Colombia has ordered the immediate and permanent cessation of Worldcoin’s operations in the country, citing widespread violations of personal data protection laws, particularly concerning the collection of biometric information.
The Superintendency of Industry and Commerce (SIC) published its definitive resolution this week, finding that World Foundation and Tools for Humanity Corporation collected iris scans without valid informed consent from Colombian citizens. The measure stems from Resolution 78798, issued on October 3.
As part of the ruling, the SIC has mandated the complete deletion of all biometric databases and associated data repositories obtained by the companies since their operations began in Colombia in early 2024. The companies are now prohibited from processing any personal data within the country.
The SIC concluded that World Foundation and Tools for Humanity failed to adhere to principles of legality, purpose, and confidentiality as established by Colombia’s data protection laws. It also identified deficiencies in the security measures and controls over the international circulation of the collected information.
Worldcoin began its activities by offering economic incentives, sometimes up to around $25 USD, to individuals who agreed to have their iris scanned by specialized “Orb” devices. The stated purpose was to feed artificial intelligence systems.
The SIC emphasized that iris patterns are highly sensitive biometric data, requiring stringent safeguards. Its action aims to protect the constitutional right of “habeas data,” which grants citizens control over their personal information.
World Foundation issued a statement expressing disagreement with the SIC’s decision, calling it a “preliminary resolution of first instance.” The organization announced plans to file legal appeals for a “comprehensive review” of the ruling.
“World does not store biometric data, consent is informed and confirmed on multiple occasions,” the company stated. It added that the Worldcoin token is “optional and completely separate from the verification process.”
The organization asserted that its technology aims to “protect Colombians from fraud and identity theft driven by artificial intelligence.” It expressed hope for an “open dialogue with the SIC to clarify the functioning of this important innovation.”
The case originated in August 2024 when the SIC initiated formal charges. This followed a noticeable increase in locations offering cryptocurrency payments in exchange for iris scans, raising privacy concerns.
Colombia’s move follows similar alerts and investigations concerning Worldcoin’s practices in other countries, including Spain and Argentina. Former Minister of Information Technology, Mauricio Lizcano, had previously urged the SIC to accelerate its investigations into the company.
Colombian law stipulates that any foreign business model processing data of Colombian citizens must comply with local regulations, regardless of its origin or the technology employed. Penalties for violations can include significant fines or the definitive cessation of operations.