Passing of Risk under CISG and Incoterms 2020 Rules: Legal framework and Contractual Autonomy

Authors

  • Nastja Gorenc University of Maribor, Faculty of Law

DOI:

https://doi.org/10.18690/lexonomica.18.1.48-85.2026

Keywords:

international sale of goods, commercial practice, CISG, party autonomy, trade usages, passing of risk, carriage contracts, delivery terms, Art. 9 CISG, Incoterms 2020

Abstract

This article examines the relationship between CISG and Incoterms as key instruments regulating international sales contracts. Both frameworks reflect party autonomy, enabling parties to adapt contractual terms to the needs of modern global trade. CISG applies by default to international sales contracts under Art. 1 CISG, unless expressly excluded, while Incoterms apply through contractual incorporation or established usage. The article examines that Incoterms do not replace CISG but function alongside it, particularly regarding delivery and transfer of risk. Because Incoterms connect risk transfer to logistical events and CISG relies on legal criteria, inconsistencies may cause disputes when contracts are poorly drafted. In such cases, courts and tribunals interpret the parties’ agreement through Arts. 8, 9 CISG rather than redefining obligations. The article emphasizes that, despite some ambiguities in CISG’s risk provisions, it remains a major achievement in harmonizing international sales law. When combined with Incoterms, it provides a more effective framework for allocating risk and responsibilities. The article concludes that disputes are best avoided through clear drafting that regulates CISG’s role, the relevant Incoterms rule, and defines the parties’ obligations.

Povzetek članka v slovenskem jeziku (abstract in Slovene language):

Članek opisuje sistem varstva podatkov športnikov v Sloveniji. V tej zvezi razlikujemo med podatki o tekmovanjih in podatki o zmogljivosti. Slednji so še posebej občutljivi, a hkrati zelo zaželeni s strani različnih klubov ali organizatorjev prireditev, ki želijo te podatke izkoristiti izključno v lastno korist. V nekaterih primerih pride do zlorabe ali protipravnega razkritja osebnih podatkov zaradi pomanjkljive pravne ureditve. V nekaterih drugih primerih pa je ustrezna pravna podlaga za varstvo športnika podana – to je še posebej pogosto v primerih obsežnejših zbirk podatkov, ki jih zbirajo uradni organi ali oblasti, kot je Ministrstvo za šport. Članek prav tako predstavlja več pravnih aktov, ki neposredno ali posredno varujejo podatke športnikov. Dejstvo, da v mednarodnem ali nacionalnem pravu pravno varstvo ni vedno neposredno podeljeno športnikom, ampak posameznikom v bolj splošnem smislu, še ne pomeni, da jevarstvo športnikov kaj slabše ali nezadostno. Nenazadnje pa članek naslavlja tudi nekatere bolj specifične teme, kot denimo varstvo podatkov športnikov v primeru kršitev protidopinških pravil, posebno ureditev podatkov o zdravju športnikov.

Downloads

Download data is not yet available.

Author Biography

  • Nastja Gorenc, University of Maribor, Faculty of Law

    University of Maribor, Faculty of Law, Maribor, Slovenia, nastja.gorenc@gmail.com

References

Agrawal, S. (2025). Clean sport, clouded rights? Völkerrechtsblog. Retrieved from: <https://voelkerrechtsblog.org/clean-sport-clouded-rights/> (available on February 3, 2026).

Anonymous. (2025). CJEU Advocate General finds publishing anti-doping law violations must align with GDPR. Freevacy. Retrieved from: <https://www.freevacy.com/news/cjeu/cjeu-advocate-general-finds-publishing-anti-doping-law-violations-must-align-with-gdpr/> (available on February 3, 2026).

Anonymous. (2023). Data is changing the game: The use of performance data in international sport. Osborne Clarke Insights. Retrieved from: <https://www.osborneclarke.com/insights/data-changing-game-use-performance-data-international-sport> (available on February 3, 2026).

