On March 26th, the Portugal National Data Protection Commission (CNPD) issued a significant ruling, prohibiting Worldcoin from collecting biometric data for a period of three months. This decision was prompted by allegations of non-compliance with data protection regulations, specifically regarding the handling of sensitive biometric information and the protection of minors.

The CNPD's investigation revealed several areas of concern, including inadequate age verification mechanisms for members, the collection of data from minors without obtaining the necessary parental consent, and insufficient provision of information to users regarding the deletion of their data and the revocation of consent. These findings led the CNPD to conclude that urgent intervention was necessary to address the alleged violations, particularly in relation to the General Data Protection Regulation (GDPR) and its provisions for biometric data and the protection of minors.

Worldcoin has responded to these allegations, asserting that it is in full compliance with all relevant laws and regulations. The company denies any knowledge of the reported issues prior to the CNPD's action and highlights recent initiatives aimed at enhancing user data control, such as the introduction of a user-controlled Personal Custody model. This model is designed to give users greater autonomy over their personal data, aligning with the principles of data protection and privacy enshrined in the GDPR.

The CNPD's decision is not an isolated incident, as Spain has also imposed a similar three-month ban on Worldcoin's data collection activities. This echoes concerns shared by regulators in other jurisdictions, underscoring the need for companies handling sensitive personal data to ensure strict adherence to data protection regulations. The temporary ban serves as a warning to Worldcoin and other companies operating in the digital space, emphasizing the importance of prioritizing user privacy and data protection in their operations.

The CNPD's ruling has significant implications for Worldcoin's operations, as it must now suspend its biometric data collection activities for a period of three months. This pause will allow the company to address the alleged violations and implement measures to ensure compliance with the GDPR and other relevant data protection regulations. The decision also serves as a reminder to companies handling personal data to prioritize transparency, accountability, and user consent in their data collection and processing practices.

In conclusion, the CNPD's ban on Worldcoin's biometric data collection activities highlights the importance of data protection and privacy in the digital age. As companies increasingly rely on personal data to drive their operations, it is essential that they prioritize compliance with data protection regulations and ensure that users have control over their personal information. The temporary ban serves as a warning to companies operating in the digital space, emphasizing the need for strict adherence to data protection principles and regulations.