Germany Orders Worldcoin to Implement Stricter Privacy Measures Following an Investigation

The Bavarian State Office for Data Protection Supervision (BayLDA) concluded its investigation into Worldcoin's (WLD) biometric data practices and instructed the firm to establish a General Data Protection Regulation (GDPR)-compliant data deletion process within a month.

German authorities have ordered crypto firm Worldcoin to implement stricter privacy measures following an investigation into the company’s practices.

The Bavarian State Office for Data Protection Supervision (BayLDA) concluded its investigation into Worldcoin’s (WLD) biometric data practices and instructed the firm to establish a General Data Protection Regulation (GDPR)-compliant data deletion process within a month.

The order also mandates the company to obtain explicit user consent for specific data processing activities and delete previously collected data that lacked a sufficient legal basis.

The BayLDA investigation began in April 2023, focusing on Worldcoi's use of iris-derived biometric data to create unique digital identities through its World ID system for authentication purposes. The investigation was conducted in collaboration with other European data protection authorities, adhering to the GDPR framework.

“With today’s decision, we are enforcing European fundamental rights standards in favor of the data subjects. All users who provided Worldcoin with their iris data will now have the unrestricted right to demand the erasure of their data,” said Michael Will, President of BayLDA.

The investigation identified compliance gaps and highlighted the need for alignment with European data protection standards.

“Now it is up to Worldcoin to implement the measures ordered by the State Office quickly and completely. We will monitor compliance closely,” Will added.

The ruling spans additional concerns beyond data deletion and consent, including safeguarding minors and addressing potential administrative violations.

Worldcoin’s technology is designed to provide a secure and reliable method for verifying individual identities through a process known as proof-of-humanity. This protocol leverages advanced biometric and cryptographic techniques to ensure that each individual is uniquely identified and that their identity remains secure.

However, Worldcoin has faced mixed reception from countries, with a swath of concerns being raised.

In September, South Korea’s Personal Information Protection Commission, the national data protection authority of South Korea, imposed a fine of KRW 1.1 billion on the Worldcoin Foundation and Tools For Humanity (TFH).

The investigations began in February after users complained that the company may be engaging in biometric collection and offering users tokens in return.

Singapore is also still examining the project for data collection and potential financial misconduct. Moreover, Singapore Deputy Prime Minister Gan Kim Yong advised the public against trading their “digital payment token wallet or World ID as these accounts could be misused by third parties.”

Yong made the remarks in response to parliamentary questions concerning Worldcoin’s Singapore operations.

“The police are investigating seven subjects for their suspected involvement in offering the services of buying or selling Worldcoin accounts and tokens, which constitute offences under the Payment Services Act 2019,” Yong added.

In Kenya, Worldcoin’s operations were initially suspended over privacy and security concerns, but the investigation concluded without penalties, contingent on adherence to local regulations.

Meanwhile, MIMOS, the applied research and development arm of the Malaysian Government, signed an MoU in August with the Worldcoin Foundation, Tools for Humanity (TFH), and e-government services provider MyEG to integrate Worldcoin technology into the country’s digital infrastructure.

The partnership is part of Malaysia’s broader strategy to modernize its digital infrastructure and adopt innovative solutions that address emerging challenges in digital identity management. By implementing Worldcoin’s system, Malaysia aims to enhance the security and efficiency of its national identification processes.

In September, Worldcoin officially expanded World ID to Malaysia, Guatemala, and Poland. "Against this backdrop, interest in proof of humanness has been steadily expanding," Worldcoin stated.