Gym wants medical cert

The GDPR doesn't put any explicit limits on what data can be requested, collected or stored - only that there must be a legitimate purpose for requesting, processing or storing the information, and that purpose must be outlined in the organisations data privacy policy. Obviously, there's an awful lot more to the GDPR too, but it's a common misconception that there are blanket prohibitions to certain information being requested. A gym, for example, would be justified in asking for medical information, as it could have a bearing on their liability in terms of risk while exercising. But they would not be justified in asking for your religion, as it would have no bearing on the services they provide. A church would be justified in asking for your religion if you were applying to get married, but your medical history or status would be irrelevant and so they could not ask for that.

Regarding employers, in most cases on medical certificates it is not required to tell your employees what the specific medial reason is, as the legalisation simply states that you are allowed be off sick if you are certified by a doctor, and does not require you to disclose the specific reason. So there's no legitimate reason for them to know why you're unfit for work, just that you are. An example of an exception to this was during the Covid 19 pandemic, where employers were generally allowed (and indeed encouraged) to ask employees if they tested positive for the virus, as it was needed for reporting and contact tracing, which were legal requirements.

As for the gym asking for a medical cert, they're entitled to do that, again as they potentially have a liability since you disclosed treatment for a medical condition that could potentially have significance for the specific service they provide. If in your individual case it doesn't, then that's exactly what the cert is there to establish. There's plenty of sports organisations that require medical examinations and certs for all participants (CFT for scuba diving, for example), or for those that have specific health issues or risks.

Waivers are not worth the paper they are written on. You can not sign away legal rights.

Take it to court and it’ll still mean nothing.

I'd be taking this as a positive. They're not willing to risk your health for a sign up fee. They want to ensure it's safe to train you. Just what you want if you ask me.

When managing a gym a few years ago, a member died. His wife attempted to sue as she knew he had heart issues but he did not disclose them to us and lied on his application form. If he did, and was let join before giving a med cert, I assume we could have been liable to some degree.

They haven't asked for your medical history. They simply want a cert that you are cleared to train. No info needed. Just like the doctors cert when you were sick