12JUN

SoFi workers take FIFA to privacy law

2 min read

09:25UTC

UNITE HERE Local 11 filed a privacy complaint over FIFA's accreditation system on Wednesday 27 May, arguing it forces stadium workers to surrender personal data that reaches federal immigration agencies.

← Back to Mexico finally win an opener, on the ninth try Jump to analysis ↓

SportDeveloping

Key takeaway

The same coalition now argues FIFA's sign-up paperwork hands worker data to ICE unlawfully.

UNITE HERE Local 11, the hospitality union for southern California, rallied at FIFA's downtown Los Angeles host-committee offices on Wednesday 27 May and filed a formal complaint with the California Privacy Protection Agency and the state attorney general ¹. The union alleges FIFA's worker-accreditation system compels staff to hand over a social security number, home address, nationality and country of birth, and to waive their rights under the CCPA (the California Consumer Privacy Act, the state's data-protection law), with that data then passed to the Department of Homeland Security and ICE, the federal immigration enforcement agency ². Gubernatorial candidate Tom Steyer joined the campaign.

The dispute began as a labour matter. Local 11 filed a charge with the NLRB, the National Labor Relations Board, naming FIFA as co-respondent on Friday 8 May , then held a rally on 19 May demanding immigration agents be barred from SoFi Stadium . The 27 May filing changes the legal terrain entirely: it leaves labour law for data-privacy law, a different statute and a different regulator, and it targets not who may enter the stadium but who may read the workforce's files.

That distinction has an operational edge. The accreditation contractor, not FIFA's security operation, holds the worker data, which is why the complaint names a privacy regulator rather than the labour board. If the agency finds the data-sharing unlawful, FIFA's vetting workflow is exposed to a state injunction weeks before SoFi hosts the opener on Friday 12 June.

Deep Analysis

In plain English

To work at a World Cup match in Los Angeles, staff must pass an accreditation process, essentially a background check run by FIFA. Workers at SoFi Stadium say this requires them to hand over sensitive personal information: their social security number (a US national identification number), home address, nationality and country of birth. The accreditation forms reportedly include wording that lets FIFA share this data with US government agencies, including the Department of Homeland Security and ICE (Immigration and Customs Enforcement), which carries out immigration arrests and deportations. Many of the roughly 2,000 workers the union represents are immigrants. If their data reaches ICE, they fear immigration enforcement simply for doing their job. The union argues this breaches California's privacy law, the CCPA, which gives people rights over their personal data.

What could happen next?

Risk
A successful CPPA enforcement action could require FIFA to suspend or modify its accreditation data-sharing practices mid-tournament, disrupting venue staffing at SoFi Stadium.
Immediate · Suggested
Consequence
Tom Steyer's public alignment with the campaign converts a labour dispute into a gubernatorial campaign platform issue, giving the complaint sustained political visibility beyond the union's own media reach.
Short term · Assessed
Precedent
A CPPA finding against FIFA's accreditation data practices would require every future tournament organiser operating in California to adopt CCPA-compliant accreditation systems.
Long term · Assessed

Source Landscape

This story draws on neutral-leaning sources

Consensus view: Routing the fight through privacy law rather than labour law gives the union a sharper hook. Under California's privacy statute, an organisation that decides why and how personal data is collected counts as a regulated business even if it is not registered in the state, so FIFA's Swiss base is no shield when its accreditation system is processing worker data inside California. That keeps the case on home turf for a Californian regulator.

Counter-view: California's privacy law carves out disclosures made for law-enforcement purposes, and that exemption is the complaint's main weakness. If FIFA passed worker data to DHS and ICE in response to government requests, the conduct may sit outside the Act's strongest provisions altogether, and the complaint could shrink to a narrower disclosure-and-consent question carrying smaller penalties and less political weight.

Key tension: Whether FIFA's consent wording authorising sharing 'with government authorities' counts as adequate disclosure that workers understood meant DHS and ICE, or whether that phrasing was vague enough to obscure where the data would actually go.

Sources:MyNewsLA

Mentions:UNITE HERE Local 11 →FIFA →California Consumer Privacy Act →SoFi Stadium →DHS →ICE →National Labour Relations Board →California →Los Angeles →World Cup →

First Reported In

Update #12 · Squads land, subpoenas follow

MyNewsLA· 29 May 2026

Read original →

Causes and effects

Caused by

Brussels gives no case number on Article 102 file

The Commission's silence past the April deadline was the prior story; the acknowledgement on 28 May ends that silence.

Occurred 11 May 2026

Read story →

This Event

SoFi workers take FIFA to privacy law

The union's fight has moved from labour law to data-privacy law, bringing in a regulator the earlier charge never engaged.

Led to

SoFi workers vote on a strike

The CCPA complaint over FIFA sharing accreditation data with ICE is the specific filing that widened the dispute beyond wages, referenced in this event's current vote.

Occurred 3 Jun 2026

Read story →

Different Perspectives

FIFA

The 48-team tournament opened on schedule with 104 matches and a $13.1 billion projected revenue cycle, but three of the first weekend's most consequential stories, Iran's fan lockout, SoFi's embedded strike clause, and Malagò's eligibility suspension, were each decided by domestic legal systems operating outside FIFA's authority.

Morocco

Mohamed Ouahbi takes charge of his first senior match in football management against the five-time world champions, with the full-strength defensive structure that reached the 2022 semi-finals intact and facing a Brazilian lineup missing its three most celebrated attackers.

Brazil

Brazil open Group C on Saturday at MetLife without Neymar, Estêvão or Militão against a Morocco side managed by a first-time senior coach, making their opener the most consequential group-stage fixture of the opening weekend in terms of pre-tournament expectation versus squad availability.

FIGC / Italy

CONI's referral of the Malagò eligibility question entirely to ANAC means Italy's federation enters the group stage without a confirmed president-elect, with the anti-corruption regulator holding the power to remove the Serie A-backed frontrunner from the ballot ten days before the 22 June election.

United States

The co-host avoided its worst opening image when SoFi workers ratified a deal averting a strike before Friday's Paraguay opener, though the contractual walkout clause means the threat is deferred not dissolved. Pochettino named his XI with Tillman over Reyna, signalling he will manage risk rather than chase headlines against Paraguay.

FFIRI / Iran

Iran's squad trains in Tijuana with 14 staff still barred from the US, and learned on 9 June that their entire 8% supporter ticket allocation for all three Group G matches was revoked under OFAC sanctions. FFIRI is preparing an Article 4 FIFA complaint over the conditions of participation.