‘Purchase of Secret Data’ without permission – research snipers

Ubisoft has been criticized for collecting arbitrary data. Because even with single players without multiplayer functions, mass data are probably recorded through forced online without clear consent. The player’s giant threatens a million dollars.

Online forced into single players

Ubisoft titles players like Assassin’s Creed or Far Cry know the problem: even if you want to play alone, the game requires an internet connection and an entry. During the game session, Ubisoft also undoubtedly collects widespread user data without receiving first.

The Austrian Data Protection Organization (none of your business) therefore has one with the formal complaint of the Austrian Data Protection Authority (PDF) filed against the giant of the French game. The complaint is based on a specific case. An experienced player technically revealed that the FAR Cry Primal built 150 links with external servers within just ten minutes – including Google, Amazon and US analysis service datadog.

Data such as seasons, use IDs and perhaps even details about the behavior of the game were transmitted. The data was encrypted so that the user was not understandable which information was collected. Ubisoft was avoided with a standard response upon request.

Millions of penalties may threaten

NOYB consumer lawyers argue that Ubisoft thus violates the General Regulation on European Data Protection (GDPR). “Imagine the monopoly man on your table and would take notes whenever you want to play a game on board,” explains Joakim Söderberg, a data protection advocate on the NOYB website. This is exactly what happens in video games.

The data would be collected and analyzed. In the event of success, the complaint can have distant consequences. Ubisoft threatens a fine of up to 92m euros. This corresponds to four percent of the annual turnover of about 2.3 billion euros. The organization also requires Ubisoft to delete all the data collected illegally and establish the practice.

The problem throughout the industry

The problem does not only affect Ubisoft. Other large publishers such as Microsoft, Activision Blizzard and Electronic Arts also require an internet connection for many of their games, even if they actually do not offer online functions.

Ubisoft was chosen as the first destination, according to Noyb, because the company is one of the worst tea and, as a European company, is easier to worry about than US companies. If the Data Protection Authority complains, this can create a precedent for the entire game industry. The players can then no longer be forced to go online for the pure experiences of single players.

Ubisoft in crisis

For the developer of the French game, the complaint comes in an unfavorable time. After the financial difficulties and the loss of value of more than 50 percent in 2024, the company can be high. To secure itself financially, the company has just transferred its high brands to its company, in which the Chinese Tencent group also holds a large part. In addition, Ubisoft is at the same time with another lawsuit dealing with the closing of the race game The Crew.