Civil Law and Virtual Reality Platform User Safety Litigation in Europe

1. Introduction

Virtual-reality platform user-safety litigation concerns civil and regulatory disputes arising when users are exposed to physical, psychological, privacy, financial, or online harms through a VR platform.

Examples include:

injury caused by a defective VR headset or controller;

unsafe virtual environments;

inadequate warnings about physical hazards;

dangerous software or hardware;

harassment, threats, or abusive conduct by other users;

failure to remove unlawful content;

inadequate protection of children;

misuse of eye-tracking, facial, voice or behavioural data;

deceptive or coercive interface design;

unsafe third-party applications;

fraudulent virtual transactions;

account suspension or deletion following safety incidents;

inadequate cybersecurity;

misleading safety or health claims.

There is not yet a comprehensive European body of reported judgments specifically titled “VR user-safety litigation.” The legal framework must therefore be constructed from European case law on defective products, consumer conformity, online-platform liability, privacy, unfair terms, digital platforms, and intermediary responsibility. This distinction is important: the cases below are highly relevant precedents, but several are analogical rather than cases involving VR headsets themselves.

A particularly direct European development is the German Meta/Oculus Quest proceeding, in which the Bundeskartellamt examined the safety and autonomy implications of requiring Quest users to connect their VR headsets to Facebook accounts. The authority ultimately required an arrangement allowing Quest use without a Facebook or Instagram account. (Bundeskartellamt)

2. What is meant by “user safety” in VR?

User safety in a VR platform has at least five dimensions.

1. Physical safety

Examples:

headset overheating;

battery fires;

defective controllers;

collisions with furniture;

tracking failures;

visual or display defects;

unsafe charging equipment.

2. Digital safety

Examples:

hacking;

account takeover;

identity theft;

malicious applications;

fraudulent virtual transactions.

3. Social safety

Examples:

harassment;

threats;

stalking;

sexual misconduct;

hate speech;

targeted abuse.

4. Privacy and informational safety

Examples:

unauthorized processing of eye-tracking data;

facial recognition;

voice recording;

behavioural profiling;

location or room-mapping data.

5. Consumer/economic safety

Examples:

deceptive subscriptions;

unauthorized purchases;

hidden charges;

virtual-currency manipulation;

misleading safety claims;

unfair contractual exclusions.

Consequently, a VR safety dispute can involve civil liability, consumer law, product liability, GDPR, platform regulation, competition law and national tort law simultaneously.

3. The European legal structure

A VR platform can involve several separate legal relationships:

Manufacturer → consumer

for the headset.

Retailer → consumer

for the sale.

Platform operator → consumer

for the VR service.

Developer → platform/user

for applications.

User → user

for interpersonal conduct.

Platform → third-party developer

for content and applications.

Therefore, identifying the correct defendant is often the first major issue.

4. Case Law 1 — Meta Platforms and Others v Bundeskartellamt

CJEU, Case C-252/21, Meta Platforms and Others, judgment of 4 July 2023, ECLI:EU:C:2023:537

This is one of the most important cases for VR-platform safety because Meta's broader ecosystem includes its VR products.

The German competition authority had examined Meta's combination of personal data obtained from Facebook with information from other Meta services. The CJEU held that a competition authority investigating abuse of dominance may examine whether the relevant processing of personal data complies with the GDPR, while respecting the institutional role of data-protection authorities. (InfoCuria)

Importance for VR

VR platforms can collect much more intimate information than ordinary social networks.

Potential data include:

eye movements;

head movements;

hand movements;

facial expressions;

voice;

body position;

room geometry;

behavioural patterns.

Suppose a VR operator says:

“Use the headset only if you agree to extensive combination of your VR data with data from our other services.”

A consumer could potentially challenge the legality of the arrangement through GDPR, consumer, competition or contractual mechanisms depending upon the circumstances.

Key principle

Data protection can become part of a platform-safety dispute.

VR safety is therefore not limited to avoiding physical injury.

