All you would need is one club saying they searched the data for say "any player over six foot" and one player who fit the search term but the data was inaccurate.
It’s questionable if they can win, but demonstrating damages may be the easiest part of this case.
Even more so when the context is that virtually any employer of professional footballers derives some of their revenue from betting, and betting companies are the primary sponsors of half the English Premier League teams and the English Football League organization
It’s the same basic principle as speeding or drunk driving being illegal even if nobody was actually harmed, putting people at significant risk of harm is not acceptable.
In my opinion a third party would only be liable for harming their reputation if the statistics being published were untrue.
In effect their a RNG that happens to make people dislike them.
Since most player contracts are frequently renegotiated and most clubs use third party databases and generate revenue from betting companies (so if necessary they'd all end up with clauses permitting this data use), the long term effects of a favourable stretch of the definition of 'personal data' are more likely to have chilling implications for people collating activity/performance metrics or compiling biographies of other types of public figure anyway...