Cryptocurrency project Worldcoin has been found to violate Hong Kong’s privacy law by the city’s data watchdog. Requiring users to provide face and iris scans to verify their “humanness” amounted to “unnecessary and excessive” collection of personal data, the privacy body said. 

Member of the Office of the Privacy Commissioner for Personal Data (PCPD) entered six premises involved in the operation of the Worldcoin project with court warrants on January 31, 2024 to carry out investigations. Photo: PCPD.
Member of the Office of the Privacy Commissioner for Personal Data (PCPD) entered six premises involved in the operation of the Worldcoin project with court warrants on January 31, 2024 to carry out investigations. Photo: PCPD.

The Office of the Privacy Commissioner for Personal Data (PCPD) on Wednesday ordered Worldcoin to cease all operations of its biometric crypto project in Hong Kong which involved scanning and collecting people’s iris and face images. 

Covert visits

The PCPD’s enforcement notice came after the watchdog conducted 10 covert visits at six premises linked to the operation of the crypto organisation founded by Open AI CEO Sam Altman, Alex Blania and Max Novenstern. 

Following the visits between last December and January, the watchdog entered the premises in Yau Ma Tei, Kwun Tong,  Wan Chai, Cyberport, Central and Causeway Bay with court warrants for investigation in late January. Two rounds of inquiries were conducted afterwards. 

According to the PCPD’s findings, participants of the Worldcoin project were required to grant permission to the group to use iris scanning to confirm their “humanness” and generate iris codes before they could obtain a “digital passport” known as a World ID. 

This photo taken on May 22, 2024 shows Worldcoin's office in Jordan. Photo: Kyle Lam/HKFP.
This photo taken on May 22, 2024 shows Worldcoin’s office in Jordan. Photo: Kyle Lam/HKFP.

The users could then receive Worldcoin tokens, also known as WLD, which the company said could be used to pay for “certain actions in the Worldcoin Ecosystem” in the future. The cryptocurrency may also be used as a store of value or make payments, according to Worldcoin’s website. 

Worldcoin confirmed that 8,302 individuals had their faces and irises scanned for verification during the group’s operation in Hong Kong. 

‘Unnecessary’

The crypto group’s operation breached the provisions on data collection, retention, transparency, access and correction rights stated in the Personal Data (Privacy) Ordinance, Privacy Commissioner Ada Chung said on Thursday. There were “less privacy-intrusive means” for the group to verify the identity of participants, the watchdog said. 

“The PCPD considered that the face and iris images collected by the Worldcoin project were unnecessary and excessive,” an English statement from the PCPD read.

Privacy Commissioner Ada Chung meets the press on December 21, 2022. Photo: Office of the Privacy Commissioner for Personal Data.
Privacy Commissioner Ada Chung. File photo: Office of the Privacy Commissioner for Personal Data.

The watchdog accused Worldcoin of collecting personal data “unfairly,” saying the privacy notice and bio-metric data consent form were not available in Chinese. Worldcoin’s staff operating the iris scanning device also did not give any explanation or confirm participants’ understanding of the documents, it said. Such practices showed that there was a lack of transparency, the PCPD found.

“Worldcoin failed to provide adequate information to participants to enable them to make an informed choice or give a real consent,” the statement read. 

PCPD added that Worldcoin would keep personal data for up to 10 years for training artificial intelligence models on how to verify users.

“The PCPD considered that the retention period was too long and amounted to prolonged retention of personal data,” the watchdog said.  

This photo taken on May 22, 2024 shows Worldcoin's office in Jordan. Photo: Kyle Lam/HKFP.
This photo taken on May 22, 2024 shows Worldcoin’s office in Jordan. Photo: Kyle Lam/HKFP.

Chung called on the public to report to the PCPD immediately if they saw any iris scanning services operated by Worldcoin. 

Worldcoin Foundation told HKFP on Thursday that it was “disappointed” with the findings of the PCPD. Worldcoin was designed to be compliant with all laws and regulations on data collection, including Hong Kong’s privacy law, it said.

“In an effort to prepare humanity for the age of AI, the Foundation continues to raise the privacy bar through data minimization, user control over data and advanced technology… unfortunately, the authorities in Hong Kong overlooked these aspects in their evaluation of the humanness verification process,” an English statement from the company read.

By Wednesday afternoon all banners and logos of Worldcoin had been removed from its office in Jordan, according to an HKFP reporter on the ground. 

Support HKFP  |  Policies & Ethics  |  Error/typo?  |  Contact Us  |  Newsletter  | Transparency & Annual Report | Apps

Help safeguard press freedom & keep HKFP free for all readers by supporting our team

TRUST PROJECT HKFP
SOPA HKFP
IPI HKFP
contribute to hkfp methods

Original reporting on HKFP is backed by our monthly contributors.

Almost 1,000 monthly donors make HKFP possible. Each contributes an average of HK$200/month to support our award-winning original reporting, keeping the city’s only independent English-language outlet free-to-access for all. Three reasons to join us:

  1. 🔎 Transparent & efficient: As a non-profit, we are externally audited each year, publishing our income/outgoings annually, as the city’s most transparent news outlet.
  2. 🔒 Accurate & accountable: Our reporting is governed by a comprehensive Ethics Code. We are 100% independent, and not answerable to any tycoon, mainland owners or shareholders. Check out our latest Annual Report, and help support press freedom.
  3. 💰 It’s fast, secure & easy: We accept most payment methods – cancel anytime, and receive a free tote bag and pen if you contribute HK$150/month or more.
YouTube video

Support press freedom & help us surpass 1,000 monthly Patrons: 100% independent, governed by an ethics code & not-for-profit.

Ho Long Sze Kelly is a Hong Kong-based journalist covering politics, criminal justice, human rights, social welfare and education. As a Senior Reporter at Hong Kong Free Press, she has covered the aftermath of the 2019 extradition bill protests and the Covid-19 pandemic extensively, as well as documented the transformation of her home city under the Beijing-imposed national security law.

Kelly has a bachelor's degree in Journalism from the University of Hong Kong, with a second major in Politics and Public Administration. Prior to joining HKFP in 2020, she was on the frontlines covering the 2019 citywide unrest for South China Morning Post’s Young Post. She also covered sports and youth-related issues.