Brazil’s Parliamentary Commission of Inquiry into Iris Scanning (CPI da Íris) has extended its investigation into Worldcoin’s activities in São Paulo by 120 days, increasing oversight of how the company collects and manages biometric information. The move reflects a growing regulatory focus on large-scale iris scanning initiatives and the safeguards required to protect sensitive data.
Scope of the inquiry in São Paulo
The commission says the extension will allow a deeper review of Worldcoin’s methods for collecting, storing, and handling biometric identifiers, including the clarity of consent procedures presented to participants and the controls that prevent unauthorized access or misuse. Lawmakers are seeking documentation and testimony to evaluate security controls, data retention practices, and the legal basis for processing highly sensitive personal data. The inquiry centers on Worldcoin’s approach to transparency and user rights, and whether individuals understand how their data will be used once captured.
Worldcoin’s model relies on an Orb device that scans a person’s iris to create a unique identifier tied to a digital identity profile. The company, co-founded by Sam Altman, says this approach can help distinguish humans from automated accounts online. Participation terms vary by jurisdiction, and in some markets participants may receive WLD tokens, subject to local rules and availability.
Global context and regulatory actions
The extended review in São Paulo follows international scrutiny of Worldcoin’s data practices. In Germany, regulators ordered the deletion of biometric data collected in violation of the General Data Protection Regulation, underscoring the legal risks around consent, purpose limitation, and storage of immutable biometric templates. Elsewhere, oversight bodies continue to examine whether program materials clearly explain how data is processed, how long it is kept, and what remedies are available to individuals.
Despite regulatory hurdles, Worldcoin reports steady growth and says it has surpassed 10 million verified users. The São Paulo inquiry aims to clarify how the project operates within Brazil’s legal framework, including requirements for explicit consent and the application of Brazil’s data protection law to high-risk processing. The outcome could influence how biometric identity programs approach transparency, auditing, and privacy controls in similar markets.
Officials in Brazil have indicated that next steps will include gathering additional evidence and assessing compliance obligations specific to sensitive biometric data. The commission’s findings are expected to address whether Worldcoin’s design and governance give participants meaningful control over their information and whether appropriate technical and organizational measures are in place to reduce risk.
Sources: LiveBitcoinNews
–
By the ID Tech Editorial Team
