Legal risks in the metaverse from the perspective of law and personal data protection
DOI:
https://doi.org/10.47865/igob.vol8.n29.2025.391Keywords:
metaverse, data Protection, sensible data, legal risksAbstract
This article delves into the analysis of the risks inherent to the protection of sensitive personal data within the emerging virtual environment known as the metaverse, a concept that has been positioning itself at the epicenter of contemporary technological and social discussions. Through a meticulous conceptualization of the term, the study highlights how the metaverse, by emerging as a vast and complex digital space, reconfigures the dynamics of human interaction, economy and culture, merging the physical with the virtual in an unprecedented way. This new reality poses a multiplicity of opportunities for the expansion of human experiences beyond traditional boundaries, but at the same time significantly raises the challenges related to security and privacy of personal data, especially those considered sensitive. The paper comprehensively addresses the implications of these digital transformations in the field of data protection, with particular emphasis on the legal and ethical risks that arise in an environment where the boundary between privacy and exposure becomes increasingly blurred.
The research is structured around a detailed exploration of the defining characteristics of the metaverse, examining the underlying technologies, such as virtual and augmented reality, and their impact on the collection, processing and storage of personal data. The nature and scope of sensitive data generated and circulated within this environment is analyzed, including biometric information, personal preferences and interaction patterns, which, due to their intimate nature, require a particularly stringent level of protection. Through this analysis, the article highlights the complexity of ensuring the security of this data in the face of emerging threats such as information misuse, mass surveillance, hacking and other cyber risks. It argues for the critical need to develop adaptive legal frameworks and regulations that are capable of addressing the unique challenges presented by the metaverse, emphasizing the importance of proactive legislation and innovative governance strategies that can balance the promotion of technological advantages and the effective protection of individual rights.
In conclusion, the paper proposes an in-depth reflection on the future of privacy and data protection in an increasingly digitized world, where the metaverse is emerging as a critical testing ground for privacy and information security policies. By identifying and discussing the main challenges in this area, this study seeks to contribute to the academic and legislative debate, offering informed perspectives for the creation of a secure, ethical and privacy-friendly virtual environment. It highlights the urgency of adopting multidisciplinary and collaborative approaches involving stakeholders from different sectors, in order to design effective strategies that promote responsible technological development and comprehensive protection of personal data in the vast and dynamic landscape of the metaverse.
Downloads
References
AEPD. (2023, 8 de noviembre). Metaverso y privacidad. Agencia Española de Protección de Datos. https://www.aepd.es/prensa-y-comunicacion/blog/metaverso-y-privacidad
Buchholz, F., Oppermann, L. & Prinz, W. (2022). There’s more than one metaverse. i-com, 21(3), 313-324. https://doi.org/10.1515/icom-2022-0034
Comisión Europea. (2023, 7 de noviembre). ¿Qué datos personales se consideran sensibles? [Página web]. Comisión Europea. https://commission.europa.eu/law/law-topic/dataprotection/reform/rules-business-and-organisations/legal-grounds-processingdata/sensitive-data/what-personal-data-considered-sensitive_es
Cronica.com.mx. (2023, 16 de octubre). Privacidad y protección de datos personales en metaversos: ¿Qué pasa con nuestros datos? Recuperado de https://www.cronica.com.mx/academia/privacidad-proteccion-datos-personalesmetaversos-pasa-datos.html
Damar, M. (2021). Metaverse shape of your life for future: A bibliometric snapshot. Journal of Metaverse, 1(1), 1-8. https://dergipark.org.tr/en/download/article-file/2167665
Dwivedi, Y. K., et al. (2022). Metaverse beyond the hype: multidisciplinary perspectives on emerging challenges, opportunities, and agenda for research, practice and policy. International
Journal of Information Management, 66, 102542. https://doi.org/10.1016/j.ijinfomgt.2022.102542.
Eguiguren Praeli, F. J. (2015). El derecho a la protección de los datos personales. Algunos temas relevantes de su regulación en el Perú. THEMIS Revista De Derecho, (67), 131-140. https://revistas.pucp.edu.pe/index.php/themis/article/view/14462 Ley No 29733, Ley de Protección de Datos Personales. (03 de julio de 2011). http://spijlibre.minjus.gob.pe/normativa_libre/main.asp
Solis, B. (2022, 11 de octubre). The Business Case For The Metaverse: Creating Value In The Next Version Of The Web. Forbes. https://www.forbes.com/sites/briansolis/2022/10/11/the-business-case-for-themetaverse-creating-value-in-the-next-version-of-the-web/?sh=69d20d953e2e
Suárez Uribe, N. M. (2022). El futuro del derecho tras el boom del metaverso. Gaceta Judicial, (408), 37-45. https://app.vlex.com/#vid/futuro-derecho-tras-boom-916601142 12. Suárez Uribe, N. M. Op. Cit, p. 3
Downloads
Published
How to Cite
Issue
Section
License

This work is licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License.
Esta obra está bajo una licencia internacional Creative Commons Atribución-NoComercial-CompartirIgual 4.0.