- Germany’s Federal Data Protection Commissioner (BfDI) has ordered Worldcoin to delete its stored iris scans, citing GDPR violations.
- The regulator highlighted concerns about the processing of biometric data without user consent and without a clear legal basis.
The German Federal Data Protection Authority (BfDI) has ordered Worldcoin (WLD), a biometric cryptocurrency project, to delete all user iris scans. The move comes amid growing concerns over privacy and compliance with the EU’s General Data Protection Regulation (GDPR).
What motivated the order?
The BfDI’s decision stems from privacy concerns surrounding Worldcoin’s data collection practices. The project, launched by OpenAI’s Sam Altman, relies on iris scans to verify user identities and prevent fraud. Critics say this method raises ethical and legal questions about the use of biometric data.
In a statement, BfDI President Ulrich Kelber said: “The collection and storage of sensitive biometric data must comply with strict GDPR standards. Any deviation is unacceptable. The regulator stressed that biometric data is very sensitive and must be treated with care.
Impact on crypto projects in Germany
This development could reshape the landscape of blockchain projects in Germany. Worldcoin aimed to attract users by combining cryptocurrency rewards with biometric verification. However, this order calls into question the feasibility of using sensitive data as an essential component of cryptographic systems.
For crypto startups, GDPR compliance is now a major hurdle. Legal experts suggest that Worldcoin’s situation could serve as a precedent for other projects exploiting personal data. “This is a wake-up call for blockchain companies operating in Europe,” noted data protection lawyer Alexander Schmidt.
Industry reactions and wider implications
The decision sparked debate within the crypto community. Privacy advocates welcomed the move, citing risks associated with centralized biometric databases. Blockchain entrepreneur Markus Weber commented: “Worldcoin’s practices were a ticking time bomb for data misuse. This move reinforces the need for privacy-focused solutions.
On the other hand, Worldcoin claims that its system is secure and regulatory compliant. The company released a statement saying: “Our technology guarantees data confidentiality and encryption. We are committed to working with regulators to address their concerns.
What this means for the future
The order requires blockchain projects to align with strict European data privacy laws. Failure to do so could result in similar coercive measures, limiting the adoption of innovative technologies.
Although Germany has traditionally been a crypto-friendly jurisdiction, this move highlights the country’s commitment to privacy. Navigating these regulatory waters will require a balance between innovation and compliance for global projects like Worldcoin.
The BfDI directive to Worldcoin marks a turning point for crypto projects dealing with sensitive user data. As the industry evolves, privacy and regulatory compliance will become essential to maintaining trust and adoption. Crypto startups must now prioritize robust data governance frameworks to thrive in markets like Germany.