The Metaverse: searching for compliance with the General Data Protection Regulation

BackgroundThe Metaverse concept is not new.First introduced in Neal Stephenson's novel 'Snow Crash', 1 the book featured a virtual world, existing in parallel with the real world, populated by user-generated avatars that enter a Metaverse using electronic goggles.As the word suggests, it is a universe beyond ('Meta') reality.Although Snow Crash was a work of fiction, online environments like 'Second Life' and 'Roblox' were instrumental in shaping the Metaverse into the reality it has become. 2Today, due to the emergence of new technologies, companies such as 'Meta', 'Microsoft', and 'Google' have heavily invested in creating the Metaverse. 3 Although no agreed definition exists, 4 academics have defined Metaverse as a network of 3D virtual worlds that consists of technologies such as, among other things, Virtual Reality (VR), Augmented Reality (AR), Artificial Intelligence (AI), and blockchain.Users exist as avatars, interact with each other, and create content. 5 The interactions are multidimensional: Instead of viewing digital content, users can immerse themselves in multiple VRs or an enhanced real-life experience with overlaying virtual elements (AR). 6 Meta claims the Metaverse is the next generation of the 'embodied Internet' 7 and has already created advanced headsets, such as the Quest Pro device. 8 Exploring the Metaverse's potential and development is essential.Despite its current stage, with relatively few active users compared to the popular 2D applications, the assertion that the metaverse is faltering is inaccurate; instead, it's poised for significant growth and it is only beginning to take off, with projections of substantial growth by 2030. 9Moreover, recent advancements in Key Points� Inspired by Meta's vision for the Metaverse, this article addresses Meta's proprietary Metaverse and compliance with the laws of the European Union (EU), particularly the General Data Protection Regulation.� This framework is examined through the lenses of the technology, such as the headsets that Meta users will utilize to enter the Metaverse.� Due to the unique nature of the Metaverse and the wide variety of data that will be processed, including inherently sensitive and biometric data gathered from functionalities, such as motion tracking, hand tracking, face tracking, and eye tracking, Meta's compliance with the EU's regulatory frameworks is not straightforward.