Worldcoin Must Delete European Iris Data, Implement Consent and Deletion Mechanisms: Bavarian Authority

Dec 19, 2024, 07:52 PM

Worldcoin, a company that scans individuals' irises in exchange for cryptocurrency, has been ordered by the Bavarian data protection authority to delete all iris data collected from European citizens. This decision follows an investigation initiated in March, prompted by the Spanish Data Protection Agency (AEPD) due to suspected violations of European privacy laws. The Bavarian authority's ruling mandates the deletion of all stored iris codes and requires Worldcoin to implement changes to its data processing system, including obtaining explicit consent from users for future iris scans and providing a mechanism for data deletion. Additionally, the Bavarian authority noted that Worldcoin failed to implement adequate measures to prevent the processing of minors' data, which will be subject to further investigation. Worldcoin has announced its intention to appeal the decision, asserting that it had already voluntarily deleted old iris codes in May and implemented new privacy-enhancing technologies.