EU and UK residents have a set of data rights under GDPR including access, correction, deletion, restriction, portability, and the right to withdraw consent for data processing at any time.
This analysis describes what Activision's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights are legally binding on Activision for EU and UK users and provide meaningful tools to challenge, limit, or delete the personal data Activision holds, including data used for advertising profiling.
EU and UK players can formally request access to all personal data Activision holds about them, require deletion or portability of that data, and withdraw consent for marketing or advertising uses, all of which Activision is legally obligated to honor within GDPR timeframes.
How other platforms handle this
If you are located in the EEA or UK, you may have the following rights under applicable data protection law: the right to access your personal data; the right to rectify inaccurate personal data; the right to erasure of your personal data; the right to restrict processing of your personal data; the ...
If you are located in the European Economic Area or the United Kingdom, you have certain rights under applicable data protection laws, including the right to access, correct, or delete your personal data, the right to object to or restrict processing, and the right to data portability. You may also ...
If you are located in the EEA, UK, or Switzerland, you have certain rights with respect to your personal information, including the right to access your personal data, to correct or delete your personal data, to restrict processing of your personal data, to data portability, and to object to process...
Monitoring
Activision has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 10 platforms.
"If you are a resident of the European Economic Area or the United Kingdom, you may have the right to: access your personal information; rectify inaccurate personal information; erase your personal information; restrict or object to the processing of your personal information; receive your personal information in a portable format; and withdraw your consent at any time where we rely on consent as the legal basis for processing.— Excerpt from Activision's Activision Privacy Policy
(1) REGULATORY LANDSCAPE: These rights derive from GDPR Articles 15-22 and UK GDPR equivalents, enforced by EU national data protection authorities and the UK ICO. Activision must respond to subject access requests within 30 days (extendable by two months with notice), provide data in a portable format for portability requests, and demonstrate a valid legal basis when processing continues despite an objection. (2) GOVERNANCE EXPOSURE: Medium. The policy acknowledges these rights but does not specify the identity verification process or response timeline, which are operationally material. Failure to respond to subject access requests within statutory deadlines is a common enforcement trigger for EU data protection authorities. (3) JURISDICTION FLAGS: All EEA member states and the UK. Irish DPA is the likely lead supervisory authority for EU matters given Microsoft/Activision's EU establishment. The UK ICO supervises UK GDPR compliance independently post-Brexit. (4) CONTRACT AND VENDOR IMPLICATIONS: DSAR (Data Subject Access Request) responses must account for data held by processors and sub-processors, including Microsoft subsidiaries and advertising partners. Vendor contracts should include provisions requiring processors to assist Activision in responding to DSARs within statutory timeframes. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the privacy portal at privacy.activision.com supports all six GDPR rights, that response workflows meet 30-day deadlines, and that data mapping is sufficiently comprehensive to support complete and accurate DSAR responses given the breadth of data collection described in the policy.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Watcher: 10 platforms + same-day alerts. No credit card required.
Professional Governance Intelligence
Need to monitor specific governance provisions?
Professional includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These rights are legally binding on Activision for EU and UK users and provide meaningful tools to challenge, limit, or delete the personal data Activision holds, including data used for advertising profiling.
EU and UK players can formally request access to all personal data Activision holds about them, require deletion or portability of that data, and withdraw consent for marketing or advertising uses, all of which Activision is legally obligated to honor within GDPR timeframes.
ConductAtlas has identified this type of provision across 7 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Activision.