Brown, S. M. & Brison, N. Z. (2020). Big Data, Big Problems: Analysis of Professional Sports Leagues' CBAs and Their Handling of Athlete Biometric Data. Journal of Legal Aspects of Sport, 30 (1), pp. 63-81. DOI: https://doi.org/10.18060/23894

Brown, S. M. & Brown, K. M. (2012). Should Your Wearables Be Shareable? The Ethics of Wearable Technology in Collegiate Athletics, 32 Marq. Sports L. Rev., 32, pp. 97-116 <https://scholarship.law.marquette.edu/sportslaw/vol32/iss1/6> (available on December 8, 2025).

Burnton, S. (2023). PCA joins Russell Slade's 'Project Red Card' battle for players' data. The Guardian. <https://www.theguardian.com/sport/2023/jan/24/cricket-joins-russell-slade-project-red-card-control-player-data> (available on December 10, 2025).

Buzuvis, E. E. (2007). Reading the Pink Locker Room: On Football Culture and Title IX, 14 Wm. & Mary J. Women & L. 1, Retrieved from: <https://scholarship.law.wm.edu/wmjowl/vol14/iss1/2> (available on February 6, 2026).

Court of Justice of the European Union (CJEU) (2023). Advocate General's opinion in Case C-115/22, NADA e.a., anti-doping and data protection: Advocate General Ćapeta considers that a national anti-doping authority which publishes personal data of a doped professional athlete on the internet is not in breach of the GDPR (Press Release No. 142/23).

EDPB. (2018). Guidelines 3/2018 on the territorial scope of the GDPR (Article 3) – Version adopted after public consultation, p. 18. Retrieved from: <https://www.edpb.europa.eu/sites/default/files/consultation/edpb_guidelines_3_2018_territorial_scope_en.pdf> (available on February 3, 2026).

EDPB (n. d.). Kakšna je razlika med psevdonimiziranimi podatki in anonimiziranimi podatki? <https://www.edpb.europa.eu/sme-data-protection-guide/faq-frequently-asked-questions/answer/what-difference-between_sl> (available on December 10, 2025).

European Court of Human Rights. (2025). Guide on Article 8 of the European Convention on Human Rights: Right to respect for private and family life, home and correspondence (updated 31 August 2025). Council of Europe. Retrieved from: <https://ks.echr.coe.int/documents/d/echr-ks/guide_art_8_eng> (available on February 3, 2026).

Ferrari, L. & Liguori, J. (2025). The International Federation of Footballers' Unions (FIFPRO) has provided guidelines which finally addresses the collection, storage and use of player data. <https://www.withersworldwide.com/en-gb/insight/read/the-international-federation-of-footballers-unions-(fifpro)-has-provided-guidelines-which-finally-a> (available on October 10, 2025).

Flanagan, C. A., (2022). Stats Entertainment: The Legal and Regulatory Issues Arising from the Data Analytics Movement in Association Football. Part Two: Data Privacy, the Broader Legal Context, and Conclusions of the Legal Aspects of Data Analytics in Football, Entertainment and Sports Law Journal, 19 (1). doi: https://doi.org/10.16997/eslj.1082

Foley, S. (2023). A look at Project Red Card. Law Carriers website. <https://www.lawcareers.net/Explore/CommercialQuestion/TLT-LLP-Footballers-performance-data> (available on October 10, 2025).

GDPR Advisor. (n.d.). GDPR countries: Which countries are covered by the GDPR? GDPR Advisor. Retrieved from: <https://www.gdpradvisor.co.uk/gdpr-countries> (available on February 3, 2026).

Guo, X., Li, X. & Guo, M. (2024). Diversifying configurational paths for athlete data protection. Sci Rep, 14, 32053. https://doi.org/10.1038/s41598-024-83792-8.

Herrlein, M. (2025). Two Advocates General, two different answers: What the conflicting NADA Austria opinions mean for anti-doping transparency, Law in Sport. Retrieved from: < https://www.lawinsport.com/topics/item/two-advocates-general-two-different-answers-what-the-conflicting-nada-austria-opinions-mean-for-anti-doping-transparency> (available on February 3, 2026).

