Portuguese Data Regulator Imposes 90-Day Ban on Worldcoin

The Portuguese data regulator, the National Data Protection Commission (CNPD), has made the decision to temporarily restrict Worldcoin’s collection of biometric data through its Orb devices in Portugal. The CNPD aims to protect the rights of citizens, particularly minors. This decision will be in effect until the conclusion of an investigation that was initiated on March 8. Worldcoin, founded by Sam Altman, the CEO of OpenAI, uses Orb devices to scan individuals’ irises in exchange for a digital ID and its own cryptocurrency. The company claims that over 4.5 million people from 120 countries have signed up with Worldcoin, with 300,000 individuals in Portugal providing their biometric data for the project.

The CNPD’s measures were prompted by numerous reports of data collection from minors without proper authorization from parents or legal authorities. The CNPD stated that given the current circumstances, with the illegal processing of minors’ biometric data and potential violations of other GDPR standards, urgent intervention is necessary to prevent serious harm to citizens’ fundamental rights. The president of CNPD, Paula Meira Lourenço, emphasized that this measure is indispensable and justified in safeguarding the interests of the public and the fundamental rights of minors. The complaint was directed towards the Worldcoin Foundation, the entity behind the data collection initiative.

This development comes in the midst of a series of complaints from regulators worldwide. The Kenyan government has upheld its ban on the Worldcoin project despite pressure from the United States. Similarly, legal authorities in Spain have ordered Worldcoin to cease its activities in the country due to complaints about users being unable to withdraw consent and allegations of data collection from minors. Worldcoin stated on March 18 that it operates lawfully in all available locations and is fully compliant with related laws. On March 22, the project announced plans to open-source its software and introduce a new privacy feature called “personal custody” to give users more control over their data.