Do we break DPA a lot?

[Podfrey]

Of course The NAF site (members and non-members versions) process, including disclosing, personal data in a filing system, such as Rankings, and therefore The NAF activities DO fall under the GDPR.

From a TFF perspective you will need something (usually Privacy Policy) on how and why it processes user’s personal data vis-a-vis site use. Just don’t use “Consent” as the lawful basis

[Wulfyn]

Before I do that, I don’t believe that being an individual makes you except. Article 2.2 (c) - which is what I believe Wulfyn is identifying as “an individual” - only provides excemption “by a natural person in the course of purely personal or household activity”. The question here would be whether hosting (and charging) for a tournament counts as “purely personal” or whether it is some form of commercial activity.

Do you pay tax on it? Because if it is a commercial activity then HMRC is a bigger problem for you than DPA/GDPR.

[Podfrey]

I believe tax would only be due where you are already a tax payer AND the tournament made profit (ie a positive net income). But I’m not a tax specialist.

[Wulfyn]

Well just go and declare it under self assessment and they'll tell you all you need to know. If nothing else it will avoid the fine for not telling them about your second income.

[lunchmoney]

.... about your second income.

I only just about break even on my tourneys. Certainly not an income