The Spanish Data Protection Agency (APED) has issued a precautionary order against a global technology company, Tools for Humanity Corporation, to halt its collection and processing of personal data in Spain under the Worldcoin project. In addition, the company is obligated to retain all prior collected personal details. Read more on Jurist News
Worldcoin is a groundbreaking biometric cryptocurrency project with the goal of authenticating individuals’ identities online through World ID, which is produced by iris scanning. Individuals who register for the service can also receive cryptocurrency in return.
The processing of biometric data necessitates special protection under Article 9 of the General Data Protection Regulation (GDPR), due to the high risk to individuals’ rights. According to the APED’s statement, the decision to implement a precautionary measure is based on exceptional conditions that necessitate the immediate stoppage of personal data processing. The aim of the APED is to prevent any potential transfers to third parties and to protect personal data.
Per Article 66.1 of GDPR, in exceptional situations, a concerned control authority can enact provisional measures with legal repercussions in its territory for a period not exceeding three months, in cases where urgent intervention is deemed necessary to protect individuals’ rights.
The APED, an independent Spanish government agency, has an objective of protecting Spaniards’ personal data. The agency also endeavors to promote public awareness of their rights and ensure compliance with data privacy laws and regulations from relevant entities.
Worldcoin has stated that its World ID protocol is secure and does not require permission, with the intent to verify the “humanness” of users online while preserving their privacy. According to Worldcoin, the APED bypassed the procedures laid down by GDPR.