5. Case Law 2 — Meta/Oculus Quest proceedings before the Bundeskartellamt

Bundeskartellamt, B6-55/21, Meta/Oculus VR headset proceedings

This is the most directly VR-specific European authority in this area, although it is an administrative/competition proceeding rather than a civil damages judgment.

The Bundeskartellamt investigated Meta's requirement that users of the Quest 2 headset connect the device to a Facebook account. The authority was concerned that Meta's ecosystem position could disadvantage competition and effectively tie the VR hardware to its social-network ecosystem.

Meta subsequently introduced the possibility of using a separate Meta account rather than requiring a Facebook or Instagram account. The Bundeskartellamt stated that users had to be given a sufficiently free and uninfluenced choice regarding whether to use the headset separately or together with other Meta services. (Bundeskartellamt)

Civil-law relevance

Although this was not a damages case, it provides a powerful framework for future VR consumer litigation.

A VR operator may have obligations concerning:

freedom of choice;

data separation;

transparency;

account independence;

platform dependence;

ecosystem tying.

Safety significance

If a consumer cannot reasonably use essential VR hardware without surrendering additional personal data, the dispute may become a data-autonomy and consumer-protection issue, rather than merely a competition issue.

6. Case Law 3 — Boston Scientific Medizintechnik

CJEU, Joined Cases C-503/13 and C-504/13, Boston Scientific Medizintechnik, 5 March 2015, ECLI:EU:C:2015:148

This is a product-liability case involving pacemakers and implantable cardioverter-defibrillators.

The CJEU held that where products belonging to the same group or production series have a significant potential defect affecting safety, products in that group may be regarded as defective even if the specific individual product has not itself malfunctioned. (InfoCuria)

The Court also addressed the cost of removing and replacing the potentially defective medical devices.

Application to VR

Imagine a manufacturer discovers that:

50,000 VR headsets contain a battery component that can overheat.

The particular consumer's headset has not yet caught fire.

The manufacturer might argue:

“Your headset has never actually malfunctioned.”

Boston Scientific demonstrates why that is not necessarily sufficient.

Where a product carries an abnormal safety risk, the relevant question can be whether the product falls within a category presenting a significant safety defect.

VR examples

This principle could become relevant to:

battery overheating;

electrical hazards;

defective straps;

unsafe charging components;

defective controllers;

dangerous optical components.

Key principle

Safety defects can justify protective remedies before an individual consumer suffers catastrophic injury.

That is highly relevant to preventive VR safety litigation.

7. Case Law 4 — Faber v Autobedrijf Hazet Ochten

CJEU, Case C-497/13, Faber, 4 June 2015, ECLI:EU:C:2015:357

Faber concerned a consumer vehicle that caught fire.

The CJEU addressed the burden of proof in consumer conformity disputes and held, under the then-applicable EU framework, that where a lack of conformity became apparent within six months of delivery, the consumer benefited from a presumption concerning the existence of the defect at delivery. The Court also emphasized that national courts must determine consumer status where the necessary facts are available. (InfoCuria)

VR application

Suppose:

A consumer purchases a VR headset.
Three months later the headset begins overheating and shuts down repeatedly.

The consumer may have difficulty proving exactly which component failed.

Faber illustrates the importance of statutory presumptions and allocation of the evidentiary burden in consumer conformity litigation.

Practical significance

A VR consumer should preserve:

purchase date;

invoices;

photographs;

error messages;

firmware versions;

repair records;

safety warnings;

communications with the manufacturer.

Principle

Consumer safety litigation cannot always require the consumer to prove the entire technical mechanism of the defect.

The precise evidentiary rules now applicable will depend on the current EU and national conformity regime.

8. Case Law 5 — Gebr. Weber and Putz

CJEU, Joined Cases C-65/09 and C-87/09, Gebr. Weber and Putz, 16 June 2011, ECLI:EU:C:2011:396

These cases concerned defective consumer goods that had already been installed.

The CJEU held that where replacement is the appropriate remedy, the seller may in appropriate circumstances be responsible for the costs associated with removing the defective goods and installing the replacement goods. (InfoCuria)

VR application

VR hardware is generally not “installed” like floor tiles, but the principle has broader importance.

