- 21 July 2023
- Privacy and Data Protection
Metaverse talk has seemingly died down when just a few months ago it was a popular topic on the internet. This is no surprise since Mark Zuckerberg – the CEO of Meta Platforms, formerly ‘Facebook’ – has stopped discussing the Metaverse after a period of actively promoting it.
The Metaverse is still, however, relevant as large enterprises are investing in the Metaverse and although it may be a long way before people are heading to their virtual office, as we know these things tend to progress quite quickly, which is what we are seeing elsewhere, with AI for example.
What is the Metaverse?
As a reminder, the Metaverse is a virtual world accessed via a headset, where people can supposedly do most things that can be done in the real world, such as work, socialise, engage in forms of entertainment and meet up for coffee. We previously considered the employment law implications of the Metaverse in our article here.
In this article, we focus on the data protection implications of this virtual world.
Data protection concerns in the Metaverse
New categories of personal data?
The Metaverse will hold a huge amount of personal data, the most obvious being users’ names, interactions and health related information. The platform will therefore hold highly sensitive intelligence on individuals. Worryingly, it is not yet known how well this data will be protected. For example, companies who transfer personal health information onto the Metaverse workplace may or may not be subject to safeguarding regulations.
The avatars and interactions of users, which are said to include ‘facial’ expressions, body movements and voices, are likely a form of personal data which we are not yet familiar with. These avatars are likely to be classified as personal data in the workplace because employees could become identifiable from characteristics created and the Metaverse owners will know who created each avatar.
On a more alarming level from a data protection perspective, the use of a headset may allow the Metaverse to record and analyse a user’s eye and facial movements, which in turn could lead to identifying several other private traits of an individual. It has been said that the dilation of a person’s pupil can lead to inferences being drawn about a person’s personality and culture.
The Metaverse is still, however, relevant as large enterprises are investing in the Metaverse and although it may be a long way before people are heading to their virtual office.
How will the processing of personal data take place?
In order for the Metaverse to work, it is necessary for there to be a continuous flow of data between individuals and entities alike.
The Metaverse provides a space for buying and selling products. If a purchase is made in the Metaverse and payment is provided, then the seller regardless of identity (business or individual), is likely to hold the buyer’s personal information. This automatically promotes them to become a data controller forcing them to abide by rules relating to the processing of personal data.
Alternatively, as the Metaverse is a new emerging concept, there is yet to be any definite guidance released on which regulations or jurisdictions will apply to the Metaverse. This being a virtual world may mean that a number of different laws and regulations from around the globe can apply. If the UK GDPR and the Data Protection Act 1998 were to regulate the Metaverse, this legislation will likely need to include new sections specifically drafted to apply to the virtual world.
Lack of privacy?
We will continue to monitor any updates relating to the Metaverse.
This information is for guidance purposes only and should not be regarded as a substitute for taking legal advice. Please refer to the full General Notices on our website.
Read, listen and watch our latest insights
- 22 February 2024
Time to take the heat off menopausal women
On 22 February 2024, the EHRC released guidance and resources for employers designed to help employers understand their legal obligations in relation to supporting workers experiencing menopausal symptoms.
- 22 February 2024
Talking Employment Law: What to do if you’re at risk of redundancy
In this podcast, Harry Berryman and Rebecca Dowle, members of the employment team, will talk through the steps that need to be taken for a redundancy to be fair and the range of criteria that can be used when determining which employees will be made redundant.
- 12 February 2024
The World of Work in 2024- What Can HR Expect?
In many senses, 2024 is unlikely to be a year with radical ruptures from those that have gone before it. The significance of 2024 though, is that it is likely to build upon those megatrends impacting the world of work, which have been emerging for some time now and are only likely to strengthen as we move on in time.
- 30 January 2024
Large-scale Redundancies – What to expect as an employee
In today’s uncertain economic environment, it is rare to see a week go by without a major employer announcing redundancies, be they as a result of a restructuring, a contracting business or a merger or acquisition.
- 23 January 2024
Navigating Redundancy: Top Tips for Employers Considering Redundancies
Redundancy law in the UK can be tricky to get right. With that in mind, here are our top tips for employers who are considering making redundancies.