German DPA investigates Worldcoin’s use of biometric data
Worldcoin, now rebranded as World, is facing scrutiny from German regulators regarding its compliance with European Union (EU) data protection laws, specifically the General Data Protection Regulation (GDPR). The Bavarian State Office for Data Protection Supervision (BayLDA) has initiated an investigation into the World ID technology, which relies on biometric data collected through iris scans. The regulatory body has mandated that World implement a GDPR-compliant data deletion protocol by January 19. This requirement aims to ensure that users who provided their iris data can exercise their right to erasure under EU law.
The World ID is generated using “Orbs,” devices designed to scan individuals’ eyeballs to create unique digital identifiers. However, the BayLDA has raised concerns about the potential risks associated with processing sensitive biometric data. The regulator has identified earlier data collection practices as non-compliant with GDPR, particularly the storage of iris codes in centralized databases. As a result, World is now required to obtain explicit consent for certain data processing activities and delete any data collected without a sufficient legal basis.
Despite efforts to enhance compliance, including the introduction of cryptographic protocols to anonymize data, the BayLDA has determined that further modifications are necessary. Worldcoin has voluntarily suspended some operations across EU countries during the investigation and plans to appeal the regulator’s decision. The project, which aims to establish a vast network of verified human users, has faced similar scrutiny from regulators in other countries, including Kenya and Portugal, leading to temporary bans due to privacy concerns.
Worldcoin’s rebranding to World and the launch of an updated version of its iris-scanning Orb reflect its commitment to addressing regulatory challenges. The new Orb design features improved production capabilities and aims to facilitate the project’s goal of providing proof of personhood. However, privacy advocates continue to express concerns about the intrusive nature of the technology, highlighting the ongoing tension between innovation and data protection rights.
Source: German Watchdog Cracks Down on Worldcoin Over Biometric Data – Decrypt
