Portugal Imposes Temporary Ban on Worldcoin’s Collection of Biometric Data for 90 Days
The National Data Protection Commission (CNPD) of Portugal has taken decisive action to protect personal data, especially for minors, by temporarily prohibiting Worldcoin from collecting biometric data. The CNPD issued a 90-day restriction on Worldcoin’s collection of biometric data through its Orb devices in Portugal. This measure comes as a response to concerns raised by multiple complaints.
The CNPD’s decision was prompted by worries about Worldcoin collecting biometric data, such as iris, eye, and facial scans, without proper consent or authorization. The CNPD also found deficiencies in the information provided to data subjects and potential issues with data deletion or revocation. Media reports indicating that over 300,000 individuals in Portugal have already provided their biometric data raised concerns about the rapid proliferation of collection points, particularly in commercial areas.
According to the GDPR, biometric data is classified as a special category of data that requires enhanced protection due to its inherent risks. Minors, who are especially vulnerable, are entitled to special protection under European and national laws. The CNPD will continue its investigation and take further steps as necessary to ensure compliance with data protection regulations and mitigate potential harm.
Worldcoin, a global digital identity and cryptocurrency project founded by OpenAI CEO Sam Altman, has been addressing legal uncertainties surrounding its operations, particularly in Spain. The Spanish Data Protection Agency (AEPD) issued a temporary order prohibiting Worldcoin from collecting data in the country for three months due to concerns about users’ inability to withdraw consent and allegations of data collection from minors. Worldcoin’s compliance efforts were rejected by a local court.
This situation in Spain is separate from the regulatory scrutiny Worldcoin has faced in other jurisdictions. In January 2024, Hong Kong’s Office of the Privacy Commissioner for Personal Data (PCPD) investigated Worldcoin’s operations due to concerns about personal data privacy risks. Additionally, Worldcoin’s eye-scanning project encountered regulatory challenges in Kenya, leading to a government ban on local activities associated with the platform, including biometric identification.
Worldcoin has expressed its willingness to collaborate with the Kenyan government to resume operations in 2024. In a statement released on March 18, Worldcoin assured stakeholders that it operates lawfully in all locations where it is available and fully complies with relevant laws.
