"Another possible legal implication of the metaverse is around data and data protection. The metaverse will expose new categories of our personal data for processing. This might include facial expressions, gestures, and other types of reactions an avatar could produce during interactions in the metaverse.
The EU's General Data Protection Regulation (GDPR) could arguably apply to the metaverse, as could the UK's Data Protection Act."
https://thenextweb.com/news/metaverse-needs-laws-protect-users-data
Meta to bring in mandatory distances between virtual reality avatars
https://www.theguardian.com/technology/2022/feb/04/meta-to-bring-in-mandatory-distances-between-virtual-reality-avatars
Will avatars have to wear masks?
Have you read Snow Crash? Great book about a virus in the metaverse that can induce enough brain damage to kill in the real world. Any many other sideplots and themes.