https://dpnetwork.org.uk/data-protection-principles/
Are FWS compliant with all of this? I doubt it, they are breaking multiple laws here.
The Data Principle principles include:
The Law- Collecting and using personal data needs to be done lawfully, and there are additional requirements when it is related to minors or vulnerable people (such as this case).
Fairness- Data can't be processed in a way that's unexpected, discriminatory or misleading. Any adverse effects on individuals need to be evaluated.
Transparency- FWS need to be a lot clearer about what data they are collecting and what exactly is going to be done with it. They haven't said much other than they will "map" trans women in sports. They also need to provide a privacy notice to the public explaining all this. These requirements apply from the start when data is being collected, but I don't see any privacy notice.
There's a section on purpose limitation. This may need to secure the consent of the trans people FWS are collecting data on (they are doing this? right? right?)
Data minimisation- data collected must be adequate, relevant and limited to what is necessary. The screenshot above shows FWS are asking for a lot of info about trans people e.g. "who they are" what does this mean? Why do FWS want names of trans women and what purpose are these names for?
Accountability- As a registered charity FWS need to provide evidence to the ICO they are compliant with all principles.
etc
There is also the Gender Recognition Act where sports teams/clubs etc are not legally permitted to identify to anyone if they have a trans member. It's a protected characteristic, FWS cannot legally demand to know who is trans.