- Germany’s Federal Commissioner for Data Protection (BfDI) has ordered Worldcoin to delete its stored iris scans, citing violations of the GDPR.
- The regulator highlighted concerns about processing biometric data without user consent and lacking clear legal grounds.
Germany’s Federal Data Protection Authority (BfDI) has directed Worldcoin [WLD], a biometric-based cryptocurrency project, to delete all user iris scans. The move comes amid growing concerns over privacy and compliance with the EU’s General Data Protection Regulation (GDPR).
What prompted the order?
The BfDI’s decision stems from privacy concerns surrounding Worldcoin’s data collection practices. The project, launched by OpenAI’s Sam Altman, relies on iris scans to verify user identities and prevent fraud. Critics argue this method raises ethical and legal questions about biometric data usage.
In a statement, BfDI President Ulrich Kelber said, “The collection and storage of sensitive biometric data must comply with strict GDPR standards. Any deviation is unacceptable.” The regulator emphasized that biometric data is highly sensitive and must be handled carefully.
Impact on crypto projects in Germany
This development could reshape the landscape for blockchain projects in Germany. Worldcoin aimed to attract users by linking cryptocurrency rewards with biometric verification. However, this order challenges the feasibility of using sensitive data as a core component of crypto systems.
For crypto startups, compliance with GDPR is now a critical hurdle. Legal experts suggest that Worldcoin’s situation could serve as a precedent for other projects leveraging personal data. “This is a wake-up call for blockchain ventures operating in Europe,” noted Alexander Schmidt, a data privacy lawyer.
Industry reactions and wider Implications
The decision has sparked debate within the crypto community. Privacy advocates hailed the move, citing the risks associated with centralized biometric databases. Blockchain entrepreneur Markus Weber commented, “Worldcoin’s practices were a ticking time bomb for data misuse. This decision reinforces the need for privacy-first solutions.”
On the flip side, Worldcoin argues that its system is secure and compliant with regulations. The company released a statement saying, “Our technology ensures data privacy and encryption. We are committed to engaging with regulators to address their concerns.”
What this means for the future
The order pressures blockchain projects to align with stringent European data privacy laws. Failure to do so could result in similar enforcement actions, limiting the adoption of innovative technologies.
While Germany has traditionally been a crypto-friendly jurisdiction, this decision underscores the country’s commitment to privacy. Navigating these regulatory waters will require balancing innovation with compliance for global projects like Worldcoin.
The BfDI’s directive to Worldcoin marks a turning point for crypto projects handling sensitive user data. As the industry evolves, privacy and regulatory adherence will become central to sustaining trust and adoption. Crypto startups must now prioritize robust data governance frameworks to thrive in markets like Germany.
