The article examines the metaverse, detailing its user profiles and legal challenges. It highlights data protection principles and privacy concerns unique to virtual environments. Emphasis is placed on data minimisation strategies to safeguard user privacy, concluding with the necessity for robust regulatory measures to ensure ethical development of the metaverse.