For a secure and protected metaverse
The PRIME – Privacy in the Metaverse project researches how new virtual worlds can be reconciled with personal rights and data protection.
About the PRIME project
Our Motivation
The metaverse is seen by some as the next stage in the development of the internet. In the metaverse, analog and virtual reality merge. Users can communicate, consume and collaborate virtually via their avatars.
Alongside all its positive potential, however, the vision of the metaverse comes with a variety of challenges for privacy. On the one hand, the question arises about how users in these highly networked worlds won't become completely transparent and how to guarantee the protection of user data. On the other hand, the question arises how personal rights can and should be protected in the metaverse. Because even in the metaverse, it must be ensured that, for example, sexual harassment or insults don't go unpunished. To ensure the greatest possible privacy for users in such a future, privacy protection in the metaverse should be researched at an early stage and solutions identified.
The PRIME Mission
Our Vision
Explore interfaces and design practices
Design and evaluation of user interfaces and design practices that enable users to effectively exercise their right to privacy within the metaverse and, among other things, adequately support their consent and protect themselves from harassment and assault.
Develop evaluation metrics for metaverse platforms
Development and testing of metrics to evaluate the design of virtual content on metaverse platforms about their impact on user privacy to curb dark patterns and deceptive designs in the metaverse, among other things.
Testing participatory design processes
Research and testing of innovative design and development processes with the help of users' opinions concerning user interfaces and metrics can be collected both by means of classical methods of usability research and with the help of methods used in the metaverse itself.
Results
Our findings from the research process
The PRiME Blog
No posts were found for provided query parameters.
Publications
- Franke, F., Xie, R., & Morschheuser, B. (2025). User perspectives on law-sensitive design in the metaverse – Balancing design, regulation, and acceptance. In M. Friedewald & M. Karaboga (Eds.), Privacy, data protection and digital policy in times of crisis. Poster-Proceedings. Research Papers of the Platform Privacy (No. 5). Fraunhofer ISI. https://doi.org/10.24406/publica-5446
- Büning, F. (2025). Das Metaverse: Eine Utopie im Zeitalter des Datenschutzes? Zeitschrift für Datenschutz Aktuell, 2025(6), 01194
- Büning, F., & Meyer, M. (2025). PIMS und das Metaverse: Ein Weg aus dem „Einwilligungs-Banner-Dschungel“? Zeitschrift für Datenschutzrecht, 2025(09), 490–495.
- Grün, J. (2024, 9. October). Virtuelle Welten, reale Daten: Strategieansätze für Privatsphäre und Schutz im Metaversum. Bertelsmann Stiftung. reframe [Tech].
- Hubert, T., Büning, F., El-Rifaai, M., Franke, F., Kern, M., Kettner, S. E., Lell, O., Meyer, M., Xie, R., Morschheuser, B., Thorun, C. & Wiebe, A. (in Druck). Privacy by Design: Schutz der Privatheit im Metaverse durch De-signpraktiken am Beispiel ausgewählter Gefahren für Datenschutz und Per-sönlichkeitsrechte. In Friedewald, M., Roßnagel, A., Geminn, C. L., Mag. i-ur., & Karaboga, M. (Hrsg.). (2025). Freiheit in digitalen Infrastrukturen (1. Aufl., Bd. 5). Nomos. Seite 285 – 318. https://doi.org/10.5771/9783748953371
- Kern, M. (2024). Die Verwendung von Social Bots: Transparenzpflichten gemäß Medienstaatsvertrag und KI-VO sowie deren Umsetzung in virtuellen Welten. Künstliche Intelligenz und Recht, 3(2024), 94–99.
- Xie, R., Kirchner-Krath, J. & Morschheuser, B. (2024). Towards an ethical metaverse: A systematic literature review on privacy challenges. Thirty-Second European Conference On Information Systems (ECIS 2024), Paphos, Cyprus.
- XR HUB Bavaria. (2024, 30. April). Fünf Fragen an das Forschungskonsortium PRiMe.
Events
- JOSEPHS – Offenes Innovationslabor. (2025, July - November). Interaktive Ausstellung zu Privatheit im Metaverse [Exhibition]. JOSEPHS – Innovationslabor, Nürnberg, Germany.
- Franke, F., Xie, R., & Morschheuser, B. (2025, 1. - 2. October). User Perspectives on Law-Sensitive Design in the Metaverse – Balancing Design, Regulation, and Acceptance [Poster]. Annual Conference Plattform Privatheit 2025, Berlin, Germany.
