On 9 July 2024, the National Data Protection Commission (CNPD) of Portugal issued a decision addressing the jurisdiction over the matter concerning Worldcoin's processing of personal and biometric data. CNPD recognised the Data Protection Authority of Bavaria for the Private Sector (BayLDA) as the lead supervisory authority for the investigation of Worldcoin's data processing compliance with the General Data Protection Regulation (GDPR) and declared itself a concerned supervisory authority. The decision clarified that CNPD would forward all relevant documents and information to BayLDA, which will be the authority that will issue the final ruling in the investigation into Worldcoin. The CNPD noted that it will monitor and remain attentive to all developments in this process. Previously, on 25 March 2024, CNPD ordered Worldcoin to suspend the collection of iris, eye, and facial biometric data for 90 days to enable the CNPD to assess the legality. Due to Worldcoin’s establishment in Bavaria, the CNPD does not have the jurisdiction to issue a final ruling in the investigation.
Original source