Suppose a VR device is:

integrated into a specialized installation;

connected to custom equipment;

configured with substantial technical infrastructure;

used with a dedicated physical environment.

If the product is defective, the consumer's remedy may need to address the practical cost of restoring conformity, not merely the price of the defective component.

Example

A business consumer installs a €2,000 VR system in a dedicated training environment.

The headset is defective.

A mere statement:

“Here is a replacement headset.”

may not fully address the economic consequences if substantial professional reconfiguration is necessary.

Principle

Consumer remedies should be practically effective rather than merely theoretical.

9. Case Law 6 — Wathelet

CJEU, Case C-149/15, Wathelet, 9 November 2016, ECLI:EU:C:2016:840

Wathelet concerned a consumer transaction involving an intermediary.

The CJEU interpreted the concept of “seller” broadly enough to include, in the circumstances of the case, a trader acting as intermediary on behalf of a private individual where the consumer had not been properly informed about the identity of the actual owner. (InfoCuria)

VR application

VR platforms frequently operate marketplaces involving:

platform operator;

independent game developer;

virtual-world creator;

third-party seller;

payment processor.

Suppose a VR marketplace sells an application that causes serious safety problems.

The marketplace might argue:

“We did not develop the application.”

Wathelet demonstrates why the actual role played by an intermediary can matter for consumer protection.

Principle

A business cannot necessarily avoid consumer responsibilities simply by describing itself as:

“only an intermediary.”

The precise consequences depend on the contractual and regulatory structure.

10. Case Law 7 — Glawischnig-Piesczek v Facebook Ireland

CJEU, Case C-18/18, 3 October 2019, ECLI:EU:C:2019:821

This is one of the most important European cases for social safety on a VR platform.

The dispute arose from defamatory material posted on Facebook.

The CJEU held that EU law does not prevent a national court from ordering a hosting provider to remove illegal content and, in appropriate circumstances, identical or equivalent content. (InfoCuria)

At the same time, the judgment addressed the limits of imposing a general monitoring obligation.

VR application

Consider a VR social platform where one user:

repeatedly threatens another user;

posts defamatory material;

creates abusive virtual environments;

repeatedly uploads substantially identical unlawful material.

A victim could potentially seek an injunction requiring the platform to act.

Why this is important

VR social interaction can be much more immersive than ordinary social media.

An abusive user may:

follow the victim's avatar;

repeatedly enter the victim's virtual space;

use voice communication;

use virtual gestures;

display abusive objects;

distribute unlawful material.

The principle from Glawischnig-Piesczek provides a foundation for understanding when an intermediary may be required to remove unlawful material after the illegality has been established.

Important limitation

The case does not create a general obligation for every VR platform to monitor everything users do.

The distinction between:

targeted removal obligations; and

general monitoring,

remains important.

11. Case Law 8 — Verein für Konsumenteninformation v Amazon EU

CJEU, Case C-191/15, 28 July 2016, ECLI:EU:C:2016:612

The case concerned online consumer contracts, unfair terms, choice of law and data protection.

The CJEU addressed the relationship between consumer protection, cross-border contracts and contractual choice-of-law clauses. (InfoCuria)

VR application

VR platforms frequently provide standard terms stating:

“The law of State X applies.”

or:

“All disputes must be brought exclusively in State Y.”

A consumer living elsewhere in Europe may challenge the practical effect of such clauses.

The Amazon case is therefore important when a VR platform is headquartered in:

Ireland;

Luxembourg;

the Netherlands;

Germany;

another EU jurisdiction,

while the consumer lives in a different Member State.

Safety significance

A user injured by a defective VR headset or harmed by unlawful platform conduct should not assume that the platform's terms automatically eliminate mandatory consumer protections.

12. Case Law 9 — Aziz

CJEU, Case C-415/11, Aziz, 14 March 2013, ECLI:EU:C:2013:164

Aziz is the leading CJEU authority on effective judicial protection against unfair consumer contract terms.

