Privacy regulation in the metaverse