Hong Kong’s privacy authority has mandated the immediate cessation of Worldcoin Foundation’s operations in the region, claiming breaches of local privacy laws. Privacy Commissioner for Personal Data (PCPD) discovered that Worldcoin, spearheaded by OpenAI chief executive Sam Altman, compromised the facial and iris recognition data of over 8,300 people.
In its detailed findings, the PCPD stated that the data collection methods employed by Worldcoin were both “unnecessary and excessive,” thereby contradicting the Personal Data (Privacy) Ordinance of Hong Kong.
The report also criticized the need for more transparency in Worldcoin’s processes. It highlighted that privacy notices and consent forms were not provided in Chinese, and participants needed to be more explained about these documents.
Further issues included the extended retention of personal data, up to ten years, which exceeded what was deemed reasonable. Additionally, Worldcoin failed to inform participants about their rights to access and correct their data, prompting the Privacy Commissioner, Ada Chung, to issue an enforcement notice.
The order requires Worldcoin to cease all biometric data collection in Hong Kong, a decision echoed by similar actions in other regions, including South Korea, Portugal, and Kenya, where Worldcoin has also faced scrutiny. As of now, Worldcoin has yet to respond publicly to the enforcement notice.
Also read: Worldcoin Advances Biometric Security with Open Source SMPC System