Ubisoft is facing a formal complaint from European privacy rights group NOYB, which alleges the company's practice of forcing players to be online for single-player games and collecting data without adequate disclosure violates the EU's General Data Protection Regulation (GDPR). The publisher could face a fine of up to €92 million. 
The case was initiated by a player of "Far Cry Primal" who requested information about the data Ubisoft was collecting. While Ubisoft stated it only gathered basic data such as launch times and game duration, NOYB claims the actual data shows the game connects to external servers up to 150 times every 10 minutes. The group describes this as "secretly collecting data" that goes far beyond player expectations.
Further fueling the controversy is the fact that even though "Far Cry Primal" is a single-player game, Ubisoft still requires players to connect online at launch to verify ownership and log into its proprietary platform, Ubisoft Connect. NOYB argues that since the player purchased the game through Steam, verification could have been handled by Steam without an additional connection, questioning the "necessity" of the requirement.
Ubisoft has cited its user agreement and privacy policy, arguing that by launching the game, players consent to its data processing terms. However, NOYB counters that consent for terms of use and privacy policies must be explicit and voluntary, and that "implied consent" cannot be used to circumvent legal responsibilities.
NOYB is now calling on regulatory authorities to intervene, launch an investigation into Ubisoft, and demand changes to how the company collects and processes player data under GDPR. If found in violation, Ubisoft could face a massive fine of up to 4% of its annual revenue.
Ubisoft has not yet responded to the complaint.
via： Eurogamer.net NOYB