In the coming weeks, Worldcoin, a crypto endeavor that scans eyeballs and was co-initiated by OpenAI’s Sam Altman, could face crucial times. This project is notably under scrutiny in the European Union where it has had to pause operations in several countries due to privacy concerns, including in nations such as France, Germany, Portugal, and Spain.
Presently, Germany is the sole EU country where Worldcoin is operational, thanks to the presence of its developer, Tools for Humanity (TfH), within the country. However, an ongoing investigation by the Bavarian data protection authority could potentially alter this situation.
The investigating body has informed TechCrunch of its expectation to finalize its investigation soon, with indications pointing towards a resolution by mid-July. This probe was prompted by Worldcoin’s official launch in July 2023 and its examination of global practices.
Within the EU, there’s concern that Worldcoin may be violating the General Data Protection Regulation (GDPR), which provides guidelines for personal data processing. Violations could lead to hefty fines and potentially enforce a halt in non-compliant processes.
The challenge with Worldcoin lies in its backbone technology—using crypto-biometrics to encode a person’s iris scan into an immutable token on a blockchain, which complicates compliance with GDPR demands for personal data deletion upon request.
Additional GDPR issues with Worldcoin revolve around the legality of processing sensitive biometric data and adherence to transparency and fairness principles mandated by the regulation.
Critique also comes from the incentive Worldcoin creates for individuals to surrender their biometric data in exchange for cryptocurrency, questioning the voluntariness of consent as required by the GDPR.
Concerns extend to child safety, prompting some EU countries to impose temporary restrictions on Worldcoin after reports surfaced of minors having their iris data scanned.
This year, in response to privacy concerns and risks to children’s information, Spain’s DPA implemented a temporary halt on Worldcoin’s data collection efforts, a move shortly echoed by Portugal’s DPA regarding the scanning of minors.
Despite these developments, German regulators have permitted Worldcoin to continue operations during the Bavarian DPA’s investigation. A notable observation from a Worldcoin site in Berlin includes an 18+ age limit advisory for its scanning services.
The Spanish DPA recently revealed that Worldcoin consented not to restart operations in Spain after the conclusion of its three-month prohibition, awaiting the final verdict from the Bavarian probe. This agreement appears aimed at mitigating regulatory risks and hinges on the forthcoming decision from Bavarian authorities.
Following Spain’s emergency directive, TfH communicated adjustments to Worldcoin’s protocol, including user age verification methods and mechanisms for iris data deletion, signaling a move towards regulatory compliance.
Inquiries towards TfH regarding these commitments were directed to a statement from Worldcoin, highlighting implemented privacy and security enhancements, including age checks and options for data erasure.
The adaptation suggestions by TfH, notably converting iris data into SMPC shares, raise questions on their compliance with the GDPR’s data deletion mandates.
The anticipation builds as the Bavarian data protection body nears the conclusion of its investigation, with outcomes expected to shape the regulatory landscape concerning Worldcoin across Europe.
Disagreements among DPAs on handling Worldcoin could leverage the GDPR’s provisions for resolving cross-border disputes, potentially escalating to the European Data Protection Board for a decisive resolution.
Worldcoin’s response to these developments has been included in the report’s latest update.
Compiled by Techarena.au.
Fanpage: TechArena.au
Watch more about AI – Artificial Intelligence
