ECHODEPTHSPORTS
Book Demo →
European Union

Squad Readiness
Inside the AI Act.

The EU AI Act bans inferring the emotions of a worker at work, and no amount of consent lifts it. Here is how athlete monitoring still works — and what it is not allowed to do.

In one paragraph

EchoDepth Sport in the European Union

EchoDepth Sport is a squad readiness and athlete monitoring platform operating in the European Union under the EU AI Act, Regulation (EU) 2024/1689. Article 5(1)(f) of that Regulation prohibits placing on the market or using AI systems that infer the emotions of a natural person in the areas of workplace and education institutions, subject to a narrow exception for medical or safety reasons. A professional athlete is a worker and a training ground is a workplace, so the prohibition applies. EchoDepth therefore does not infer emotions in EU deployments: it reports what the player chose to tell the club — self-reported readiness and motivation — alongside observable delivery signals such as speech rate, response latency, positive language frequency and fatigue indicators, each compared to that player's own 30-day baseline. Fatigue is a physical state and is measured as one. The check-in is player-initiated, health data is processed under GDPR Article 9(2)(a) explicit consent, data is held in the EEA, and output cannot inform selection or contract decisions.

Primary AI regulationEU AI Act, Regulation (EU) 2024/1689
Key provisionArt. 5(1)(f) — emotion inference at work
Prohibitions applicable from2 February 2025
Data protectionGDPR, Regulation (EU) 2016/679
Lawful basisArt. 6(1)(a) + Art. 9(2)(a) explicit consent
Data residencyEuropean Economic Area
Performance measurement

What gets measured

The compliant question in Europe is not how accurately a system can read an athlete's emotional state. It is what a club can measure without inferring emotion at all. Everything below is either something the player chose to report or a physical and behavioural signal measured against their own baseline — which is why it survives Article 5(1)(f).

Self-reported readiness, not inferred state

The primary measure is what the athlete tells the club. Self-reported readiness and motivation are captured directly from the player in their own words, then tracked over time against their own history. No model assigns an emotional label, and no output asserts a state the player did not report.

Player reports readiness and motivation directly
No emotional category is assigned by the system
Tracked against the athlete's own 30-day baseline
Squad readiness index reported 0–100 at group level

Fatigue and training load monitoring

Fatigue indicators sit alongside GPS, RPE and physical load data. Fatigue is a physical state rather than an emotional one, which places it outside the Article 5(1)(f) prohibition and inside ordinary occupational health and sports science practice. A rising squad-wide fatigue trend is a periodisation question for the performance department.

Physical fatigue indicators, explicitly not emotion inference
Integrates with existing GPS, RPE and athlete management systems
Squad-level load and recovery trend across a training block
Informs training prescription, never team selection

Delivery signals against a personal baseline

Speech rate, response latency and positive language frequency are measured as observable properties of how an athlete answered, and compared only to that athlete's own history. The output is a deviation from personal baseline, not a claim about an internal state — a distinction the Regulation turns on.

Speech rate, response latency, positive language frequency
Compared to the athlete's own history, never to team-mates
Reported as deviation from baseline, not as an emotion
Individual detail released to medical and welfare staff only

Medical and safety use, narrowly scoped

Article 5(1)(f) carves out systems put in place for medical or safety reasons. Where an EU club relies on that exception — for example within a graduated return-to-play protocol — the scope is documented, the output is confined to clinical staff, and the exception is not used as a route to give coaching staff individual-level data.

Exception scope documented in the deployment agreement
Output confined to club medical staff
Never used as a workaround to reach coaching staff
Supports clinical judgement, never replaces it
Regulatory framework

The law that applies

The European Union regulates this category more tightly than any other market in the world. Two instruments matter most: the AI Act, which prohibits certain uses outright regardless of consent, and the GDPR, which governs the health data itself. A club also has to consider worker consultation obligations, which vary by member state.

EU AI Act — prohibited practices

Regulation (EU) 2024/1689, Art. 5(1)(f)

What it requires
AI systems that infer emotions of a natural person in the workplace or in education institutions may not be placed on the market or used, except where put in place for medical or safety reasons. This is an absolute prohibition — consent does not lift it.
How EchoDepth meets it
The platform does not infer emotions in EU deployments. It reports self-reported measures plus physical and behavioural signals against a personal baseline, and assigns no emotional label.

EU AI Act — transparency

Regulation (EU) 2024/1689, Art. 50

What it requires
Where an emotion recognition system is lawfully operated, the natural persons exposed to it must be informed of its operation, and personal data processed in accordance with the GDPR.
How EchoDepth meets it
Satisfied by design: the athlete starts the check-in, so exposure without knowledge is not possible. Plain-language notice is issued at consent and repeated in-product.

GDPR — special category data

Regulation (EU) 2016/679, Art. 9(2)(a)

What it requires
Data concerning health may only be processed on one of the Article 9 conditions. Explicit consent must be freely given, specific, informed and unambiguous, and as easy to withdraw as to give.
How EchoDepth meets it
Article 6(1)(a) plus Article 9(2)(a) explicit consent captured per player, withdrawable in-product at any time without consequence to selection, contract or standing.

