Worldcoin has officially deleted all biometric data collected from Kenyan citizens, complying with a High Court order that deemed the firm’s data collection practices unlawful under Kenya’s stringent data protection laws. This significant development was confirmed by the Office of the Data Protection Commissioner (ODPC), which announced that all iris scans and other biometric identifiers gathered during Worldcoin’s 2023 enrolment exercise have been permanently erased from the project’s systems.

Worldcoin, a crypto-backed digital identity project co-founded by OpenAI CEO Sam Altman, was designed to verify that users are genuine humans by scanning their irises using specialized 'orb' hardware. In exchange for providing their biometric data, participants received a unique digital ID and cryptocurrency tokens. The project commenced its operations in Kenya in 2023, deploying its signature spherical scanners to capture iris and facial scans, with users offered 25 free Worldcoin tokens as an incentive. This strategy attracted large crowds but also raised immediate concerns among privacy advocates and regulators.

The High Court ruling, issued on May 5, 2025, found that Tools for Humanity, the company behind Worldcoin, had violated the Data Protection Act of 2019. Specifically, the court determined that the company collected sensitive personal data without obtaining proper consent and failed to conduct a mandatory Data Protection Impact Assessment (DPIA). Consequently, the court mandated the data controller to destroy the collected data within seven days, under the direct supervision of the ODPC.

Kenya's regulatory response to Worldcoin was swift and decisive. In August 2023, the government officially suspended the project due to serious fears that the collected data could be misused or unlawfully transferred outside the country without adequate safeguards. Prior to this, directives from the ODPC instructing the company to cease data collection had been issued but were initially ignored until the formal government suspension. This regulatory pushback underscores the nation's commitment to data privacy and sovereignty.

This resolution in Kenya marks a crucial moment in the global discourse surrounding digital identity and privacy in the context of emerging technologies. Worldcoin was initially presented in Africa as a tool for financial inclusion and a method for verifying 'proof of personhood' within Web3 systems. However, critics vehemently argued that biometric data is inherently sensitive, and offering cryptocurrency tokens as a form of quid pro quo risked compromising the principle of voluntary consent. Kenya’s August 2023 suspension was a direct result of these concerns, with regulators highlighting the risks posed by the rapid expansion of iris scanning without clear legal frameworks to protect personal data security.

Globally, Worldcoin’s data collection approach has faced similar rigorous scrutiny, with regulatory bodies in regions such as Europe and Southeast Asia either examining or imposing restrictions on the project due to privacy and consent issues. The Kenyan ruling now stands as one of the most definitive legal rejections of Worldcoin’s data practices, emphasizing the critical and urgent need for robust digital identity governance frameworks across emerging technology markets worldwide.