Worldcoin operation in trouble: HK to stop biometric scanning
Survey finds biometric data collection unnecessary and non-compliant。The privacy statement lacks a Chinese translation, resulting in non-English speakers being unaware.
The Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong has completed its investigation into the Worldcoin project and found that the operation of the project in Hong Kong has contravened the Personal Data Privacy Ordinance (PDPO).
The Privacy Commissioner, Ms. Lillian Chung, issued an enforcement notice to Worldcoin to immediately cease all activities involving the use of iris scanning devices to scan and collect iris and facial images.
Survey of Data Privacy Practices
The PCPD initiated an investigation in January 2024 to assess whether Worldcoin's authentication methods posed a significant risk to personal data privacy and complied with the requirements of the PDPO. The investigation involved 10 confidential visits between December 2023 and January 2024 to six Worldcoin operating locations.
The investigation found that the collection of facial images was not necessary to verify the humanity of participants. Iris scanning device operators can perform this verification in person at the operating site, making the additional step of scanning or collecting facial images redundant.
The PCPD also criticized Worldcoin for failing to provide enough information for participants to make informed decisions and give genuine consent. Notably, the program's privacy statement was not available in Chinese, making the program's policies, practices, and terms and conditions incomprehensible to non-English speakers.
In addition, the PCPD found that Worldcoin's practice of retaining sensitive biometric data for up to 10 years for the sole purpose of AI model training was unreasonable. The program scanned the faces and irises of 8,302 people during its implementation in Hong Kong. The PCPD found that the collection of face and iris images was unfair and unlawful and violated the data protection principles of the Personal Data Protection Ordinance.
Increased Global Scrutiny
Launched in 2021, WorldCoin has over 2 million global users and is facing regulatory pressure over privacy concerns. Services were suspended in Kenya and iris scanning was suspended in India.
Earlier, in Portugal, the CNPD ordered a 90-day halt to biometric data collection, citing data protection concerns. Meanwhile, Spain's AEPD took action against Tools for Humanity Corporation within the framework of its WorldCoin program for inadequate disclosure and data collection on minors.
Disclaimer: The views in this article are from the original author and do not represent the views or position of Hawk Insight. The content of the article is for reference, communication and learning only, and does not constitute investment advice. If it involves copyright issues, please contact us for deletion.