GDPR — DPIA

Regulation (EU) 2016/679, Art. 35

What it requires
A Data Protection Impact Assessment before processing likely to result in a high risk, which includes large-scale processing of health data and systematic monitoring.
How EchoDepth meets it
A DPIA pre-completed for this deployment pattern is provided to the club's Data Protection Officer, who owns and signs off the final assessment.

Worker consultation

Member state law — e.g. German Betriebsverfassungsgesetz

What it requires
In several member states, introducing a technical system capable of monitoring worker performance or behaviour requires agreement with a works council or equivalent employee representation.
How EchoDepth meets it
Deployment documentation is prepared for works council review, and rollout is sequenced so that consultation happens before any player is asked to consent.

This page describes how the product is configured for the European Union and is provided for information only. It is not legal advice. Clubs should take their own advice on their obligations before deployment. Last reviewed 2026-09-14.

Where we stop

Lines we do not cross in EU

In the European Union these are not product preferences. Article 5(1)(f) is an absolute prohibition, which means a club cannot consent its way past it and neither can a player. The design below is how the product stays useful without going near the line.

No emotion inference at work

The platform does not infer, label or report the emotional state of an athlete in an EU deployment. It reports what the player said and how the delivery measured against their own baseline. This is the difference between a lawful readiness tool and a prohibited practice.

No passive capture

Nothing is captured from a training-ground camera, a press conference or any other ambient source. The athlete starts the check-in. If they do not, there is no data and no inference — and no record that they declined.

Consent is not the justification

Consent is the GDPR basis for processing health data. It is deliberately not offered as the answer to Article 5(1)(f), because under the AI Act it is not one. The product is scoped so the prohibition is never engaged in the first place.

Walled off from selection

Output cannot inform selection, substitution, contract, retention or academy pathway decisions. That restriction is a term of the deployment agreement, enforceable by the club and by the player.

Competition context

Who else sets the standard

European deployments run across markets with materially different employment and co-determination rules. The platform is configured to the strictest standard that applies to the club, and works council consultation is treated as a precondition rather than a formality.

UEFA

Club licensing and player welfare expectations across member associations.

Bundesliga and DFL

German co-determination means works council agreement precedes any monitoring rollout.

LaLiga

Spanish data protection supervision under the AEPD alongside GDPR.

Serie A

Italian Garante guidance on workplace monitoring and health data.

Ligue 1

CNIL guidance on employee monitoring and biometric processing.

Eredivisie

Dutch works council rights over systems capable of monitoring staff.

EU questions

Does the EU AI Act ban emotion recognition in sport?+
It bans a specific use. Article 5(1)(f) of Regulation (EU) 2024/1689 prohibits placing on the market or using AI systems to infer the emotions of a natural person in the areas of workplace and education institutions, except where put in place for medical or safety reasons. A professional athlete is a worker and a training ground is a workplace, so the prohibition applies to squad monitoring. It is an absolute prohibition, which means neither club consent nor player consent lifts it. The prohibitions in the AI Act became applicable on 2 February 2025.
How can EchoDepth Sport operate in the EU at all?+
Because it does not infer emotions. The platform reports two things: what the athlete chose to tell the club, being self-reported readiness and motivation, and observable delivery signals such as speech rate, response latency, positive language frequency and fatigue indicators measured against that athlete's own 30-day baseline. No emotional label is assigned and no internal state is asserted. Fatigue is treated and reported as a physical state. That scoping keeps the system outside the Article 5(1)(f) prohibition rather than relying on an exception to it.
Can a club rely on player consent to use emotion recognition?+
No. Article 5(1)(f) is an absolute prohibition on a practice, not a processing rule that consent can satisfy. Consent under GDPR Article 9(2)(a) is what makes the processing of health data lawful, and EchoDepth relies on it for that purpose. Consent is deliberately not offered as an answer to the AI Act prohibition, because it is not one. Any vendor telling a European club that consent makes workplace emotion inference lawful is describing the wrong statute.
Does the medical or safety exception apply to athlete monitoring?+
Sometimes, and narrowly. Article 5(1)(f) carves out systems put in place for medical or safety reasons. Where an EU club relies on that exception — for example inside a graduated return-to-play protocol — the scope is documented in the deployment agreement, output is confined to club medical staff, and the exception is never used as a route to give coaching staff individual-level data. Most EchoDepth EU deployments do not rely on the exception at all, because the product is scoped so the prohibition is not engaged.
Do works councils have to approve athlete monitoring?+
In several member states, yes. German law in particular gives a works council co-determination rights over the introduction of technical systems capable of monitoring the performance or behaviour of employees, and comparable employee consultation rights exist elsewhere in the EU. EchoDepth prepares deployment documentation for works council review and sequences rollout so consultation completes before any player is asked to consent.
Where is EU athlete data stored?+
In the European Economic Area. EEA data residency is the default for every EU deployment, with no routine transfer outside the EEA. Where a club or a member state regulator requires a specific residency, retention or deletion arrangement, it is agreed in writing as part of the deployment agreement.

See EchoDepth
In EU.

Bespoke demonstration scoped to the European Union obligations. We will also tell you what we would decline to deploy here.

Book Demo