Worldcoin Must Erase Biometric Data It Unlawfully Gathered From Kenyans, Court Rules

A Kenyan court has ordered Worldcoin to delete the biometric data it unlawfully collected from thousands of citizens, local media outlet Citizen Digital reported.

The ruling follows mounting concerns over data protection and privacy violations in the firm's short-lived but controversial operations in the country.

Deletion of Sensitive Biometric Data

The decision targets the company's use of orbs to scan individuals' irises in exchange for cryptocurrency payments, a process that regulators said lacked valid consent and an approved Data Protection Impact Assessment (DPIA), both required by Kenyan law.

The Office of the Data Protection Commissioner (ODPC) will reportedly supervise the deletion process. The regulator had raised the alarm over the company's handling of personal data, warning that continued processing could lead to unauthorized use, erasure, or modification of Kenyan citizens' biometric profiles.

Deputy Data Commissioner Oscar Otieno filed an affidavit in court asserting that Worldcoin's activities posed a risk to public safety. After reviewing the company's methods, he concluded the project was not safe for Kenyans and lacked proper transparency.

No Processing Without Assessment and Consent

The court ruling also barred Worldcoin from handling any further data unless it conducts a complete DPIA and secures informed, valid consent from users.

Regulators argued that these were not optional steps but core requirements under the Data Protection Act.

Although Worldcoin announced its return to Kenya in 2024, this ruling complicates its plans. The crypto project, co-founded by tech entrepreneur Sam Altman, had aimed to resume enrollment and expand digital identity tools linked to blockchain technology and socioeconomic benefits.

However, it must now meet strict legal conditions before restarting any operations in the country.