Hong Kong’s Office of the Privacy Commissioner for Personal Data (PCPD) has completed its investigation into the Worldcoin project and determined that the project’s practices of collecting biometric data have violated the Personal Data (Privacy) Ordinance (PDPO). Privacy Commissioner Ada Chung Lai-ling has issued a notice on May 22, ordering an immediate cessation of all Worldcoin operations in Hong Kong that involve the collection of iris and facial images.
The PCPD initiated the investigation in January 2024 to evaluate whether Worldcoin’s methods of identity verification posed significant risks to personal data privacy and compliance with the PDPO. Throughout the probe, the PCPD conducted 10 undercover visits to six Worldcoin operation sites between December 2023 and January 2024.
The investigation revealed that the collection of facial images was unnecessary for verifying the authenticity of participants, as this verification could be done in person by the operators at the locations. The PCPD criticized Worldcoin for its failure to provide sufficient information, which prevented participants from making informed decisions and giving genuine consent.
A major issue identified was that Worldcoin’s privacy notice was not available in Chinese, making it difficult for non-English speakers to understand the project’s policies, practices, terms, and conditions. Additionally, the operators at the scanning sites did not adequately explain the documents to participants or ensure their comprehension. They also failed to inform participants about the potential risks associated with sharing their biometric data.
Considering these circumstances, the PCPD concluded that the collection of facial and iris images was both unfair and unlawful, thereby violating Hong Kong’s data protection principles. Furthermore, the retention of this sensitive biometric data for up to ten years for AI model training purposes was deemed unjustifiable.
Worldcoin disclosed that during its operations in Hong Kong, 8,302 individuals had their facial and iris images scanned for verification. The project, which was launched in 2021, amassed over two million sign-ups before its official launch in July 2023. However, Worldcoin has faced regulatory scrutiny worldwide due to privacy concerns, resulting in the suspension of its services in Kenya and the cessation of iris scans in India.
Tags: Worldcoin (WLD)