The Brazilian Data Protection Authority (ANPD) has ordered the suspension of payments in compensation for iris scanning conducted by Tools for Humanity (TFH), the company behind World ID. The decision stems from preventive measures implemented by the General Coordination of Supervision (CGF) after identifying potential violations of Brazil’s General Data Protection Law (LGPD). Issues include offering cryptocurrency as compensation, which compromises the free and informed consent of data subjects. The CGF also highlighted the severity of biometric data processing, emphasizing the impossibility of deleting collected data and the irreversible nature of consent revocation.
Criticism and Additional Measures
The iris collection initiative by TFH has sparked controversy, with over 400,000 Brazilians providing sensitive data in exchange for cryptocurrency tokens. The ANPD emphasized that companies processing personal data must designate a data protection officer, a measure now required of TFH. Further scrutiny revealed irregularities, such as employees accepting terms of use on behalf of participants. This enforcement action underscores the ANPD’s commitment to safeguarding citizens’ privacy and ensuring compliance with the nation’s data protection laws.