EU and UK residents have a set of data rights under GDPR including access, correction, deletion, restriction, portability, and the right to withdraw consent for data processing at any time.
This analysis describes what Activision's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
These rights are legally binding on Activision for EU and UK users and provide meaningful tools to challenge, limit, or delete the personal data Activision holds, including data used for advertising profiling.
EU and UK players can formally request access to all personal data Activision holds about them, require deletion or portability of that data, and withdraw consent for marketing or advertising uses, all of which Activision is legally obligated to honor within GDPR timeframes.
How other platforms handle this
If you are located in the European Economic Area, Switzerland, or the United Kingdom, you have the right to access, correct, or erase your personal data; the right to restrict or object to our processing of your personal data; the right to data portability; and, where our processing is based on your...
Depending on where you are located, you may have certain rights regarding your personal information, including the right to access, correct, delete, or restrict processing of your personal information, the right to data portability, and the right to object to or withdraw consent for certain processi...
For individuals in the United States, please also refer to our Notice For Individuals Residing In Certain US States below and the Consumer Health Data Policy.
Monitoring
Activision has changed this document before.
Receive same-day alerts, structured change summaries, and monitoring for up to 25 platforms.
"If you are a resident of the European Economic Area or the United Kingdom, you may have the right to: access your personal information; rectify inaccurate personal information; erase your personal information; restrict or object to the processing of your personal information; receive your personal information in a portable format; and withdraw your consent at any time where we rely on consent as the legal basis for processing.— Excerpt from Activision's Activision Privacy Policy
(1) REGULATORY LANDSCAPE: These rights derive from GDPR Articles 15-22 and UK GDPR equivalents, enforced by EU national data protection authorities and the UK ICO. Activision must respond to subject access requests within 30 days (extendable by two months with notice), provide data in a portable format for portability requests, and demonstrate a valid legal basis when processing continues despite an objection. (2) GOVERNANCE EXPOSURE: Medium. The policy acknowledges these rights but does not specify the identity verification process or response timeline, which are operationally material. Failure to respond to subject access requests within statutory deadlines is a common enforcement trigger for EU data protection authorities. (3) JURISDICTION FLAGS: All EEA member states and the UK. Irish DPA is the likely lead supervisory authority for EU matters given Microsoft/Activision's EU establishment. The UK ICO supervises UK GDPR compliance independently post-Brexit. (4) CONTRACT AND VENDOR IMPLICATIONS: DSAR (Data Subject Access Request) responses must account for data held by processors and sub-processors, including Microsoft subsidiaries and advertising partners. Vendor contracts should include provisions requiring processors to assist Activision in responding to DSARs within statutory timeframes. (5) COMPLIANCE CONSIDERATIONS: Compliance teams should verify that the privacy portal at privacy.activision.com supports all six GDPR rights, that response workflows meet 30-day deadlines, and that data mapping is sufficiently comprehensive to support complete and accurate DSAR responses given the breadth of data collection described in the policy.
Full compliance analysis
Regulatory citations, enforcement risk, and due diligence action items.
Free: track 1 platform + weekly digest. Monitor: 25 platforms + same-day alerts. No credit card required.
Ad personalization controls removed. Contact scanning added. Advertiser data partnerships quietly dropped. A timeline of every change.
Compliance Governance Intelligence
Need to monitor specific governance provisions?
Compliance includes provision-level monitoring, governance timelines, regulatory mapping, and audit-ready analysis.
Built from archived source documents, structured governance mappings, and historical version tracking.
These rights are legally binding on Activision for EU and UK users and provide meaningful tools to challenge, limit, or delete the personal data Activision holds, including data used for advertising profiling.
EU and UK players can formally request access to all personal data Activision holds about them, require deletion or portability of that data, and withdraw consent for marketing or advertising uses, all of which Activision is legally obligated to honor within GDPR timeframes.
ConductAtlas has identified this type of provision across 7 platforms. See the full comparison.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Activision.