GDPR - Protecting Personal Data

I'm currently in discussion with Scottish Rugby about their privacy policy in relation to their new player registration system . In the past, for a person to play in a Scottish Rugby run competition, that person had to be registered on the SRU player registration system.  Player registrations were administered by the Club that player played with, with each Club being a independant organisation, all of whom are Members / mutual stakeholders in the Union.  All rugby union games in Scotland are governed by Scottish Rugby rules, regulations and bye-laws. From 25th May, a new player registration was introduced, which Clubs will still administer, but it also gives players direct access to their record.  The first stage of implementing the new system is for the individual player to confirm their record by logging into the system, firstly accepting the SRUs privacy policy.