Spain's data regulator temporarily blocks Worldcoin from collecting iris scans

Tools for Humanity/World ID and the Orb

Spain's data protection agency (AEPD) ordered Tools for Humanity to stop collecting and processing personal data in Spain for up to three months and to delete the iris data already gathered. The agency acted under an emergency GDPR provision after complaints about insufficient user information, biometric scans of minors, and consent that could not be withdrawn.

• Order: precautionary measure blocking new iris data collection and deletion of existing scans in Spain for up to 3 months.
• Reasons: inadequate notice to users, processing of minors' biometric data without proper safeguards, non-revocable consent.
• Legal basis: emergency GDPR provision (Article 66) to protect personal data rights before full investigation concluded.
• Scope: applies only to Spain; other EU regulators later issued similar suspensions and restrictions.