With the EU AI Act entering phased enforcement in 2025-2026, any system using athlete data for workload, selection, or injury risk in an employment context likely falls under high-risk. For teams pulling 10–20 Hz GPS and HRV, that means documented data lineage, bias testing, and human oversight to protect athlete well-being, not just a UI tweak. Who’s auditing vendor pipelines and building consent/appeal workflows ahead of preseason?