Ubisoft Accused of Secret Data Collection in Single-Player Games

A privacy advocacy organization in Austria has filed an official complaint against Ubisoft, the publisher behind major franchises like Assassin’s Creed and Far Cry. The complaint accuses Ubisoft of secretly collecting user data during single-player gameplay sessions without any valid legal basis.

The organization, known as Noyb, is relying on the provisions of the General Data Protection Regulation (GDPR) to challenge what it calls illegal user data collection. If the complaint is upheld and pursued by Austria’s data protection authority, Ubisoft could face a fine of up to €92 million.

One of Noyb’s recent article headlines summarizes the issue perfectly:

"Want to play alone? Ubisoft is still watching you!"

According to the complaint, Ubisoft forces users to maintain an online connection even when playing single-player games without any clear online features. This mandatory connection allows the company to collect data such as session start times, total playtime, and logout moments.

No Clear Justification for Constant Online Connection

Noyb's statement clarifies that even after the plaintiff specifically requested a reason for the mandatory online requirement, Ubisoft refused to provide a transparent explanation. The organization claims that, under Article 6 of the GDPR, there is no valid legal basis for this kind of data collection.

The main allegation is that users did not provide explicit consent for their data to be processed. GDPR laws specify that data processing is only lawful if it is truly necessary for the service being offered. A Noyb lawyer commented:

"Video games are expensive, but that doesn’t justify companies like Ubisoft forcing customers into unnecessary internet connections for offline games just to track behavior and generate additional revenue. Ubisoft’s actions are clearly illegal and must be stopped."

It is estimated that if the case leads to a final ruling, Ubisoft could face a fine of around $104 million. Additionally, the court has been asked to require Ubisoft to delete all personal data collected without a valid legal basis.

Ubisoft Has Not Responded Yet

As of now, Ubisoft has not issued an official response regarding the allegations.

Source: InsiderGaming