Virtual Reality and Privacy

While VR-technologie offers us new ways to entertain ourselves, learn, and communicate, it also raises questions about privacy and the collection of user data. In this blog, we discuss how VR-gegevens are collected, stored, and used, and what this means for user privacy.

When you use a VR-systeem, various types of data can be collected from you. This may include:

• Data about the VR-apparatuur you use, such as the type and configuration of the headset, the controllers, and other accessories.
• Data on how you use the VR-systeem, such as the apps you use, the games you play, and the interactions you have with other users.
• Data about your physical location and movements, which are captured by sensors on the VR-apparatuur.
• Personal data such as your name, e-mailadres, and other identifiable information.

This data can be collected to improve the VR-ervaring and tailor it to the user, but also to be used for other purposes such as marketing and customising advertisements. In some cases, this data may also be sold to third parties.

It's important to know that many VR-bedrijven have their own privacy policy that describes how they collect and use user data. This policy usually has to be accepted before a user can access the VR-applicatie or -service. It is advisable to read these policies before agreeing to the terms to fully understand which data are collected and what they are used for. The storage of this data can vary per VR-bedrijf. Some companies store the data on their own servers, while others store this data on third-party servers. In some cases, data can also be stored on servers outside the European Union, which can lead to different privacy- and security issues.

To protect the privacy of users, VR-bedrijven must comply with the General Data Protection Regulation (GDPR) of the European Union. This means that companies need the user's consent before they can collect personal data and they must inform the user about how this data is used and stored. Companies must also implement adequate security measures to protect user data from unauthorized access and theft.

It's important to know that many VR-bedrijven have their own privacy policy that describes how they collect and use user data. This policy usually has to be accepted before a user can access the VR-applicatie or -service. It is advisable to read these policies before agreeing to the terms to fully understand which data are collected and what they are used for. The storage of this data can vary per VR-bedrijf. Some companies store the data on their own servers, while others store this data on third-party servers. In some cases, data can also be stored on servers outside the European Union, which can lead to different privacy- and security issues.

To protect the privacy of users, VR-bedrijven must comply with the General Data Protection Regulation (GDPR) of the European Union. This means that companies need the user's consent before they can collect personal data and they must inform the user about how this data is used and stored. Companies must also implement adequate security measures to protect user data from unauthorized access and theft.

Meta, Pico and HTC VIVE are all manufacturers of VR-hardware and -software and each have their own privacy policy. These are currently the most popular brands when it comes to virtual reality use in (high) schools, universities, and government institutions.

Meta collects data from Oculus-accountgebruikers, including name, e-mailadres, physical address, payment information, IP-adres and device information, to provide and improve the Oculus-services, offer customer service and comply with legal obligations. Meta can share this data with third parties and use it for marketing purposes. Meta takes measures to protect the data and Oculus-accountgebruikers have certain rights regarding their data. If Meta is sold or merges with another company, the data of Oculus-accountgebruikers can be transferred. The privacy statement for Oculus-accountgebruikers falls under the laws of the state of California and is subject to arbitration. (Source: Meta)

Pico collects personal information from users, such as name, e-mailadres, address and payment details, and information about the use of the Pico-services to provide, manage and improve services and for marketing purposes. Pico shares users' personal information with third parties and may share data to comply with legal obligations or to prevent fraud. Pico takes measures to protect users' personal information and users have certain rights regarding their personal information. Pico may transfer users' personal information to other countries where Pico operates. Pico uses cookies and similar technologies to improve the user experience. Pico's privacy statement falls under the laws of the state of California and is subject to arbitration. (Source: Pico)

HTC collects personal information, such as name, address, e-mailadres, phone number, location data, device data, and usage data, when you use their products or services or contact them. They use this information to provide products and services, personalise your experience, keep you updated with updates and offers, and to comply with legal obligations. HTC can share the information with third parties, retains it as long as necessary, and protects it against unauthorised access, alteration, disclosure, or destruction. HTC uses cookies and similar technologies to collect information about the use of their website and services. (Source: HTC)

All three privacy policies from Meta, Pico, and HTC VIVE contain similar points, such as the collection of personal data, the use of data for marketing purposes, data protection, user rights, and the use of cookies.

However, there are some differences. For instance, Meta operates globally and can transfer personal information to countries outside the European Union, while Pico and HTC VIVE limit themselves to the countries they operate in. Also, Meta's privacy policy falls under California law, while HTC VIVE focuses on Washington law.

In terms of handling privacy, Meta and Pico appear to be similar, with both companies sharing personal information with third parties and being able to transfer data to other countries. HTC VIVE, however, seems to put more emphasis on protecting personal information and limits sharing data with third parties.