I don't think you've understood the problem. The "Consumer Records" category of data includes things like name and credit card number. So if doom eternal wants

I don't think you've understood the problem. The "Consumer Records" category of data includes things like name and credit card number. So if doom eternal wants to be able to sell DLCs (a perfectly legitimate and not privacy invasive business model) then they also have to disclose that they may collector medical records. I doubt Id software actually collects medical records, and I have no idea how they might go about that or what a game studio would do with that information. It's just something they have to say by law since they handle credit card info.