Video game developers and studios are flagrantly violating legal privacy mandates and exploiting the personal data of children engaged with their games, according to a groundbreaking new analysis of North American video game privacy policies. This extensive investigation exposes a deeply troubling industry practice where the rights and protections owed to minors under current laws are systematically ignored, placing vulnerable young users at considerable risk.
Professor Thomas Burelli of the University of Ottawa, a distinguished authority in civil law and co-author of the study, characterizes these findings as “nothing short of scandalous.” His team reviewed 139 privacy policies spanning a broad spectrum of video game offerings targeted at children under 13, or under 14 in Quebec. Remarkably, not a single policy reviewed achieved full compliance with prevailing legal obligations set forth by American, Canadian, and Quebec regulations. This widespread non-compliance calls into question the legitimacy and ethical standing of these companies operating within a lucrative and influential digital market.
The research undertaken by collaborative teams from the University of Ottawa, Université du Québec à Montréal (UQAM), and McGill University reveals an opaque and convoluted mechanism of data collection embedded within the multi-billion-dollar video game industry. The study highlights that game developers, alongside third-party data analytics and advertising entities, are deliberately circumventing existing legal frameworks. This manipulation facilitates the unauthorized harvesting of personal information from children, a practice that contravenes established data protection laws designed specifically to safeguard minors’ privacy.
Critically, these video game companies design their privacy policies to be prohibitively complex and ambiguous, making it nearly impossible for parents to fully understand or meaningfully consent to how their child’s data is processed and shared. Professor Burelli explains that studios rely on a strategic assumption: parents rarely invest time in parsing these lengthy documents, and even if they do, the intricate language and convoluted opt-out mechanisms discourage complaints or challenges. This systematic obfuscation effectively suppresses informed consent and elevates the risk of covert data exploitation.
The analytical framework of the study involved rigorous content analysis, focusing on the real-world application of legal principles governing the protection of children online. The policies spanned various game monetization models, including free-to-play (freemium) and premium paid games, reflecting a diverse sample within the digital entertainment landscape. Despite the differences in payment structure, the core issue remained consistent: pervasive inadequacy and disregard for legal data privacy standards in relation to child users.
These findings coincide with alarming demographic trends: approximately 39 percent of Canadian children aged 6 to 17 engage with video games regularly. The pervasiveness of gaming in youths’ daily lives magnifies the societal implications of privacy violations in this sector, amplifying concerns over long-term impacts on childhood development, psychological welfare, and trust in digital platforms. The entrenched privacy risks inherent in gaming ecosystems underscore an urgent need for strategic regulatory intervention.
In Quebec, these concerns have already catalyzed legal consequences, as demonstrated by the initiation of a landmark class action lawsuit targeting the mobile gaming industry. The lawsuit alleges egregious breaches of children’s privacy rights, underscoring the tangible legal vulnerabilities video game companies now face. This legal action serves both as a warning and a precedent, potentially shaping the future governance and compliance practices within the wider digital gaming industry.
Researchers emphasize that self-regulation by the gaming industry and its associated classification bodies has repeatedly failed to uphold children’s privacy rights in any substantive way. Current voluntary codes of conduct and governance structures lack the enforcement mechanisms and transparency necessary to adequately protect young users. This systemic failure accentuates the imperative for robust legislative reform specifically tailored to regulate data practices in child-centric digital environments.
Moreover, the study highlights that not only is consent poorly informed, but the deceptive presentation of some games—using colorful, innocent, and child-friendly aesthetics—creates a misleading sense of security among parents and children alike. Such visual design strategies mask the aggressive data mining activities conducted behind the scenes, reinforcing false assumptions that these games are inherently safe or trustworthy.
Technical examination of the privacy policies reveals inconsistent disclosure requirements, vague definitions of data types collected, and opaque descriptions of third-party data sharing agreements. Many policies fail to specify the purposes for which personal data is used, how long it is retained, or the safeguards implemented to protect that data. Such deficiencies violate key principles enshrined in data protection frameworks like the Children’s Online Privacy Protection Act (COPPA) in the United States and similar statutes in Canada and Quebec.
The study’s implications transcend privacy alone, touching upon broader issues of digital ethics, governance, and the rights of the child in the digital age. It calls for interdisciplinary collaboration among legal experts, policymakers, technologists, and child advocates to develop comprehensive solutions that can reconcile technological innovation with fundamental human rights protections.
Ultimately, this research not only lays bare the pervasive exploitation currently tolerated within the video game sector but also offers a platform for advocacy and reform. Governments and regulatory bodies are urged to respond decisively by enacting stringent legislative measures that compel transparency, accountability, and ethical stewardship of children’s personal data in digital entertainment spheres.
For those interested in exploring the full breadth of this critical research, the complete report titled “Dangerous Games: Protecting the Privacy of Children Under 13 in Video Games” is available in French. It provides a detailed narrative and data-driven insights into the systemic challenges confronting children’s privacy rights in one of the most dynamic sectors of today’s digital economy.
Subject of Research:
Not applicable
Article Title:
Dangerous Games: Protecting the Privacy of Children Under 13 in Video Games
News Publication Date:
22-Oct-2025
Web References:
https://crc-jeu.uqam.ca/wp-content/uploads/sites/90/2025/10/Rapport_2025_CVPC-jeuxmobiles.pdf (Report in French)
Keywords:
Video games, Recreation, Social sciences, Games, Children, Young people, Data analysis, Legal issues
