Worldcoin Ordered to Delete Iris Scan Data in Germany and Spain Over Privacy Violations

EU regulators demand biometric data deletion and GDPR compliance from Sam Altman's Worldcoin project, citing fundamental privacy risks.

Germany's Bavarian State Office for Data Protection Supervision (BayLDA) has ordered Worldcoin to delete all iris scan data collected without a sufficient legal basis by January 19, 2025.
Spain's data protection agency (AEPD) has supported the decision, citing violations of the EU's General Data Protection Regulation (GDPR).
Worldcoin, rebranded as 'World,' uses iris-scanning devices called Orbs to create unique digital IDs, raising concerns about the handling of sensitive biometric data.
Worldcoin has faced global scrutiny, with operations previously suspended in countries like Kenya, Portugal, and Hong Kong due to privacy concerns.
The company plans to appeal the decision, arguing that its system anonymizes user data, though regulators maintain that adjustments are needed to meet GDPR standards.