Hill, T. R. & Rhodes, J., (2023). Data Decision Making in Sport: Can Players Stop Clubs from Collecting Their Data?, Entertainment and Sports Law Journal, 21 (1). doi: https://doi.org/10.16997/eslj.1517

Kowalski, J. (2021). Sports data mining: Project Red Card. Dac Beachcroft, 29 October 2021. <https://www.dacbeachcroft.com/en/What-we-think/Sports-data-mining-Project-Red-Card> (available on December 10, 2025).

Kraljić, S. & Drnovšek, K. (2021). Ombudsman za prava sportaša - primjer Slovenije. Zbornik radova Pravnog fakulteta u Splitu, god. 58, br. 1, pp. 151-161.

Kraljić, S., Šepec, M. & Drnovšek, K. (2020). Developments of sports law in the Republic of Slovenia. Zbornik radova Pravnog fakulteta u Splitu, god. 57, br. 2, pp. 287-304.

Kwon, J. W. (n. d.). Athlete Data Sovereignty: Addressing the Legal and Policy Gaps in Sports Technology. <https://www.frontiersin.org/journals/sports-and-active-living/articles/10.3389/fspor.2025.1742484/abstract> (available on December 10, 2025).

Li, R. T., Kling, S. R., Salata, M. J., Cupp, S. A., Sheehan,J. & Voos, J. E. (2016). Wearable Performance Devices in Sports Medicine. Sports Health, 8 (1), pp. 74-78.

Manek, D., & Gray, J. (2023) Monetizing Sports Data and Protecting Athlete Privacy: Where is the Balance?. <https://angle.ankura.com/post/102i75w/monetizing-sports-data-and-protecting-athlete-privacy-where-is-the-balance> (available on October 9, 2025).

Mazzucco, M. (2025). Using administrative and judicial remedies under data protection laws to challenge the processing of sensitive personal data by international sport governing bodies. Int Sports Law J. https://doi.org/10.1007/s40318-025-00309-9

Murphy, P. (2024). The evolving landscape of personal data in international sports: athlete activism and commercial monetisation. Ogier website. <https://www.ogier.com/news-and-insights/insights/the-evolving-landscape-of-personal-data-in-international-sports-athlete-activism-and-commercial-monetisation/> (available on October 10, 2025).

Polajžar, A. (2023). Covert Surveillance at the Workplace and the ECtHR Approach: Possible Risks of Breaching GDPR Rules. E-Journal of International and Comparative Labour Studies, Vol. 12, no. 3, pp. 20-46.

Roberts, K. (2022). Legal Rights In Performance Data: Why Athletes Need To Dig Down For Data Mining. LawInSport, 2 February 2022. <https://www.lawinsport.com/topics/item/legal-rights-in-performance-data-why-athletes-need-to-dig-down-for-data-mining> (available on December 10, 2025).

Tataru, S. R. & Nica, I. T. (2020). Privacy & Data Protection in Sport Industry. Sport and society, 0[10.36836/2020/1/12], <https://ssrn.com/abstract=5316851> (available on February 6, 2026).

Turnšek, E. &, Kraljić, S. (2024). The protection of sensitive personal data and privacy in the US and EU with a focus on health data circulating through health apps. Balkan social science review. Vol. 24, pp. 179-204.

Legal Sources & Case Law

Athletes' Rights and Responsibilities Declaration, <https://www.olympics.com/athlete365/topics/athletes-declaration> (available on December 10, 2025).

Charter on Fundamental Human Rights of the EU, OJ 2012/C 326/02.

CJEU, Case C-115/22 - NADA and Others, 7 May 2024.

CJEU, Case C-124/21 P - International Skating Union v. Commission, 21 December 2023.

CJEU, Case C 231/22, 11 January 2024.

CJEU, Case C-474/24 - Bundesverwaltungsgericht (Austria), request for a preliminary ruling, pending.

CJEU, Case C-683/21, 5 December 2023.

Data Protection Act 2018. Retrieved from: https://www.legislation.gov.uk/ukpga/2018/12/contents/enacted> (available on 3. 2. 2026).

