Squad Readiness
for UK Sport.
Athlete monitoring for Premier League clubs, EFL sides, Premiership Rugby and the county game — built to UK GDPR, registered with the ICO, and hosted on UK soil.
EchoDepth Sport in the United Kingdom
EchoDepth Sport is a squad readiness and athlete monitoring platform used by professional clubs in the United Kingdom. Each player completes a short voluntary check-in, typically under 60 seconds. The platform returns self-reported readiness and motivation alongside observable delivery signals — speech rate, response latency, positive language frequency and fatigue indicators — measured against that player's own rolling 30-day baseline rather than against team-mates. Coaching staff see a squad-level readiness index; individual-level detail is released only to medical and welfare staff under the club's existing clinical confidentiality arrangements. Processing is governed by the UK GDPR and the Data Protection Act 2018, health data is handled as special category data under Article 9, and all data is stored in the United Kingdom. Output is contractually barred from informing selection, substitution, contract, retention or academy pathway decisions.
What gets measured
UK performance departments already run GPS, force plates and an athlete management system. The gap is not physical load data — it is a reliable read on how the athlete is actually coping, captured often enough to be useful and honestly enough to be trusted. Squad readiness measurement closes that gap without adding another compulsory questionnaire to the morning routine.
Squad readiness measurement
A readiness index is produced each morning from the players who chose to check in. Self-reported readiness and motivation are captured directly; speech rate, response latency, positive language frequency and fatigue indicators are derived from how the player answered. Every signal is compared to that player's own 30-day baseline, so a naturally quiet athlete is never scored against a naturally expressive one.
Training load and recovery monitoring
Fatigue indicators from the check-in sit alongside GPS, RPE and physical load data, giving sports science and medical staff a fuller recovery picture than either source alone. Fatigue is treated as a physical state and reported as such: a rising squad-wide fatigue trend is a periodisation question for the performance team, not a judgement about any individual athlete.
Return-to-play and concussion support
Where a club already runs a graduated return-to-play protocol, the check-in provides a pre-injury behavioural baseline to compare against during reintegration. It supplements clinical judgement and never replaces it — no return-to-play decision is made by the platform, and no output is presented as a diagnosis.
Academy welfare measurement
The same voluntary check-in runs in academy environments with tighter governance. Parental or guardian consent sits alongside player assent, output routes to the designated safeguarding lead and club doctor, and the data is walled off from recruitment, retention and pathway decisions entirely.
The law that applies
The United Kingdom is outside the EU AI Act and has not enacted an equivalent statute. UK obligations come instead from data protection law, ICO guidance on biometrics and AI, and the safeguarding standards imposed by each sport's governing body. The practical bar is high regardless: a professional athlete is a worker, a training ground is a workplace, and health data is special category data.
UK GDPR
Retained Regulation (EU) 2016/679, as amended
- What it requires
- A lawful basis for processing and a separate Article 9 condition for health data. Data minimisation, purpose limitation and storage limitation apply throughout.
- How EchoDepth meets it
- Article 6(1)(a) consent plus Article 9(2)(a) explicit consent, captured per player and withdrawable at any time without consequence. Purpose is bound in the deployment agreement to welfare and readiness only.
Data Protection Act 2018
DPA 2018, Parts 2–4 and Schedule 1
- What it requires
- UK-specific conditions and safeguards supplementing the UK GDPR, including an appropriate policy document for special category processing.
- How EchoDepth meets it
- Appropriate policy document maintained and supplied to the club on deployment. Cavefish Ltd is registered with the ICO under ZB915633.
DPIA obligation
UK GDPR Art. 35; ICO high-risk processing list
- What it requires
- A Data Protection Impact Assessment before processing likely to result in high risk, which includes large-scale special category processing and monitoring in the workplace.
- How EchoDepth meets it
- A DPIA pre-completed for this deployment pattern is provided to the club's Data Protection Officer, who owns and signs off the final assessment.
Children's Code
ICO Age Appropriate Design Code
- What it requires
- The best interests of the child as a primary consideration, data minimisation, high-privacy defaults, and no nudge techniques encouraging children to disclose more.
- How EchoDepth meets it
- Academy deployments default to the most private configuration available, carry no completion incentives or streaks, and route output away from any recruitment function.
Employment practices
ICO employment practices and data protection guidance
- What it requires
- Monitoring of workers must be necessary and proportionate, workers must be informed, and consent must be genuinely freely given despite the power imbalance in an employment relationship.
- How EchoDepth meets it
- The check-in is player-initiated. Non-completion is never flagged, chased, scored or reported to coaching staff, which is what keeps the consent meaningful.
This page describes how the product is configured for the United Kingdom and is provided for information only. It is not legal advice. Clubs should take their own advice on their obligations before deployment. Last reviewed 2026-09-14.
Lines we do not cross in UK
Some of these constraints go further than UK law strictly requires. They are written into the deployment agreement rather than left to policy, because a welfare tool that can quietly become a selection tool is not a welfare tool.
The athlete starts it
Nothing is captured passively — not from a training-ground camera, not from a press conference, not from anywhere else. If the player does not check in there is no data, no inference, and no note recorded that they declined.
Signals, not emotion labels
The platform reports speech rate, response latency, positive language frequency and fatigue indicators against the player's own baseline. It does not tell a club that a player is anxious, and it does not claim to detect concealed or suppressed states.
Walled off from selection
Output cannot inform selection, substitution, contract, retention or academy pathway decisions. That restriction is a term of the deployment agreement, enforceable by the club and by the player.
Clinical confidentiality preserved
Individual-level detail reaches club medical and welfare staff under the same confidentiality that governs any other health record, and goes no further. Coaching staff receive the squad-level index only.
Who else sets the standard
UK deployments sit inside an existing welfare architecture rather than alongside it. Each competition and governing body already sets a standard, and the platform is configured to the strictest one that applies to the club.
Premier League
Mandated welfare provision and academy audit under the Elite Player Performance Plan.
English Football League
Club welfare obligations and safeguarding standards across all three divisions.
The Football Association
Safeguarding standards governing every under-18 deployment.
Premiership Rugby and the RFU
Player welfare standards and graduated return-to-play protocol.
England and Wales Cricket Board
Touring squad welfare and county academy duty of care.
Professional Footballers' Association
Player representation on monitoring, consent and data use.
UK questions
Is EchoDepth Sport compliant with UK GDPR?+
Does the UK have an equivalent of the EU AI Act?+
Can squad readiness data be used to pick the team?+
What happens if a player does not complete the check-in?+
How does this work for academy players under 18?+
Where is UK athlete data stored?+
See EchoDepth
In UK.
Bespoke demonstration scoped to the United Kingdom obligations. We will also tell you what we would decline to deploy here.
Book Demo