EU Drilling Down into Privacy in Virtual Worlds

In response to accelerating adoption of VR, AR, and metaverse environments, the European Commission reaffirmed that GDPR and the ePrivacy Directive fully apply to virtual worlds. This includes personal data from users’ avatars, interactions, device sensors, and behavioral tracking. Virtual world providers must ensure lawful grounds, transparency, data minimization, and user rights—even when data is persistent or anonymized. This extends GDPR compliance into immersive technology and emerging use cases.
🔗 [Data protection and privacy in virtual worlds]digital-strategy.ec.europa.eu