EA keeps your personal data for as long as it needs to run its services, and can hold onto it even longer for vague 'operational or other legitimate reasons' without specifying any time limits.
EA does not commit to specific retention periods for any category of personal data it collects, meaning your gaming history, voice communications, device fingerprints, and purchase records could be retained indefinitely under the 'legitimate reasons' carve-out.
Cross-platform context
See how other platforms handle Open-Ended Data Retention and similar clauses.
Compare across platforms →Without specific retention periods for each data category, consumers cannot know how long EA holds their most sensitive information — such as voice recordings, device fingerprints, or gameplay data — and cannot effectively exercise deletion rights.
REGULATORY FRAMEWORK: This provision implicates GDPR Art. 5(1)(e) (storage limitation principle — data must be kept 'no longer than necessary' and specific retention periods must be established and documented); GDPR Art. 13(2)(a) (obligation to inform data subjects of retention periods or criteria used to determine them); CCPA/CPRA §1798.100(a)(3) (right to know retention periods); and UK GDPR Art. 5(1)(e). The ICO, EU/EEA DPAs, and California AG hold enforcement authority.
Compliance intelligence locked
Regulatory citations, enforcement risk, and due diligence action items.
Watcher: regulatory citations. Professional: full compliance memo.