German Watchdog Orders Sam Altman's World to Delete Biometric Data, Raising Privacy Concerns

World's Biometric ID Project Faces Regulatory Hurdles

Sam Altman's biometric identification project, World (formerly Worldcoin), is encountering significant regulatory challenges in Europe. The German data protection authority has ordered the company to delete user data, citing non-compliance with EU privacy regulations 1

1

.

German Watchdog's Decision

The Bavarian State Office for Data Protection Supervision (BayLDA) concluded a months-long investigation into World, stating that its identification procedure "entails a number of fundamental data protection risks" that do not comply with the EU's General Data Protection Regulation (GDPR) 1

1

. BayLDA president Michael Will emphasized the importance of enforcing European fundamental rights standards in this technologically complex case.

World's Technology and Data Handling

World's technology, developed by San Francisco-based Tools for Humanity, uses a device called an 'Orb' to scan irises and faces, creating a means of personal identification for online activities 1

1

. The company claims to have evolved its data handling practices, with chief privacy officer Damien Kieran stating that World no longer owns or stores personal data from iris codes 1

1

.

Appeal and Regulatory Clarity

World has appealed the German decision and is seeking judicial clarity on whether its processes, particularly its Privacy Enhancing Technologies (PETs), meet the EU's legal definition for data anonymization 1

1

. Kieran argues that without a clear definition of anonymization, the industry loses a powerful tool in protecting privacy in the AI age 1

1

.

Spanish Regulatory Action

In a parallel development, the Spanish data protection watchdog (AEPD) has also ordered World to delete all of its iris scanning data 2

2

. This decision follows Spain's earlier temporary ban on World's operations in the country 1

1

.

Global Expansion and Challenges

Despite these setbacks, World continues to operate in several countries, including Argentina, Chile, Germany, Japan, and the United States 1

1

. The company plans to expand to other European nations, including Ireland, the UK, France, and Italy, although regulatory hurdles remain a significant challenge 1

1

.

Shift in Focus and Rebranding

World recently rebranded from Worldcoin, signaling a move away from its initial cryptocurrency focus 2

2

. The company's new priority is verifying human identity in an era of rapidly developing AI, aiming to provide every human with a "World ID" to prove their human status 2

2

.

Privacy Concerns and Criticism

Critics argue that the biometric data collection through iris scans could be misused or compromised, despite World's claims of privacy preservation through cryptographic techniques 2

2

. The ongoing regulatory actions in Europe highlight the tension between innovative identity verification technologies and stringent data protection laws.