The Portugal National Data Protection Commission (CNPD) declared on March 26th that Worldcoin would be prohibited from gathering biometric data for a period of three months.

This decision comes as a response to alleged violations, including inadequate age verification mechanisms for members, data collection from minors without parental consent, and insufficient provision of information to users regarding data deletion and consent revocation.

The CNPD cited concerns over GDPR compliance, particularly regarding biometric data and minors' protection, as grounds for urgent intervention. Worldcoin refutes these allegations, asserting compliance with all relevant laws and regulations and denying any knowledge of the reported issues prior to the CNPD's action.

They highlight recent initiatives, such as the introduction of a user-controlled Personal Custody model, aimed at enhancing user data control. Spain similarly imposed a three-month ban on Worldcoin's data collection activities earlier, echoing concerns shared by regulators in other jurisdictions.