Conformidade do metaverso da empresa meta com a LGPD: análise das práticas de coleta, tratamento e proteção de dados

Abstract

With the advancement of digital technologies and the growing adoption of virtual environments, such as the Metaverse developed by Meta, the protection of personal data has emerged as a crucial issue. This study aims to investigate the compliance of Meta’s Metaverse with the General Data Protection Law (LGPD), focusing on practices related to the collection, processing, and protection of personal data. The research consists of a detailed analysis of the practices implemented by Meta and a comparison with the principles established by the LGPD to verify its compliance. The analysis of Horizon Worlds’ data collection practices revealed that Meta complies with most of the LGPD principles. User consent is obtained at the time of account creation, ensuring that users are informed about how their data, including sensors such as microphones and eye tracking, will be used. Additionally, in compliance with legal obligations, Meta requests information such as the date of birth to protect underage users, in accordance with child protection laws. However, some areas do not apply directly to Horizon Worlds, such as public administration and credit protection. For these cases, the study suggests improvements, such as the creation of a specialized team in local regulations and the implementation of more robust systems to protect financial data during transactions. Lastly, Meta ensures that users’ data is processed securely and transparently, with data deletion mechanisms in place when necessary, fulfilling the obligations established by the LGPD. The study concludes with suggestions for improvements to address gaps and emphasizes the need for ongoing review of security and data protection practices.