Legal risks in the metaverse from the perspective of law and personal data protection

Authors

  • Xavier Romero Vélez Pontificia Universidad Católica del Perú
  • Gustavo Alberto Reyna López Universidad de San Carlos de Guatemala

DOI:

https://doi.org/10.47865/igob.vol8.n29.2025.391

Keywords:

metaverse, data Protection, sensible data, legal risks

Abstract

This article delves into the analysis of the risks inherent to the protection of sensitive personal data within the emerging virtual environment known as the metaverse, a concept that has been positioning itself at the epicenter of contemporary technological and social discussions. Through a meticulous conceptualization of the term, the study highlights how the metaverse, by emerging as a vast and complex digital space, reconfigures the dynamics of human interaction, economy and culture, merging the physical with the virtual in an unprecedented way. This new reality poses a multiplicity of opportunities for the expansion of human experiences beyond traditional boundaries, but at the same time significantly raises the challenges related to security and privacy of personal data, especially those considered sensitive. The paper comprehensively addresses the implications of these digital transformations in the field of data protection, with particular emphasis on the legal and ethical risks that arise in an environment where the boundary between privacy and exposure becomes increasingly blurred.

 The research is structured around a detailed exploration of the defining characteristics of the metaverse, examining the underlying technologies, such as virtual and augmented reality, and their impact on the collection, processing and storage of personal data. The nature and scope of sensitive data generated and circulated within this environment is analyzed, including biometric information, personal preferences and interaction patterns, which, due to their intimate nature, require a particularly stringent level of protection. Through this analysis, the article highlights the complexity of ensuring the security of this data in the face of emerging threats such as information misuse, mass surveillance, hacking and other cyber risks. It argues for the critical need to develop adaptive legal frameworks and regulations that are capable of addressing the unique challenges presented by the metaverse, emphasizing the importance of proactive legislation and innovative governance strategies that can balance the promotion of technological advantages and the effective protection of individual rights.

 In conclusion, the paper proposes an in-depth reflection on the future of privacy and data protection in an increasingly digitized world, where the metaverse is emerging as a critical testing ground for privacy and information security policies. By identifying and discussing the main challenges in this area, this study seeks to contribute to the academic and legislative debate, offering informed perspectives for the creation of a secure, ethical and privacy-friendly virtual environment. It highlights the urgency of adopting multidisciplinary and collaborative approaches involving stakeholders from different sectors, in order to design effective strategies that promote responsible technological development and comprehensive protection of personal data in the vast and dynamic landscape of the metaverse.

Downloads

Download data is not yet available.

References

AEPD. (2023, 8 de noviembre). Metaverso y privacidad. Agencia Española de Protección de Datos. https://www.aepd.es/prensa-y-comunicacion/blog/metaverso-y-privacidad

Buchholz, F., Oppermann, L. & Prinz, W. (2022). There’s more than one metaverse. i-com, 21(3), 313-324. https://doi.org/10.1515/icom-2022-0034

Comisión Europea. (2023, 7 de noviembre). ¿Qué datos personales se consideran sensibles? [Página web]. Comisión Europea. https://commission.europa.eu/law/law-topic/dataprotection/reform/rules-business-and-organisations/legal-grounds-processingdata/sensitive-data/what-personal-data-considered-sensitive_es

Cronica.com.mx. (2023, 16 de octubre). Privacidad y protección de datos personales en metaversos: ¿Qué pasa con nuestros datos? Recuperado de https://www.cronica.com.mx/academia/privacidad-proteccion-datos-personalesmetaversos-pasa-datos.html

Damar, M. (2021). Metaverse shape of your life for future: A bibliometric snapshot. Journal of Metaverse, 1(1), 1-8. https://dergipark.org.tr/en/download/article-file/2167665

Dwivedi, Y. K., et al. (2022). Metaverse beyond the hype: multidisciplinary perspectives on emerging challenges, opportunities, and agenda for research, practice and policy. International

Journal of Information Management, 66, 102542. https://doi.org/10.1016/j.ijinfomgt.2022.102542.

Eguiguren Praeli, F. J. (2015). El derecho a la protección de los datos personales. Algunos temas relevantes de su regulación en el Perú. THEMIS Revista De Derecho, (67), 131-140. https://revistas.pucp.edu.pe/index.php/themis/article/view/14462 Ley No 29733, Ley de Protección de Datos Personales. (03 de julio de 2011). http://spijlibre.minjus.gob.pe/normativa_libre/main.asp

Solis, B. (2022, 11 de octubre). The Business Case For The Metaverse: Creating Value In The Next Version Of The Web. Forbes. https://www.forbes.com/sites/briansolis/2022/10/11/the-business-case-for-themetaverse-creating-value-in-the-next-version-of-the-web/?sh=69d20d953e2e

Suárez Uribe, N. M. (2022). El futuro del derecho tras el boom del metaverso. Gaceta Judicial, (408), 37-45. https://app.vlex.com/#vid/futuro-derecho-tras-boom-916601142 12. Suárez Uribe, N. M. Op. Cit, p. 3

Published

2025-03-31

How to Cite

Romero Vélez, X. ., & Reyna López , G. A. . (2025). Legal risks in the metaverse from the perspective of law and personal data protection. IGOBERNANZA, 8(29), 38–49. https://doi.org/10.47865/igob.vol8.n29.2025.391