EA uses three different legal justifications for processing your data in the EU, UK, Brazil, and Switzerland: your consent (for cookies and marketing emails), their business interests (for customer service and targeted EA ads), and the need to run your account.
EU, UK, Swiss, and Brazilian users should know that EA claims 'legitimate interests' as the legal basis for targeted marketing and fraud prevention, meaning you can object to this processing but EA is not required to stop unless your interests override theirs — exercising this right requires contacting EA directly.
Cross-platform context
See how other platforms handle Legal Basis for Processing (EEA/UK/Brazil) and similar clauses.
Compare across platforms →The legal basis EA uses for each type of processing determines what rights you have — for consent-based processing you can withdraw consent anytime, but for legitimate interests processing you can only object, and EA decides whether your objection outweighs their interests.
REGULATORY FRAMEWORK: This provision directly engages GDPR Art. 6(1)(a) (consent), Art. 6(1)(b) (contractual necessity), Art. 6(1)(f) (legitimate interests), and Art. 21 (right to object to legitimate interests processing); UK GDPR (same structure post-Brexit); Brazil LGPD Arts. 7-8 (legal bases for processing); and Swiss nFADP. The EDPB's Guidelines on Legitimate Interests (adopted 2024) are directly applicable. Enforcement authorities are EU/EEA national DPAs, UK ICO, Brazilian ANPD, and Swiss FDPIC.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.