Worldcoin charged in Colombia for iris scanning without adequate data protection
Colombian authorities filed charges against Worldcoin for collecting iris biometric data from homeless and economically disadvantaged people without adequate data protection safeguards. The company paid roughly 10 US dollars in cryptocurrency per iris scan through its Orb system at locations in multiple Colombian cities.
What happened
Colombian authorities filed charges against Worldcoin for violating data protection regulations by collecting iris biometric data from vulnerable populations. The company paid approximately 9.8 to 10 US dollars (40,000 Colombian pesos) in cryptocurrency to homeless people, foreigners, and economically disadvantaged individuals in exchange for iris scans using its Orb biometric system.
The Superintendencia de Industria y Comercio de Colombia (SIC) initiated an investigation to determine whether Worldcoin violated Colombia's sensitive personal data protection regime. The company began operating in Colombia on May 30, 2024, with scanning locations in Bucaramanga, Bogotรก, Medellรญn, and Cรบcuta.
Reported impact
If charges are proven, Worldcoin faces economic penalties, a six-month suspension of activities, and potential temporary closure of its local operations if adequate data protection measures are not implemented following the suspension period.
The practice reportedly targeted some of the most vulnerable populations, including homeless individuals and those with limited financial resources, raising concerns about informed consent and exploitation.
Index analysis
The Orb system collects sensitive biometric iris data in high resolution and uses it to verify identity and determine legal age. The company's stated goal is to create a global unique digital identity for worldwide use.
Worldcoin has faced similar accusations in multiple countries including Spain, Chile, Portugal, France, Kenya, and Argentina. The Spanish Data Protection Agency (AEPD) previously issued a precautionary measure requiring the company to cease data collection and processing.
Governance controls
The SIC investigation focuses on whether Worldcoin met Colombia's requirements for collecting and processing sensitive personal data. The regulatory framework provides for significant penalties including fines, operational suspension, and facility closure if violations are confirmed.
Classification
Sources and evidence
This record was researched and written by the Index, based on the following original reporting.