According to official sources, WorldCoin has stated that it operates legally in all locations where it provides services, and its design fully complies with all laws and regulations governing data collection and transmission, including the General Data Protection Regulation (GDPR) in Europe and Argentina's Personal Data Protection Law 25.326 (Ley de Protección de los Datos Personales). In the European Union, the project is also supervised by the Bavarian State Office for Data Protection Supervision (Bayerisches Landesamt für Datenschutz). WorldCoin also stated that its foundation is strongly committed to open sourcing and providing complete visibility and access to all key components of the project, but will never purchase or exchange iris biometric technology.