“GDPR...requires organizations to maintain appropriate security of personal data.”
This analysis describes what Minecraft's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
It establishes a binding legal obligation under GDPR for organizations handling personal data to maintain appropriate security.
Interpretive note: The excerpt states a general legal requirement under GDPR rather than a specific obligation Minecraft itself is undertaking. It is unclear from the excerpt alone whether Minecraft is acknowledging this as its own obligation or stating it as background legal context. The ellipsis in the evidence span suggests text has been omitted, which may affect the full meaning.
Personal data held by organizations subject to GDPR must be kept at an appropriate level of security.
How other platforms handle this
We have implemented administrative, technical, physical, electronic, and managerial procedures to safeguard and secure the information we collect from loss, misuse, unauthorized access, disclosure, alteration, and destruction.
Our security procedures mean that we may ask to verify your identity before we disclose personal information to you.
if you do not allow us to collect personal information from you, we may not be able to deliver certain experiences, products, and services to you, and some of our services may not be able to take account of your interests and preferences.
"GDPR...requires organizations to maintain appropriate security of personal data.Excerpt from Minecraft's Privacy Statement
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
It establishes a binding legal obligation under GDPR for organizations handling personal data to maintain appropriate security.
Personal data held by organizations subject to GDPR must be kept at an appropriate level of security.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by Minecraft.