The Bavarian Data Protection Supervisory Authority (BayLDA) issued multiple modification requests on 12/19 regarding the biometric data processing technology of the digital identity project Worldcoin, and required Worldcoin to activate a data deletion procedure compliant with the EU General Data Protection Regulation (GDPR) within one month after the ruling takes effect, to ensure that data processing is legal and compliant. In response to this request, the World Foundation expressed dissatisfaction and appealed, hoping that the regulatory agency could clarify whether its data processing technology meets the GDPR's definition of data anonymization.
World's Data Challenges and Compliance Issues
Worldcoin is a digital identity project co-founded by OpenAI CEO Sam Altman, aiming to use biometric iris scanning technology for identity verification, officially launched in July 2023. However, due to controversial data collection methods, BayLDA has been involved in investigations since 2023.
After BayLDA began its investigation in 2023, World voluntarily suspended its business in certain EU countries. BayLDA Chairman Michael Will stated that this decision was made to ensure that users can request the deletion of personal data at any time, safeguarding users' data rights.
Regulatory documents from German regulators regarding Worldcoin. Specific modification requests from BayLDA.
In addition to needing to establish a data deletion procedure compliant with the General Data Protection Regulation (GDPR), BayLDA also made the following specific requests to World:
Delete unlawfully collected data: Requesting World to delete data collected during summer activities in 2023, as these data lack sufficient legal basis.
User Explicit Consent: Any future data processing actions must be conducted with user consent.
Minor Protection Measures: Some users have complained about issues related to the protection of minor users, and BayLDA will conduct further investigation.
World Seeks to Clarify the Definition of Data 'Anonymization'
In response to BayLDA's requirements, the World Foundation stated in an official statement that this incident highlights the lack of consistent standards and definitions for data anonymization in the EU, which may limit the application of privacy protection technologies.
The World Foundation mentioned in an official statement:
The Importance of Anonymization: Data anonymization is a key technology for ensuring user privacy, rather than just simply deleting data.
Clear Legal Definitions: Currently, the GDPR lacks clear standards for anonymization, which may affect privacy protection capabilities, especially against the backdrop of rapid AI development.
World's Official Statement on Data Anonymization
The World Foundation has currently filed an appeal, hoping to confirm whether its technology meets the EU's definition of anonymization. At the same time, World also promises to continue cooperating with regulatory agencies in the EU and other regions to ensure a win-win situation for privacy protection and technological innovation.
This article discusses how German regulatory agencies require Worldcoin to delete non-compliant data, sparking a digital identity verification controversy under the EU GDPR, originally published in Chain News ABMedia.
