The Kongregate Data Processing Addendum (DPA) is designed to support compliance with several major privacy and data protection laws that may apply to developers depending on where their players are located, if their game collects or processes player data. Note that privacy and data regulations are changing frequently and increasingly apply to more regions of the world.
Developers may find the following official resources (regulatory or governmental sources) helpful when learning more about these laws.
European Union — General Data Protection Regulation (GDPR)
The GDPR is one of the most comprehensive privacy laws and may apply if your game is available to players in the European Economic Area.
European Commission overview:
https://commission.europa.eu/law/law-topic/data-protection_en
Full legal text:
https://eur-lex.europa.eu/eli/reg/2016/679/oj
United Kingdom — UK GDPR & Data Protection Act 2018
Following Brexit, the UK operates its own version of GDPR alongside the Data Protection Act 2018.
Information Commissioner’s Office (ICO) guidance:
https://ico.org.uk/for-organisations/guide-to-data-protection/
United States (California) — CCPA / CPRA
The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) regulate how certain businesses collect and use personal information from California residents.
California Privacy Protection Agency:
https://cppa.ca.gov
California Attorney General privacy guidance:
https://oag.ca.gov/privacy/ccpa
United States — Children’s Online Privacy Protection Act (COPPA)
COPPA regulates the collection of personal information from children under the age of 13 by online services.
U.S. Federal Trade Commission COPPA guidance:
https://www.ftc.gov/legal-library/browse/rules/childrens-online-privacy-protection-rule-coppa
COPPA compliance guidance for businesses:
https://www.ftc.gov/business-guidance/privacy-security/childrens-privacy
European Union — Digital Services Act (DSA)
The Digital Services Act establishes rules for online platforms regarding transparency, moderation, and user protections in the EU.
European Commission overview:
https://digital-strategy.ec.europa.eu/en/policies/digital-services-act-package
Full legal text:
https://eur-lex.europa.eu/eli/reg/2022/2065/oj
Brazil — LGPD (Lei Geral de Proteção de Dados)
Brazil’s national privacy law regulates how personal data is collected and processed.
Brazilian National Data Protection Authority (ANPD):
https://www.gov.br/anpd
Japan — APPI (Act on the Protection of Personal Information)
Japan’s primary privacy law governs how organizations handle personal information.
Personal Information Protection Commission:
https://www.ppc.go.jp/en/
Canada — PIPEDA
Canada’s federal privacy law regulates how private-sector organizations handle personal information in commercial activities.
Office of the Privacy Commissioner of Canada:
https://www.priv.gc.ca/en/privacy-topics/privacy-laws-in-canada/the-personal-information-protection-and-electronic-documents-act-pipeda/
Additional Practical Guidance
U.S. Federal Trade Commission – Privacy and Data Security Guidance
https://www.ftc.gov/business-guidance/privacy-security
Important Note
Like all our FAQs, these resources are provided for general informational purposes. Developers are responsible for ensuring that their games and data practices comply with applicable laws and the Game License & Upload Agreement and Data Processing Addendum (DPA).
Developers who have questions about privacy obligations may wish to consult a qualified legal professional.
Support
START HERE | An introduction to Kongregate contracts
SUMMARY | Plain English summary of the Game License & Upload Agreement
CONTRACT | What is the Data Processing Addendum (DPA)?
CONTRACT | When does the DPA apply?
AGE RATING | Are there age restrictions for games submitted to Kongregate?
DATA | AI & Data Use – Developer Summary
DATA | Who is responsible for player data?
DATA | What personal data responsibilities do I have as a developer?
PRIVACY | Who is responsible for complying with privacy laws?
PRIVACY | How is personal data protected?
PRIVACY | What privacy laws does Kongregate comply with?
Comments
0 comments
Please sign in to leave a comment.