The Court held that national procedural rules could not prevent consumers from obtaining effective judicial protection against unfair terms. (InfoCuria)

VR application

Suppose a VR platform's terms say:

“The platform may terminate your account at any time without compensation.”

or:

“The consumer waives all claims for injuries caused by the platform.”

The consumer-law analysis does not stop merely because the consumer clicked:

“I Agree.”

The term may still have to be tested under mandatory unfair-terms rules.

Principle

A VR platform's standard-form contract cannot automatically defeat mandatory consumer rights.

13. Case Law 10 — Meta Platforms v Commission

General Court, Case T-1078/23, Meta Platforms v Commission, judgment of 3 June 2026, ECLI:EU:T:2026:357

This is a very recent EU digital-platform authority.

The General Court examined Meta's position under the Digital Markets Act, including concepts such as:

core platform services;

gatekeepers;

online social networking services;

online intermediation services;

important gateways;

digital ecosystem power. (curia)

Relevance to VR

The case is not itself a personal-injury VR judgment.

Its significance is structural.

A large VR ecosystem may combine:

hardware;

operating system;

app store;

social network;

payment system;

advertising;

user account;

cloud services.

The greater the integration, the more important questions of:

platform dependence;

access;

interoperability;

account portability;

competition;

user choice;

become.

This is particularly relevant when user safety depends upon the consumer's ability to leave one ecosystem or obtain alternative services.

14. Main categories of VR user-safety litigation

A. Physical injury claims

A user may claim that the headset or accessory was defective.

Examples:

burns;

eye injury;

battery fire;

electric shock;

controller malfunction;

physical collision resulting from defective tracking.

Possible legal bases include:

consumer conformity;

product liability;

contractual damages;

negligence/delict under national law.

The Boston Scientific principle is especially useful where a product class presents an abnormal safety risk. (InfoCuria)

15. Failure to provide safety warnings

VR products should generally be accompanied by appropriate information concerning foreseeable risks.

Examples:

risk of collision;

safe play area;

age restrictions;

epilepsy warnings;

motion sickness;

battery safety;

charging;

environmental hazards.

If a foreseeable and legally relevant risk is inadequately communicated, the consumer may potentially argue:

inadequate conformity;

defective product;

misleading commercial practice;

negligence;

breach of statutory safety duties.

16. Unsafe virtual environments

A virtual environment may create risks that are not simply software defects.

Examples:

virtual objects deliberately designed to induce dangerous physical movement;

games encouraging users to run without adequate boundary warnings;

unsafe multiplayer challenges;

deceptive representations of physical surroundings;

failure of guardian/boundary systems.

A court may need to ask:

Was the risk inherent in the ordinary use of the product, or did the platform fail to provide reasonably expected protection?

This is a fact-sensitive product-safety question.

17. User-on-user harassment

VR creates a particularly complicated form of interpersonal harm.

A user may be subjected to:

verbal abuse;

sexual harassment;

stalking;

threats;

intimidation;

avatar-based assault;

repeated unwanted contact.

The platform's liability depends on factors such as:

what it knew;

what the user reported;

whether the content was unlawful;

whether it had notice;

what moderation mechanisms existed;

whether the platform acted promptly;

what applicable intermediary-liability rules require.

The Glawischnig-Piesczek decision is important because it demonstrates that hosting platforms can, under appropriate circumstances, be ordered to remove unlawful content and equivalent manifestations. (curia)

18. No general obligation to monitor everything

This is a critical limitation.

A platform cannot automatically be treated as liable for every harmful statement or interaction created by every user.

European intermediary law historically distinguished between:

passive hosting/intermediary activity

and

active knowledge/control over unlawful content.

Glawischnig-Piesczek permits targeted injunctions but does not establish an unlimited obligation to monitor every communication. (InfoCuria)

Modern Digital Services Act rules must now also be considered for relevant online-platform services.

19. Child safety

Children create a particularly important category of VR safety claims.

Potential risks include:

exposure to violent material;

sexual content;

grooming;

harassment;

manipulation;

excessive spending;

inappropriate contact with adults;

addictive design;

targeted advertising.

A civil claim may involve:

parental claims;

consumer protection;

platform contractual duties;

data protection;

national child-safety legislation;

product-safety obligations.

