The National Data Protection Commission (CNPD) of Portugal issued a temporary 90-day restriction on Worldcoin’s biometric data collection through its Orb devices within Portugal to protect personal data, especially for minors. This decision came in response to concerns raised by numerous complaints regarding the collection of biometric data such as iris, eye, and facial scans without proper consent or authorization. The CNPD also noted deficiencies in the information provided to data subjects and potential issues related to data deletion or revocation. Media reports suggesting that over 300,000 individuals in Portugal had already provided their biometric data further prompted the CNPD to take action. The CNPD’s ongoing investigation will analyze incoming reports and take further steps as necessary to ensure compliance with data protection regulations and safeguard citizens’ fundamental rights in the digital age.
Worldcoin, a global digital identity and cryptocurrency project founded by OpenAI CEO Sam Altman, has been facing legal uncertainties surrounding its operations, particularly in Spain. The Spanish Data Protection Agency (AEPD) issued a temporary order on March 6, prohibiting Worldcoin from collecting data in the country for three months due to concerns related to users’ inability to withdraw consent and allegations of data collection from minors. Despite Worldcoin’s compliance efforts, a local court rejected its injunction against the data regulator. This situation in Spain is separate from the regulatory scrutiny that Worldcoin has faced in other jurisdictions, such as Hong Kong and Kenya. In January 2024, Hong Kong’s Office of the Privacy Commissioner for Personal Data investigated Worldcoin’s operations, while in Kenya, the government banned local activities associated with the platform, including biometric identification, in August 2023. Worldcoin is willing to collaborate with the Kenyan government to resume operations in 2024.
The CNPD’s temporary restriction on Worldcoin’s biometric data collection in Portugal reflects its commitment to upholding citizens’ fundamental rights in the digital age, particularly for vulnerable groups like minors who are entitled to special protection under European and national laws. The rapid proliferation of collection points in commercial areas raised concerns about the influx of participants and the risks associated with biometric data, classified as a special category of data that requires enhanced protection under the GDPR. Worldcoin assured stakeholders in a statement released on March 18 that it operates lawfully in all locations where it is available and is designed to comply fully with relevant laws. Despite its compliance efforts, Worldcoin has faced regulatory challenges in multiple jurisdictions, leading to temporary restrictions and bans on its operations.
In response to concerns raised by numerous complaints regarding the collection of biometric data without proper consent, the CNPD of Portugal issued a temporary 90-day restriction on Worldcoin’s biometric data collection through its Orb devices within Portugal. The CNPD took decisive action to safeguard personal data protection, particularly for minors who are entitled to special protection under European and national laws. This decision was further prompted by media reports indicating that over 300,000 individuals in Portugal had already provided their biometric data, raising concerns about the rapid proliferation of collection points in commercial areas. Worldcoin’s compliance efforts have been tested in various jurisdictions, including Spain, where the AEPD issued a temporary order prohibiting data collection in response to concerns about users’ inability to withdraw consent and allegations of data collection from minors.
Worldcoin has faced legal uncertainties surrounding its operations in Spain, Hong Kong, and Kenya, leading to regulatory scrutiny and temporary restrictions on its activities. Despite facing challenges in various jurisdictions, Worldcoin has assured stakeholders that it operates lawfully and is designed to comply fully with relevant laws. The temporary restrictions imposed by the CNPD in Portugal and the AEPD in Spain reflect concerns about the collection of biometric data without proper consent and the potential risks associated with such data. The CNPD’s ongoing investigation will analyze reports and take further steps to ensure compliance with data protection regulations and protect citizens’ fundamental rights in the digital age, particularly for vulnerable groups like minors. Worldcoin’s willingness to collaborate with the Kenyan government to resume operations in 2024 demonstrates its commitment to resolving regulatory challenges and operating within the legal framework.
