysis or investigations involving suspected anti-doping rule violations; (ii) conduct or participate in proceedings involving suspected anti-doping violations; and/or (iii) establish, exercise or defend against legal claims related to you or us.  
Personal information sharing
 
We many need to share your personal information with the following individuals and organisations to operate and maintain our anti-doping programme in accordance with the WADC, International Standards, the IPC Code and other related requirements:
- Individuals you authorise to receive or share your personal information, such as an agent, coach, doctor, or a parent or guardian.
 
- WADC Signatories which have testing authority, sample collection authority, or results management authority over you, like a National Anti-Doping Organisation, International Federation, or Major Event Organiser.
 
- WADA (the World Anti-Doping Agency), which ensures all WADC Signatories respect the terms of the WADC. WADA also operates and manages the anti-doping administration and management system (ADAMS), a platform hosted in Canada to which we will upload your personal information. Using ADAMS facilitates the collaboration and sharing of information needed to run our anti-doping programme.
 - For details about ADAMS, associated mobile apps like Athlete Central, and how WADA will process your personal information, review the ADAMS Privacy Policy or contact WADA at privacy@wada-ama.org.
 
- Laboratories and Athlete Passport Management Units that analyse anti-doping samples and the Athlete Biological Passport. These parties are subject to the International Standard for Laboratories, and only have access to coded data (based on sample codes or passport IDs).
 
- Delegated third parties and other service providers that we hire to help us carry out anti-doping activities and maintain our operations. We require delegated third parties and service providers to agree to strict contractual controls designed to protect your personal information.
 
- Public authorities responsible for enforcing sport and anti-doping laws and for investigating offences tied to doping in sport.
Personal information rights
 
Under the International Standard for the Protection of Privacy and Personal Information, you have certain rights in relation to your personal information, including the right to a copy of your personal information and to have it corrected, blocked or deleted in certain circumstances. You also have the right to lodge a complaint with us.
As a data subject, you have the following rights in accordance with the GDPR as far as the respective legal requirements are met:
- Access: You have the right to obtain information about your personal information processed by us and receive a copy of it.
 
- Rectification: You can obtain the rectification of inaccurate personal data concerning you, and the completion of incomplete data.
 
- Erasure: In specific cases you can obtain the erasure of your personal data.
 
- Objection and Restriction of processing: In specific cases you can object to the processing of your personal information or obtain restriction of processing of your personal information.
 
- Data portability: You may request that you receive your personal information in a structured, commonly used, and machine-readable format, or that we transmit the data directly to another data controller.
 
- Right of appeal: You have the right to lodge a complaint with a data protection supervisory authority, particularly one in the EU Member State of your habitual residence, work place, or the place of the suspected violation, if you are of the view that the processing of your personal information is unlawful.
Because anti-doping is a mandatory feature of organised sport, it still may be necessary for us, WADA, and other ADOs and organisations to continue to process your personal information to fulfil obligations under the WADC, the International Standards, their anti-doping rules and/or national anti-doping or sport laws, despite your objection to such processing. This includes processing for investigations or proceedings related to possible ADRVs, as well as processing to establish, exercise or defend against legal claims involving you, WADA and/or an ADO. 
Please contact us to exercise your rights or if you have questions or complaints about how we handle personal information, using the information provided in the “contact details” section below.
    
Safeguards and retention
 
We have adopted measures, including administrative, technical, physical and contractual measures, to protect personal information in our custody and control against theft, loss and unauthorised access, use, modification or disclosure.
We restrict access to personal information on a need-to-know basis to employees and authorised delegated third parties and service providers who require access to fulfil their designated functions. The anti-doping organisations we share personal information with are bound by the same standards as us when they handle your personal information. These standards are described in the International Standard for the Protection of Privacy and Personal Information. They include protecting your personal information, deleting it when no longer needed, being transparent, and allowing you to exercise rights like the right to access your personal information.
We will retain your information for as long as necessary to fulfil the purpose(s) for which it was collected, and thereafter as necessary to comply with applicable laws and in accordance with retention policies and standards applicable to us as an ADO. 
Transfers to third countries
 
WADC signatories with whom we share personal information may be located outside of your country of residence, and the data protection and privacy laws in these destination countries may not always be equivalent to those in your own country. Regardless of the destination country of any such transfers, WADC Signatories must always comply with the International Standard for the Protection of Privacy and Personal Information. Such transfers are a necessary consequence of participation in organised sport and facilitate the strong public interests served by eliminating doping in sport. WADA’s main offices are in Canada and Switzerland, and ADAMS is hosted by WADA in Canada. Both countries have been deemed to provide adequate protection for personal information by several regional and national data protection authorities, as well as the European Commission in the EU. When we share personal information with delegated third parties or other service providers, we ensure they are operating in a location that has been deemed to provide adequate protection for personal information, or ensure they are subject to appropriate contractual controls or other safeguards to protect your personal information in accordance with applicable law.
 
Contact details
 
If you have any questions about how we handle personal information, or have any complaints, please contact us at:
Data Controller:
International Paralympic Committee (IPC)
Dahlmannstraße 2
53113 Bonn, Germany
E-Mail: privacy@paralympic.org
Phone: +49-228-2097-200
Data Protection Officer: 
Boris Reibach, LL.M.
Scheja & Partners GmbH & Co. KG
Phone: +49-228-227-226-0
SSL-encrypted contact form: www.scheja-partners.de/kontakt/kontakt.html 
If you are not satisfied with how we have handled your complaint, you may contact your supervisory authority or notify WADA at compliance@wada-ama.org or privacy@wada-ama.org. WADA will handle the notice in accordance with the International Standard for Compliance by Signatories.
Updates
 
We may update this privacy notice from time to time to in order provide information on any changes to our collection and processing of personal information. When we make any changes to this privacy notice, we will revise the “Last Updated” date at the top to reflect such updates. Please periodically check back to ensure you have the latest information.
 
			 
						 
						