A VR platform should therefore not be treated as merely selling software when its service creates a persistent social environment involving minors.

20. VR and biometric privacy

VR may be unusually intrusive because the system can infer information from physical behaviour.

For example:

Eye movement may reveal attention.

Head movement may reveal behavioural patterns.

Hand movement may reveal motor characteristics.

Voice may reveal identity.

Room mapping may reveal the user's home.

This makes Meta Platforms, C-252/21 particularly important.

The CJEU recognized the legal significance of data processing within a dominant online platform and its interaction with GDPR requirements. (InfoCuria)

Potential civil consequences

Depending on the facts and applicable national procedures, a user might seek:

cessation of unlawful processing;

deletion;

restriction;

compensation;

injunctive relief.

21. VR account security

Suppose hackers take over an account and:

access private VR conversations;

steal virtual goods;

make purchases;

impersonate the user;

access recorded data.

Potential claims may involve:

contract;

cybersecurity obligations;

consumer law;

data protection;

tort/delict;

restitution.

The platform's contractual promises concerning security can become relevant evidence.

22. Platform responsibility after receiving notice

A particularly important factual question is:

When did the platform know?

For example:

Day 1

User reports harassment.

Day 2

Platform receives evidence.

Day 10

Platform still takes no action.

Day 15

The user suffers further harm.

The causal analysis becomes much stronger if the claimant can demonstrate:

actual notice;

foreseeable continuing harm;

available moderation tools;

unreasonable failure to act.

This is much stronger than a claim based solely on:

“Someone somewhere used the platform to harm me.”

23. Defective safety technology

VR platforms increasingly use automated safety systems.

Examples:

automatic boundary detection;

voice moderation;

avatar-distance controls;

parental controls;

age verification;

automated abuse detection.

If a platform advertises:

“Our system automatically prevents unsafe interactions,”

but the system systematically fails, consumer and contractual questions can arise.

The representation itself may become part of the contractual safety expectation.

24. Product liability versus contract liability

These doctrines must be separated.

Contract claim

The consumer says:

“The product/service I purchased did not comply with the contract.”

Product-liability claim

The consumer says:

“The defective product caused legally compensable damage.”

Tort/delict

The consumer says:

“The defendant breached a duty of care and caused harm.”

GDPR

The consumer says:

“My personal data were processed unlawfully.”

Platform regulation

The consumer or authority says:

“The platform failed to comply with statutory digital-platform obligations.”

One incident can potentially generate several claims.

25. Example: defective VR headset causes injury

Assume:

A consumer buys a VR headset for €700.
Three months later, its battery overheats and burns the consumer.
The manufacturer subsequently discovers that the same battery component was used in 40,000 devices.

The legal analysis could include:

Consumer conformity

Was the headset defective or non-conforming?

Product liability

Did the defect cause personal injury?

Boston Scientific

Was the entire production group affected by a safety defect?

Faber

What evidence and presumptions apply to proving the defect?

Damages

The consumer may potentially seek compensation for legally recognized injury and related loss.

26. Example: harassment inside a VR social platform

Assume:

A user repeatedly enters another user's VR space, threatens them and distributes unlawful material.

The victim reports the account.

The platform does nothing.

The conduct continues for weeks.

Potential claims could involve:

unlawful content;

personality/reputation rights;

injunction;

contractual obligations;

platform liability;

applicable DSA duties.

Glawischnig-Piesczek becomes particularly relevant because it recognizes the possibility of judicially ordered removal of unlawful content and equivalent material. (curia)

27. Example: VR data exploitation

Suppose:

A VR platform collects eye-tracking data and combines it with social-media information to create advertising profiles.

The consumer never clearly understood this arrangement.

Meta Platforms, C-252/21 becomes highly relevant.

The CJEU dealt directly with the interaction between:

dominant digital platforms;

personal-data processing;

consent;

GDPR;

competition law. (InfoCuria)

The factual setting is different, but the legal reasoning is particularly relevant to VR ecosystems.

