Spanish data protection regulator AEPD said it demanded Worldcoin immediately cease the collection of personal information and stop using data it has already gathered.

The AEPD said its action came after several complaints regarding insufficient information, the collection of data from minors or not allowing for the withdrawal of consent.

More than 4 million people in 120 countries have signed up to have their irises scanned by Worldcoin’s “orb” devices, according to its website. But the project has drawn criticism from privacy campaigners from Argentina to Germany over the collection, storage and use of personal data.