0

I'm in the planing staging of building game service provider, kind of like Xbox Live, PSN, Steam, etc.

As far as I understand in the terms of the GDPR, information that can directly identify users should remain only in the region where it was created (such as their e-mail address, real name and surname, etc).

The question I want to ask, is it possible for me to replicate the user player profile, meaning the gamer profile that contains the "gamer score", avatar, etc to different regions without violating the GDPR requirements, and only linking this with an ID that is shared between the real-user profile and the gamer profile?

Improve this question
0

1 Answer 1

Reset to default
1

The profile almost certainly contains an online 'handle' and this is personal data. Even without this, a combination of other factors (e.g. if the person had the highest ever high score) could allow identification of 'that guy'.

Personal data kicks in where it is possible to use the data to work out the individual to whom it belongs - you don't have to know the person's name to do that. For example, you probably don't know the name of the person you sit near everyday on the bus but a photo of that person, or even the knowledge that they catch that bus from A to B every day, is enough to identify them.

You can only transfer the data out of the EU subject to the GDPR rules.

Improve this answer
4
  • You can also only collect, manipulate, and store the data in the EU subject to GDPR rules.
    – phoog
    Jan 29, 2019 at 2:32
  • @phoog I thought that went without saying
    – Dale M ♦
    Jan 29, 2019 at 8:33
  • Perhaps, but it seems that the GDPR in particular is widely misunderstood.
    – phoog
    Jan 29, 2019 at 11:54
  • Please cite any source that says knowing someone catches the bus from Point A to Point B each day alone is personal data. It isn't. Even the link you shared doesn't support this.
    – A.fm.
    Jan 30, 2019 at 18:21

You must log in to answer this question.