28. Example: mandatory Facebook/Meta account

Suppose a consumer buys a VR headset but discovers:

“The headset cannot operate unless the consumer maintains a separate social-media account.”

The German Meta/Oculus proceeding demonstrates that this type of ecosystem tying can raise significant legal concerns.

The Bundeskartellamt ultimately required an arrangement allowing Quest users to operate the headset without a Facebook or Instagram account. (Bundeskartellamt)

This does not automatically establish a private damages claim for every VR consumer, but it is an important indicator of the regulatory approach to user autonomy and ecosystem dependence.

29. Cross-border VR safety claims

VR platforms are inherently international.

A hypothetical dispute could involve:

consumer: France;

manufacturer: United States;

EU distributor: Germany;

platform operator: Ireland;

server: Netherlands;

software developer: Sweden.

The claimant may need to determine:

jurisdiction;

applicable law;

consumer-protection rules;

Rome I;

Rome II;

Brussels I Recast;

product-liability rules;

GDPR jurisdiction;

recognition and enforcement.

The Amazon C-191/15 judgment is useful because it illustrates the complexity of choice-of-law clauses in cross-border online consumer contracts. (InfoCuria)

30. Limitation-of-liability clauses

VR terms often contain clauses such as:

“The platform is not responsible for any injury.”

or:

“Maximum liability is €50.”

Such clauses must be assessed under applicable national and EU mandatory rules.

The Aziz line of jurisprudence is important because consumer protection against unfair terms cannot simply be neutralized by contractual drafting. (InfoCuria)

A court may therefore examine:

whether the consumer had meaningful bargaining power;

whether the term creates significant imbalance;

whether the term is transparent;

whether mandatory law prohibits exclusion;

whether personal injury is involved.

31. Intermediary responsibility

VR platforms increasingly resemble marketplaces.

A platform may host:

independent games;

virtual stores;

user-generated environments;

third-party advertisements;

social experiences.

Wathelet demonstrates that the intermediary's legal status must be assessed according to its actual role rather than simply its contractual label. (InfoCuria)

For a VR platform, relevant questions include:

Who selected the third-party seller?

Who processed the payment?

Who controlled the user interface?

Who made safety representations?

Who provided customer service?

Who controlled refunds?

Who controlled access to the application?

32. Evidence in VR safety litigation

Evidence can be unusually important.

A claimant should preserve:

purchase receipts;

headset serial number;

firmware version;

software version;

crash logs;

screenshots;

video recordings;

platform communications;

moderation reports;

account records;

safety warnings;

advertisements;

terms of service;

privacy notices;

records of complaints;

medical records in injury cases;

expert technical reports.

For harassment cases, timestamps and platform moderation records may become crucial.

33. Causation

A major difficulty is proving that the VR platform caused the harm.

For example:

User suffers dizziness after a VR session.

Was the cause:

defective hardware?

ordinary motion sickness?

pre-existing susceptibility?

inappropriate software?

excessive session duration?

inadequate warning?

faulty frame rate?

another medical factor?

Similarly:

User suffers psychological distress after VR harassment.

The claimant may need to establish:

what happened;

who caused it;

what the platform knew;

whether the platform could reasonably intervene;

what harm resulted.

34. Preventive remedies may be more important than damages

VR safety disputes frequently require injunctive or corrective remedies, not merely money.

Examples:

remove abusive content;

suspend a harassing account;

recall defective hardware;

issue a safety warning;

restore an account;

stop unlawful data processing;

permit independent account use;

correct misleading advertising.

This is why Glawischnig-Piesczek and the Meta/Oculus proceeding are particularly important.

35. Six principal authorities at a glance

36. The six most important legal principles

Principle 1 — VR hardware remains a consumer product

The fact that a device is technologically sophisticated does not remove ordinary consumer-protection principles.

Faber and Boston Scientific are particularly useful analogies. (InfoCuria)

Principle 2 — Safety defects can justify intervention before catastrophic injury

The logic of Boston Scientific is particularly significant for potentially dangerous VR hardware.

