I can't remember where I read about some of the finer details (i.e. data beyond just stats gleaned from official games observed) but the following links may give a bit more info than the BBC website.
https://www.lexology.com/library/det...5-6feb6451c3a9
https://www.wired.co.uk/article/proj...-football-data
https://www.itpro.co.uk/data-insight...-violates-gdpr
I have no expert knowledge in this field but having worked in the world of IP for quite some time I find it useful to do a bit of digging beyond the headlines as things are often more complex than reported by some media outlets. Happy to sit back and learn regarding this case...