GDPR for Gyms and Fitness Businesses: Member Data, Health Information, and Biometrics

Gyms and fitness studios collect more sensitive personal data than almost any other type of small business — and most owners have never given it serious thought from a compliance perspective. Think about what happens when someone joins your gym: they fill in a health questionnaire disclosing injuries and medical conditions, they hand over payment details, they're photographed or fingerprinted for access control, their attendance is logged, their class bookings are tracked, and their progress might be synced to a wearable app. Every one of those data points is regulated by GDPR, and several of them — health data, biometrics — trigger the regulation's strictest protections. This guide is written for gym owners, fitness studio operators, personal trainers, and anyone running a health and fitness business. It covers the specific GDPR obligations that apply to your sector, what you're probably getting wrong, and what you need to put right. Start by scanning your website at Custodia to see w