A manufacturer may face obligations concerning an entire product group when a serious safety risk exists. (curia)

Principle 3 — Platform safety includes informational and data safety

Meta Platforms, C-252/21 demonstrates that personal-data processing can be closely connected to the legal assessment of a powerful digital platform. (InfoCuria)

Principle 4 — Online platforms can face removal obligations concerning unlawful material

Glawischnig-Piesczek establishes an important framework for injunctions concerning unlawful online content. (curia)

Principle 5 — Intermediaries cannot always escape consumer obligations

Wathelet demonstrates the importance of the intermediary's actual role. (InfoCuria)

Principle 6 — Standard-form VR terms are not automatically decisive

Aziz and Amazon C-191/15 demonstrate that mandatory consumer protections can constrain contractual drafting and choice-of-law arrangements. (InfoCuria)

37. Overall legal test for a European VR safety claim

A court could effectively work through the following sequence:

Step 1 — Identify the relationship

Is it:

sale of hardware;

digital-content contract;

digital-service contract;

marketplace transaction;

user-to-user interaction?

Step 2 — Identify the safety problem

Is it:

physical;

digital;

social;

privacy-related;

economic?

Step 3 — Identify the defendant

Is responsibility potentially with:

manufacturer;

retailer;

platform;

developer;

intermediary;

another user?

Step 4 — Establish breach

Was there:

defect;

contractual non-conformity;

unlawful content;

inadequate security;

unlawful processing;

unfair term;

misleading representation?

Step 5 — Establish causation

Did the breach cause the alleged harm?

Step 6 — Quantify loss

Potential heads of loss may include:

personal injury;

medical expenses;

property damage;

refund;

repair/replacement;

lost expenditure;

consequential economic loss;

legally compensable non-material harm.

Step 7 — Determine remedy

The appropriate remedy may be:

damages;

repair;

replacement;

refund;

price reduction;

restoration;

injunction;

deletion of data;

content removal;

account reinstatement.

38. Important limitation concerning “VR case law”

For academic accuracy, it is important to distinguish direct VR precedent from analogical digital-platform precedent.

The Meta/Oculus Bundeskartellamt proceeding is directly about VR headsets. (Bundeskartellamt)

By contrast:

Boston Scientific concerns medical devices;

Faber concerns a motor vehicle;

Weber/Putz concerns defective consumer goods;

Wathelet concerns an intermediary;

Glawischnig-Piesczek concerns Facebook content;

Meta C-252/21 concerns social-network data processing;

Aziz concerns mortgage terms.

They are nevertheless highly relevant because European VR law is still developing and these underlying doctrines are precisely the rules a court would ordinarily use when confronted with a novel VR safety dispute.

39. Conclusion

European civil law does not treat virtual reality as a legally separate universe. Instead, VR platforms are analyzed through existing principles of consumer protection, product liability, contract law, tort/delict, privacy, intermediary responsibility and digital-platform regulation.

The strongest European authorities show a developing legal structure:

Defective headset → product/conformity liability.

Unsafe hardware design → product-safety principles.

Inadequate warnings → conformity/product-liability issues.

VR harassment → intermediary/content-removal principles.

Eye-tracking and behavioural profiling → GDPR and platform-data principles.

VR marketplace → intermediary and consumer-law obligations.

Unfair liability clauses → unfair-terms control.

Cross-border VR contract → consumer jurisdiction and applicable-law rules.

Platform ecosystem dependence → competition and digital-market regulation.

The most important direct VR development is the Meta/Oculus Quest proceeding, where the German competition authority intervened over the linking of VR headset use to Meta's social-media ecosystem and required an arrangement permitting use without a Facebook or Instagram account. (Bundeskartellamt)

The broader CJEU case law then supplies the civil-law framework: Boston Scientific for dangerous products, Faber for consumer conformity and proof, Weber/Putz for effective remedies, Wathelet for intermediary responsibility, Glawischnig-Piesczek for unlawful online content, Meta C-252/21 for data and platform power, and Aziz/Amazon for consumer-contract protection. Taken together, these authorities indicate that European VR-platform operators may face responsibility not merely for defective technology, but also for foreseeable risks created by the design, operation, contractual structure and data practices of the virtual environment.