As modelling and simulation environments such as the metaverse, video games, and digital twin platforms grow increasingly advanced, critical questions arise around how personal data is managed and protected. This presentation offers a critical analysis of the regulatory frameworks that govern personal information within these immersive spaces.

We will explore the privacy risks inherent in platforms that collect, share, and store vast amounts of user data—often in ways that leave it exposed to misuse. Drawing upon a case study of a metaverse platform, and a comparative analysis of legal approaches in the United States and the European Union, this session will assess the effectiveness of current laws in addressing these challenges.