A new video warns of the risks of virtual reality and augmented reality technologies for privacy

The Catalan Data Protection Authority (APDCAT) and the School of Public Administration of Catalonia (EAPC) have published the third video of the "Let's talk about personal data" series, which approaches basic privacy concepts with an orientation aspect and divulgative On this occasion, the audiovisual deepens the implications for privacy of the use of services and applications of extended reality, by the hand of Carlos López, technical expert of the Legal Advice of the APDCAT.

The new resource, available on the APDCAT website and on the EAPC YouTube channel, presents the problems associated with this type of technology, which combines elements of the real world with virtual and digital elements. These are known as virtual reality, augmented reality and mixed reality. The first creates a completely immersive and fictitious digital environment, without any connection to the real world; for example, a virtual tour. In the second, digital elements - such as images, text or graphics - are superimposed on the real world. Lastly, mixed reality combines virtual and augmented reality, so it allows interaction between virtual objects and the real environment; for example, filters that turn real faces into animals.

The video captures the need, when developing and implementing this technology, to take into account several issues that affect privacy, security and trust in the content. Warning that this technology often collects a lot of information from which the user can end up being identified or revealing their interests and habits, location, etc. In addition, it warns that it can also capture other extremely sensitive information, such as the traceability of the movement of fingers, when the secret code is keyed to access virtual banking, or eye tracking, to show users information about where they pay attention

For this reason, remember that it is crucial that the organizations that make use of this technology inform transparently about the capture of the data, the purpose for which it will be used and how it will be protected; also whether they will be shared with third parties, and what rights can be exercised, among other issues. They also need to implement mechanisms to protect against cyber threats, such as malware or computer hijacking.

In addition, the video is aimed at users, and recommends that they avoid revealing very personal information if it is not mandatory; distrust suspicious content, verifying the authenticity of information and links; review the privacy policies, which provide information on data processing; keep firmware up-to-date against cyber threats; make use of a comprehensive anti-virus program that detects and removes malicious software; and, for more experienced users, implement a virtual private network that encrypts data and hides location.

Third video in the series

The new resource represents the third video in the series of audiovisual materials that APDCAT and EAPC have been promoting since 2022. It is a joint project to raise awareness and spread data protection rights among citizens, with supports and channels suitable for all audiences and with plain language, to explain concepts in an understandable way.

Thus, within the series, the video "The value of personal data" is also available, which graphically explains what is considered personal data and why it is necessary to protect it. There is also "Video games and access to our data", which focuses on the relationship between personal data and online games.

On the other hand, the project includes a series of podcasts, with a deeper analysis. At the moment, five are available: the right of access guaranteed by data protection regulations, the entrustment of data processing, the processing of minors' data, data security breaches and the right of information on data protection. They are also available on major podcast platforms (Spotify, Spotify for podcasters [formerly Anchor], Amazon Music, Castbox, Pocket Cast, and Ivoox).