PlayStation · PlayStation Privacy Policy

Data Retention and Account Closure

Medium severity
Share 𝕏 Share in Share 🔒 PDF

What it is

PlayStation keeps your personal data for as long as your account is open and may continue to retain some data even after you close your account, for business or legal reasons.

Consumer impact (what this means for users)

Closing your PlayStation account does not guarantee that all of your personal data will be deleted — Sony may retain data for fraud prevention, legal compliance, or other business reasons, potentially for extended periods.

What you can do

⚠️ These actions may provide transparency or partial mitigation but may not fully address the underlying issue. Effectiveness varies by jurisdiction and individual circumstances.
  • Close Your Account
    To close your PlayStation Network account, visit PlayStation Support and follow the account closure process. Note that some data may be retained even after closure — submit a separate data deletion request via the privacy rights portal to request deletion of retained data.

Cross-platform context

See how other platforms handle Data Retention and Account Closure and similar clauses.

Compare across platforms →
Need full compliance memos? See Professional →

Why it matters (compliance & risk perspective)

Even if you delete your PlayStation account, Sony may retain your personal data indefinitely for vaguely defined 'business purposes,' which limits the practical effectiveness of your right to deletion.

View original clause language
We will retain your personal information for as long as your Account is open, or as needed to provide you services. Some information may be retained after your Account is closed. We may also retain information as required by law or regulation, for fraud prevention, to resolve disputes, to enforce our agreements, or for other business purposes.

Institutional analysis (Compliance & legal intelligence)

1) REGULATORY FRAMEWORK: CPRA §1798.105 requires that upon a verified deletion request, personal information be deleted unless an exception applies (e.g., legal obligation, security, fraud prevention). GDPR Art. 5(1)(e) (storage limitation) and Art. 17 (right to erasure) impose similar obligations on EU users. The policy's open-ended retention for 'business purposes' may not satisfy the CPRA's requirement that retention be 'reasonably necessary and proportionate.' FTC Act Section 5 applies to deceptive retention practices. 2)

🔒

Compliance intelligence locked

Regulatory citations, enforcement risk, and due diligence action items.

Watcher $9.99/mo Professional $149/mo

Watcher: regulatory citations. Professional: full compliance memo.

Applicable agencies

  • FTC
    The FTC has jurisdiction over unfair or deceptive data retention practices under FTC Act Section 5, particularly where retention exceeds what is disclosed or necessary.
    File a complaint →

Provision details

Document information
Document
PlayStation Privacy Policy
Entity
PlayStation
Document last updated
April 29, 2026
Tracking information
First tracked
April 18, 2026
Last verified
April 18, 2026
Record ID
CA-P-002952
Document ID
CA-D-00184
Evidence Provenance
Source URL
Wayback Machine
SHA-256
b0795f89dbd51ff6f4b76595a83f27111b2506ae3654f16f2fa2a6e466e33fb4
Verified
✓ Snapshot stored   ✓ Change verified
How to Cite
ConductAtlas Policy Archive
Entity: PlayStation | Document: PlayStation Privacy Policy | Record: CA-P-002952
Captured: 2026-04-18 11:07:25 UTC | SHA-256: b0795f89dbd51ff6…
URL: https://conductatlas.com/platform/playstation/playstation-privacy-policy/data-retention-and-account-closure/
Accessed: May 2, 2026
Classification
Severity
Medium
Categories

Other provisions in this document