The São Paulo Public Ministry has initiated a significant civil lawsuit against Tools for Humanity, the entity behind the Worldcoin project, and its cloud provider, Amazon Web Services (AWS). The legal action seeks a minimum of R$ 240 million in damages over allegations of abusive data collection practices involving iris scanning. This case places the controversial biometric identity project, co-founded by OpenAI's Sam Altman, under intense legal scrutiny in Brazil for its methods.
The Worldcoin Proposition and Its Technology
Worldcoin's mission is to establish a global system for verifying human identity in an era increasingly dominated by artificial intelligence. The project uses a custom hardware device called the Orb, a metallic sphere that scans an individual's iris to generate a unique digital identifier. This World ID acts as a "proof of personhood," allowing users to prove they are human, not a bot, without revealing other personal information.
Tools for Humanity asserts that its data handling is secure and privacy-preserving. The company claims the original iris image is not stored, but is instead converted into a unique, fragmented cryptographic code. According to its privacy director, this code can confirm a person's uniqueness but cannot be used to reconstruct the original biometric data, ensuring user privacy is maintained throughout the verification process.
Legal Challenges and Regulatory Scrutiny in Brazil
The project saw rapid adoption upon its expansion in Brazil, attracting over 120,000 participants within a month by offering cryptocurrency rewards. Users received WLD tokens, valued between R$ 300 and R$ 700, in exchange for their iris scans. This incentive-based model quickly drew the attention and concern of national regulators who questioned the nature of the consent being obtained from participants.
In January, Brazil's National Data Protection Authority (ANPD) intervened, prohibiting the company from offering financial compensation for data collection. The authority argued that such incentives compromised the free and informed consent required by the country's General Data Protection Law. After an unsuccessful appeal, Tools for Humanity was forced to suspend its data collection activities in Brazil the following month.
Allegations of Exploitation and AWS's Involvement
The lawsuit filed by the Public Ministry alleges that Worldcoin's operations deliberately targeted socioeconomically vulnerable populations. Collection points were reportedly concentrated in peripheral neighborhoods and high-traffic locations like metro stations and public service centers. Prosecutors argue this strategy constitutes an exploitative practice, leveraging financial need to acquire sensitive biometric data from individuals who may not fully understand the implications.
Amazon Web Services was included as a defendant due to its role as the cloud infrastructure provider for the project. The lawsuit contends that Brazilian participants were not clearly informed about the international transfer and storage of their sensitive data on AWS servers located abroad. This lack of transparency forms a key part of the argument that the consent obtained from users was fundamentally flawed and invalid.
Global Ambitions and International Backlash
Brazil is not the only country where Worldcoin has faced regulatory hurdles and public skepticism. Authorities in several other nations, including Spain, Portugal, France, and South Korea, have also launched investigations or imposed restrictions on the project. This widespread international scrutiny highlights growing global concerns over the large-scale collection and management of sensitive biometric information by private technology companies.
Despite these challenges, the company's ambitions remain vast, with CEO Alex Blania stating a goal to become a "super app" for the AI era. The vision is for the World App to manage a user's identity, finances, and social interactions in a single, unified platform. Strategic partnerships with major companies like Match Group, Razer, and Visa underscore the project's intent to deeply integrate its digital identity system into everyday online life.
The lawsuit in São Paulo represents a critical test for Worldcoin and the broader field of biometric identification. The court's decision will have significant implications for data privacy regulations, corporate accountability, and the ethical boundaries of technological innovation. As the world grapples with the rise of AI, this case highlights the urgent need to balance the promise of new technologies with the fundamental right to privacy and protection from exploitation.
Source: exame.com