"What are they gonna do with my data?": Privacy Expectations, Concerns, and Behaviors in Virtual Reality
Authors: Abhinaya S.B. (North Carolina State University), Abhishri Agrawal (UNC Chapel Hill), Yaxing Yao (Virginia Tech), Yixin Zou (Max Planck Institute for Security and Privacy), Anupam Das (North Carolina State University)
Volume: 2025
Issue: 1
Pages: 58–77
DOI: https://doi.org/10.56553/popets-2025-0005
Abstract: The immersive nature of Virtual Reality (VR) and its reliance on sensory devices like head-mounted displays introduce privacy risks to users. While earlier research has explored users' privacy concerns within VR environments, less is known about users' comprehension of VR data practices and protective behaviors; the expanding VR market and technological progress also necessitate a fresh evaluation. We conducted semi-structured interviews with 20 VR users, showing their diverse perceptions regarding the types of data collected and their intended purposes. We observed privacy concerns in three dimensions: institutional, social, and device-specific. Our participants sought to protect their privacy through considerations when selecting the device, scrutinizing VR apps, and selective engagement in different VR interactions. We contrast our findings with observations from other technologies and ecosystems, shedding light on how VR has altered the privacy landscape for end-users. We further offer recommendations to alleviate users' privacy concerns, rectify misunderstandings, and encourage the adoption of privacy-conscious behaviors.
Keywords: Privacy, virtual reality, qualitative analysis
Copyright in PoPETs articles are held by their authors. This article is published under a Creative Commons Attribution 4.0 license.
