Worldcoin suspended in Spain after regulator orders halt to biometric data processing
Spain's Data Protection Agency (AEPD) issued a precautionary measure on 2024-03-06 preventing Worldcoin (Tools for Humanity) from processing personal data in Spain. The action followed complaints alleging insufficient information and concerns about the collection and processing of biometric iris scans. Subsequent reporting indicated Spanish authorities later ordered deletion of data collected in Spain.
Regulators halted Worldcoin after finding its biometric data processing lacked required legal and transparency safeguards.
Key facts
- What
- Spain's Data Protection Agency (AEPD) issued a precautionary measure on 2024-03-06 preventing Worldcoin (Tools for Humanity) from processing personal data in Spain.
- Incident date
- Mar 6, 2024
- Who
- Worldcoin (Tools for Humanity)
- Failure mode
- Policy Violation
- AI surface
- Computer Vision
- Severity
- High
What happened
On 2024-03-06 the AEPD issued a precautionary measure preventing Worldcoin from continuing to process personal data in Spain. The regulator's order followed complaints alleging the company did not provide sufficient information to users and raised privacy concerns about collecting and processing biometric iris scans. International and Spanish press covered the suspension and related court actions. Local reporting later stated authorities ordered deletion of data collected in Spain in December 2024.
What broke inside the model
- 01 · TriggerA prompt pushes against a deployment boundary.
- 02 · Model stepThe model produces the disallowed output.
- 03 · Control gapNo enforcement blocks it at generation time.
- 04 · FailureThe output crosses the policy line.
- 05 · ConsequenceA limit the business set is breached in public.
The output crosses a policy boundary the deployment had defined.
The root failure was governance and legal compliance for processing sensitive biometric identifiers: regulators found insufficient transparency and an unclear lawful basis for collecting and processing iris scans. This represents a breakdown in data-protection controls, consent processes, and operational safeguards rather than a failure of an ML model. Those compliance gaps triggered precautionary regulatory measures and later deletion orders.
What it cost
Sources
- PrimaryThe Agency orders a precautionary measure which prevents Worldcoin from continuing to process personal data in Spainaepd.es
- PressSam Altman's eye-scanning Worldcoin banned in Spainreuters.com
- PressSpain puts temporary ban on Worldcoin eyeballs scans, citing concerns over privacyenglish.elpais.com
- PressIris-scanning crypto project Worldcoin ordered to delete all collected datacatalannews.com
Cite this entry
https://failureindex.ai/failures/worldcoin-suspended-spain-regulator-orders-haltAI Failure Index. "Worldcoin suspended in Spain after regulator orders halt to biometric data processing" (FI-0456). Realm Labs. https://failureindex.ai/failures/worldcoin-suspended-spain-regulator-orders-halt (indexed Jun 10, 2026).Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0456. Full dataset at /data.
Note from Realm Labs, the Index steward
How Realm fits
- Prism
- OmniGuard
This entry sits in the index's predictive wing: a system that scores, ranks, perceives, or steers rather than generates. Realm's runtime layer is built for the generative and agentic systems now moving into these same decision seats, where it watches a model's internal state and holds an unsupported claim or an unchecked action before it commits. The control gap on this record, an automated decision that reached people with no runtime check in front of it, is the same gap. The index keeps predictive failures on the record because the pattern carries straight into the systems shipping today.