Associations handle personal data every day: names, addresses, payment details, sometimes health information for sports activities. The GDPR applies to all of it, whatever your size.
Collect only what you need
For each piece of information, ask whether you really use it. A membership form rarely needs a date of birth unless your activities depend on age.
Be clear about why
Tell members what you collect and why in plain language, ideally on the form itself.
Know how to answer requests
- Access: send members a copy of the data you hold about them.
- Correction: let members update their own details.
- Deletion: remove data you no longer need, except where the law requires you to keep it.
This article is general guidance, not legal advice. For specific situations, contact your national data protection authority.
Léa Moreau
Community lead, Formwise
