The Data Protection Supervisory Authority (BayLDA) has ordered Worldcoin Implement stricter privacy practices after completing its investigation into the company's biometric data practices.
global coinWLD) has been ordered to provide a GDPR-compliant data deletion process within one month. BayLDA also required the company to obtain explicit user consent for certain data processing activities and to delete data previously collected without sufficient legal basis.
The investigation is over
The investigation, which began in April 2023, examined Worldcoin's collection and use of iris-derived biometric data, which the company uses to create unique digital identities through its World ID system.
The purpose of this system is to authenticate people and prevent duplicate registrations. While Worldcoin voluntarily suspended operations in some EU countries during the investigation, BayLDA identified compliance issues.
BayLDA President Michael Weil said:
“With today's decision, we are implementing European fundamental rights standards for the benefit of data subjects. All users who have provided their iris data to Worldcoin will now have an unlimited right to request erasure of their data.
The BayLDA ruling requires Worldcoin to introduce a GDPR-compliant data deletion process within one month of the implementation of the decision.
The authority also required explicit consent for certain data processing activities and ordered the deletion of data collected without sufficient legal basis. In addition, issues such as the protection of minors and possible administrative violations are under separate investigation.
The research was conducted in coordination with European data protection authorities under the framework of the General Data Protection Regulation (GDPR).
Regulatory challenges
Worldcoin's operations extend across Europe and globally, complicating the implementation of uniform data protection standards. has a project It faced scrutiny Globally due to concerns about biometric data practices and compliance with local laws. However, not all research has progressed.
In Kenya, authorities initially suspended Worldcoin operations due to privacy, security and financial concerns. After further investigation, the investigation was conducted Closed without further actionprovided that the company complies with local regulations.
However, scrutiny in other regions, such as Hong Kong and Singapore, on data collection practices and Possible financial misconducthighlights ongoing global concerns about project operations.
