Spain issues a three-month ban on Worldcoin, South Korea launches investigation: Action will be taken if found illegal

Worldcoin, which has been embroiled in ongoing privacy concerns, was issued a three-month ban by the Spanish data protection agency AEPD yesterday for alleged infringements involving the collection of data from minors. Additionally, the company is currently under investigation by the South Korean Personal Information Protection Commission to determine if any illegal activities have taken place.

Spain Bans Worldcoin for Three Months

The Spanish Data Protection Authority (AEPD) announced on Wednesday that it has imposed a precautionary measure against Tools for Humanity, the company behind Worldcoin, in order to investigate data protection issues related to the project. Statement

The AEPD has ordered Worldcoin to cease the collection, processing, and use of related data, stating:

We have received multiple complaints against Worldcoin, including failure to provide sufficient information, collecting data from minors, and inability to withdraw consent.

It further added, "The processing of biometric data should receive special protection under the EU's General Data Protection Regulation (GDPR)."

Reportedly, the temporary ban is set for a maximum of three months.

Worldcoin Response: Unsuccessful Attempts at Communication

In response, the Worldcoin Foundation also issued a statement via a blog post, claiming that the AEPD disregarded the regulatory process under the GDPR that Worldcoin had already complied with:

The Worldcoin team has been in collaboration with the Bavarian Data Protection Authority responsible for GDPR oversight for over a year, maintaining compliance.

They added, "We have been attempting to communicate with the AEPD for several months, but have not received any response."

South Korea: Investigation Underway, Action to be Taken if Violations Found

Meanwhile, following numerous complaints about Worldcoin obtaining personal data of South Korean citizens through improper means, authorities in South Korea have initiated an investigation into the company.

A press release from the Personal Information Protection Commission of Korea stated that on February 29, investigations began at 10 locations in the country where iris scan data was collected to determine if Worldcoin violated the Personal Information Protection Act. They emphasized:

If violations are confirmed, action will be taken in accordance with relevant regulations.

They also mentioned, "The focus will be on the handling of sensitive information and the overseas transfer of personal data."

Privacy Concerns Surrounding Worldcoin

Since its launch in 2021, Worldcoin has faced ongoing investigations and controversies regarding privacy issues in various jurisdictions. In addition to Spain and potential issues in South Korea, investigations or bans have been implemented in Kenya and Hong Kong.

Previously, Worldcoin had announced the suspension of services in India, Brazil, and France:

We will temporarily suspend services in Brazil and France, with a large-scale rollout planned for 2024, and iris verification services in India have been temporarily reduced.

In January of this year, Worldcoin also announced the open-sourcing of its hardware device, the "Orb iris scanning device," in an effort to alleviate market concerns regarding privacy and data storage.

Worldcoin has open-sourced the Orb iris scanning device, aiming to address market privacy concerns