- XR Hub Bavaria Nürnberg. (2025, 8. July). XR Day 2025 – Dein Tag rund um Virtual Reality, Augmented Reality, Mixed Reality und Metaverse [Event]. IHK Nürnberg für Mittelfranken, Nürnberg, Germany.
- BIT – Bamberger Informatik Tag (2025, 27. June). [Event]. Fakultät Wirtschaftsinformatik und Angewandte Informatik. Otto-Friedrich-Universität Bamberg, Bamberg, Germany.
- 6. Nacht des Wissens Göttingen. (2025, 21. June). [Event]. Göttingen, Germany.
- Büning, F. (2025, 14. February). Privacy by design im Metaverse – Risiken und Gestaltungsmöglichkeiten [Conference presentation]. Göttinger Forum IT-Recht, Göttingen, Germany.
- Hubert, T., & Lell, O. (2024, 17. October). Privacy by Design: Schutz der Privatheit im Metaverse durch Designpraktiken am Beispiel ausgewählter Gefahren für Datenschutz und Persönlichkeitsrechte [Conference presentation]. Plattform Privatheit Annual Conference 2024, Berlin, Germany.
- Deutsches Museum Nürnberg. (2024, February - September). Sonderausstellung Metaverse: Phänomenal Digital? [Exhibition]. Nürnberg, Germany.
- Gamification Expo (2024, 08. August). [Event]. Friedrich-Alexander-Universität Erlangen – Nürnberg.
- ECIS. (2024, 13. - 19. June). 32nd European Conference on Information Systems (ECIS 2024): “People First: Constructing Digital Futures Together”. [Workshop]. Paphos, Cyprus.
- GG Bavaria. (2024). [Event].
- Morschheuser, B. (2023, 10. November). The Metaverse. [Conference presentation]. FAU Siemens RIE Erlangen-Nürnberg Conference 2023. Beyond Digital: it´s all about value.
- Lange Nacht der Wissenschaften: Nürnberg – Fürth – Erlangen. (2023, 21. October). [Event].
- Kinder- und Jugendgipfel Erlangen. (2023, 30. September). [Event]. Erlangen, Germany.
- StartPlay. (2023, 28. September). StartPlay 2023: Interdisziplinäre Konferenz zu Gamification & Innovation. [Event]. Bergische Universität Wuppertal, Wuppertal, Germany.
Timeline
Five steps toward a secure metaverse
Timeframe: 1.7.2023 - 30.6.2026
July - December 2023
Foundations
Fundamentals and development of legal requirements and user expectations
January - June 2024
Connection
Meetings with partner organizations, initial workshops with experts and focus group discussions
April - December 2024
Interaction
Launch of online surveys to gather user needs and expectations for privacy-friendly design practices
January - December 2025
Collection
Field experiments and roadmap for the utilization of the project results for the various target groups even after project completion
June 2026
Sharing
Presentation of the results at the closing event
Projectteam
Our Team
Dr. Sara Elisa Kettner
Project Lead
As a behavioural economist, Sara manages consumer policy projects in the field of responsible digitalization at ConPolicy. She leads the PRiME project and is responsible for the overall coordination of the work packages and project management and planning. She is also involved in the empirical work.
Dr. Otmar Lell
Project Team| Data Protection
Otmar brings insights from his other research activities into the incentive effects of business models for user interfaces and design practices. He also conducts focus group discussions with citizens on their expectations of a consumer-friendly metaverse.
Prof. Dr. Benedikt Morschheuser
Sub-Project Lead | Metaverse Research
Benedikt heads the Gamification Research Group at the University of Bamberg. In the project, Benedikt is in charge of the work packages at the University of Bamberg. A particular focus here is on the development of design knowledge for a privacy-friendly metaverse.
Daniel Winter
Project Team | Personal Rights
Daniel works as a research assistant at the chair of Prof. Dr. Louisa Specht-Riemenschneider in Bonn, where he is doing his doctorate on issues of data management law. Daniel conducts research at the University of Bonn on issues of privacy protection in the metaverse and on user-friendly data trust models.
Former Employees
- Marwan El-Rifaai (University Bonn)
- Michael Kern (University Bonn)
- Tom Hubert (University Göttingen)
- Dr. Jeanine Kirchner-Krath (University Bamberg)
- Gesine Marks (ConPolicy)
(Former) student Employees
- Carolin Basaric (ConPolicy)
- Lea Memmert (ConPolicy)
- Josephine Bokowski (ConPolicy)
- Niels Hansen (ConPolicy)
- Nils Rütten (ConPolicy)
- Lea Schäfer (University Göttingen)
- Johanna Grün (ConPolicy)
- Dominik Moretti (ConPolicy)
- Toni Wunsch (ConPolicy)

