7 Total
1 High severity
5 Medium severity
1 Low severity
Summary

This is PlayStation's US privacy policy, explaining what personal information Sony collects when you use a PlayStation console, app, website, or game. The most important thing to know is that PlayStation collects a very wide range of data about you, including your gameplay behavior, in-game actions, voice and text messages, location, device identifiers, and browsing activity, and may share this data with advertising partners for targeted advertising purposes. California residents can opt out of the sale or sharing of their personal information for advertising by visiting PlayStation's privacy settings, and all users can adjust some data collection options through Account Management and console privacy settings.

Technical / Legal Breakdown

This document is Sony Interactive Entertainment LLC's (SIE) US-facing Privacy Policy, governing the collection, use, sharing, and retention of personal information across PlayStation consoles, apps, websites, games, and related services, with user consent established through continued use of those services. The policy states that SIE collects an extensive range of data categories including device identifiers, network identifiers, location data, gameplay behavior (including in-game actions and offline play), voice and text communications, biometric identifiers, payment information, and inferences drawn from all of the above, and the terms authorize sharing this data with Sony group companies, third-party business partners, advertising networks, and service providers for purposes including targeted advertising, analytics, and product development. Notably, the policy asserts that voice communications may be recorded and reviewed, that detailed behavioral and gameplay telemetry is collected even in offline contexts, and that inferences and profiles derived from user data may be shared with advertising partners; the policy also states that California residents may opt out of the 'sale' or 'sharing' of personal information for cross-context behavioral advertising, which interacts directly with the California Consumer Privacy Act and its amendments under the CPRA. The policy engages GDPR for non-US users (addressed in supplemental sections), COPPA for users under 13 (child accounts with parental controls), the California Consumer Privacy Act and CPRA for California residents, and general FTC Act unfair or deceptive practices standards; the breadth of data collected across console, network, and behavioral dimensions, combined with the scope of third-party sharing for advertising purposes, creates material compliance surface area across multiple US state privacy laws now in effect, including Virginia, Colorado, and Connecticut frameworks, though the policy's explicit state-specific rights disclosures focus primarily on California.

Institutional Analysis

Institutional analysis available with Professional

Regulatory exposure by statute, material risk assessment, vendor due diligence action items, and enforcement precedent. Available on Professional.

Start Professional free trial
High — 1 provision
Medium — 5 provisions
Low — 1 provision

Monitoring

Sony PlayStation has updated this document before.

Watcher includes same-day alerts, structured change summaries, and monitoring for up to 10 platforms.

Start Watcher free trial Or create a free account →

Professional Governance Intelligence

Need provision-level monitoring and regulatory mapping?

Professional includes governance timelines, compliance memos, audit-ready analysis, and full provision tracking.

Start Professional free trial

Cross-platform context

See how other platforms handle Children's Accounts and Parental Consent and similar clauses.

Compare across platforms →

Mapped Governance Frameworks

CCPA/CPRA
California, USA
View official text ↗
COPPA
United States Federal
View official text ↗
Connecticut Data Privacy Act Amendments
US-CT
View official text ↗
ePrivacy Directive
European Union
View official text ↗
FTC Act Section 5
United States Federal
View official text ↗
GDPR
European Union
View official text ↗
Indiana Consumer Data Protection Act
US-IN
View official text ↗
Kentucky Consumer Data Protection Act
US-KY
View official text ↗
Universal Opt-Out Mechanism Expansion 2026
US
View official text ↗
VPPA
United States Federal
View official text ↗
Archival ProvenanceSource & Archival Record
Last Captured April 18, 2026 07:52 UTC
Capture Method Automated scheduled archival capture
Document ID CA-D-000184
Version ID CA-V-000604
SHA-256 8b854c7dc9d4481499550d6e71bc691486696e41428baa549091d952f6e9b935
✓ Snapshot stored ✓ Text extracted ✓ Change verified ✓ Hash verified

Governance Monitoring

Monitor governance changes across the platforms you rely on.

Structured alerts for policy changes, governance events, and provision updates across 318+ platforms.

Create free account Compare plans