Worldcoin faces regulatory scrutiny as the Portugal data regulator CNPD has instructed a 90-day pause on personal data collection.