Hong Kong‘s Office of the Privacy Commissioner for Personal Data (PCPD) has intervened in the operations of cryptocurrency project Worldcoin, issuing an enforcement notice to cease all activities involving the scanning and collection of iris and facial images of the public. Following an extensive investigation, Privacy Commissioner Ada Chung Lai-ling concluded that Worldcoin’s practices violated the region’s Personal Data (Privacy) Ordinance (PDPO) and raised serious concerns regarding data protection principles.
The PCPD’s inquiry, initiated in January 2024, scrutinized Worldcoin’s identity verification methods, particularly the use of iris scanning devices to collect biometric data from participants. Covert visits conducted at operational premises revealed lapses in informed consent procedures and inadequate disclosure of risks associated with data disclosure. Moreover, the absence of privacy notices in Chinese deprived non-English speaking participants of essential information, further exacerbating privacy concerns and contravening regulatory requirements.
The enforcement notice underscores the PCPD’s commitment to safeguarding personal data privacy and upholding data protection standards in Hong Kong. By ordering the cessation of Worldcoin’s operations, the regulatory authority aims to mitigate risks associated with the unauthorized collection and retention of sensitive biometric data. Worldcoin’s response to the regulatory intervention and its implications for the broader cryptocurrency industry remain subjects of keen interest amid growing regulatory scrutiny worldwide.
