Jump to content

Ubisoft in-game data collection GDPR complaint (2025): Difference between revisions

From Consumer Rights Wiki
Bythmusters (talk | contribs)
m Started cargo
Line 1: Line 1:
{{StubNotice}}
{{StubNotice}}
 
{{IncidentCargo
|Company=Ubisoft
|StartDate=2025-04-24
|EndDate=
|Status=
|ProductLine=
|Product=
|ArticleType=
|Type=
|Description=
}}
[[Ubisoft]] — a French company that develops, publishes, and distributes video games — forces users to be connected to the internet, even in single-player games, and collects data without consent nor prior notice.
[[Ubisoft]] — a French company that develops, publishes, and distributes video games — forces users to be connected to the internet, even in single-player games, and collects data without consent nor prior notice.



Revision as of 15:35, 26 January 2026

This article is a stub. You can help by expanding it.

A moderator needs to check the page before this notice can be removed. Visit the noticeboard or the #appeals channel in either Zulip or Discord to request removal.
More info ▼

An article may be flagged as a stub when it is missing major elements needed to make it useful to a reader. You can help by adding missing sections, verifiable sources, relevant company policies and communications, etc. to make the article more complete.

Ubisoft — a French company that develops, publishes, and distributes video games — forces users to be connected to the internet, even in single-player games, and collects data without consent nor prior notice.

Background

On Thursday 24 of April 2025, NOYB — an Austrian privacy protection organization — has filled a complaint against Ubisoft regarding its illegal collecting and usage of players' personal data.

Consumer Response

Near the end of September 2024, an anonymous user of Ubisoft noticed that they could not launch a single-player video game that he owned without first connecting to the internet. He also noticed that the data controller was collecting data about him during his gaming session[1].

NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.
NOYB's lawsuit with the 13 and 14 article. Relevant information are highlighted.

The complainant, who is “tech-savvy” according to NOYB, simultaneously monitors the network traffic associated with Far Cry Primal and finds that his game is sending packets to remote servers. He mentions 150 connections in the space of ten minutes and identifies Google, Amazon, and Datadog[1][2][3].

But before asking NOYB, the data subject contacted the controller’s customer support, asking about his findings and that they tell him why are they using his personal data. Unfortunately, Ubisoft did not answer completely to his question, only saying that his data is collected to verify ownership of the game and never mentions why Google is one of the third parties.

References

  1. 1.0 1.1 Laurent, Alexandre (2025-04-25). "Mandatory connection for single-player games: Ubisoft sued for non-compliance with the GDPR". Archived from the original on 2025-04-25.
  2. NOYB (2025-04-24). "Like to play alone? Ubisoft is still watching you!". Archived from the original on 2025-04-24.
  3. NOYB, NOYB (2025-04-24). "Lawsuit PDF" (PDF). Archived (PDF) from the original on 2025-04-24.