European Convention on Human Rights, Uradni list RS – Mednarodne pogodbe, št. 7/94.

Information Commissioner, no. 0712-1/2017/2368, 4 December 2017 - Zbiranje podatkov mladoletnih športnikov Zbiranje podatkov mladoletnih športnikov - IPRS, <https://www.ip-rs.si/mnenja-zvop/zbiranje-podatkov-mladoletnih-%C5%A1portnikov> (available on December 10, 2025).

Information Commissioner, no. 07121-1/2023/184, 15 February 2023 - Obdelava osebnih podatkov s strani športnega kluba - IPRS, <https://www.ip-rs.si/mnenja-zvop-2/obdelava-osebnih-podatkov-s-strani-%C5%A1portnega-kluba-1676964462> (available on December 10, 2025).

Information Commissioner, no. 07121-1/2025/1391, 27 November 2025 - Vpogled članov nogometnega društva v pogodbe in osebne podatke drugih članov, <https://www.ip-rs.si/mnenja-zvop-2/vpogled-%C4%8Dlanov-nogometnega-dru%C5%A1tva-v-pogodbe-in-osebne-podatke-drugih-%C4%8Dlanov-1768808014> (available on February 3, 2026).

International Olympic Committee Anti-Doping Rules applicable to the Games of the XXXIII Olympiad Paris 2024 (30 May 2023, as amended on 13 June 2024) <https://stillmed.olympics.com/media/Documents/Olympic-Games/Paris-2024/IOC-Anti-Doping-Rules-applicable-to-the-Games-of-the-XXXIII-Olympiad-Paris-2024.pdf> (available on December 10, 2025).

Olympic Charter in force as from 30 January 2025, < https://www.olympics.com/ioc/olympic-charter> (available on December 10, 2025).

Olympic Movement Medical Code of the Olympic Movement – in force as from March, 2024. <https://stillmed.olympics.com/media/Documents/International-Olympic-Committee/Commissions/Medical-and-Scientific-Commission/Olympic-Movement-Medical-Code.pdf> (available on December 10, 2025).

Opinion of Advocate General Spielmann delivered on 25 September 2025. ECLI:EU:C:2025:733.

Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) OJ L 119, 4.5.2016.

Resolucija o nacionalnem programu športa v Republiki Sloveniji za obdobje 2026–2035 (ReNPŠ26–35): Uradni list RS, no. 55/25.

Universal Declaration on Human Rights. <https://www.un.org/en/about-us/universal-declaration-of-human-rights> (available on December 10, 2025).

Ustava Republike Slovenije (Constitution of the Republic of Slovenia - URS): Uradni list RS, no. 33/91-I, 42/97 – UZS68, 66/00 – UZ80, 24/03 – UZ3a, 47, 68, 69/04 – UZ14, 69/04 – UZ43, 69/04 – UZ50, 68/06 – UZ121,140,143, 47/13 – UZ148, 47/13 – UZ90,97,99, 75/16 – UZ70a, 92/21 – UZ62a.

World Anti-Doping Agency. (2021). World Anti-Doping Code. Retrieved from: <https://www.wada-ama.org/en/what-we-do/world-anti-doping-code> (available on December 10, 2025).

Zakon o pacientovih pravicah (Patients Rights Act - ZPacP): Uradni list RS, no. 15/08, 55/17, 177/20, 100/22 – ZNUZSZS.

Zakon o športu (Sports Act - ZŠpo-1): Uradni list RS, no. 29/17, 21/18 – ZNOrg, 82/20, 3/22 – ZDeb, 37/24 – ZMat-B.

Zakon o varstvu osebnih podatkov (Personal Data Protection Act - ZVOP-2): Uradni list RS, no. 163/22, 40/25 – ZInfV-1.

Downloads

Published

19.06.2026

Issue

Section

Articles

How to Cite

Gorenc, N. (2026). Passing of Risk under CISG and Incoterms 2020 Rules: Legal framework and Contractual Autonomy. LeXonomica, 18(1), 48-85. https://doi.org/10.18690/lexonomica.18.1.48-85.2026