Dark Souls Man
- Oct 24, 2017
I doubt they can get in trouble in the EU because of RGPD, nicknames and games are not sensitive information, but I hope Valve can sue the living hell out of them.
It specifically requires you to hold and process only the data absolutely necessary for the completion of whatever you are doing, and get consent for literally any other personal data you gather. You (as in the company processing the data) do by no means get to decide what's "sensitive" and just collect other data as you please. At least that's how I've had it explained to me by people who know more about law than I do.