HK privacy watchdog opens probe into Worldcoin amidst iris-scanning fears

Hong Kong's privacy watchdog has opened probe into Worldcoin (世界幣), founded by OpenAI CEO Sam Altman, over potential violations of privacy laws related to the collection and processing of sensitive personal data.

On 31 January, the Office of the Privacy Commissioner for Personal Data (PCPD) issued court warrants and entered six premises of the Worldcoin project in Yau Ma Tei, Kwun Tong, Wan Chai, Cyberport, Central and Causeway Bay, to conduct on-site investigation. The representatives of the centres have been requested to complete the required documents and information.

The investigation comes after participants of the Worldcoin project reported they needed to provide their iris information through iris scanning (虹膜掃描) to obtain a registered identity (also known as World ID), after which the participants would receive free cryptocurrency Worldcoin tokens.

The PCPD is concerned that the operation of Worldcoin in Hong Kong involves serious risks to personal data privacy, and believes that the collection and processing of sensitive personal data by the relevant organisation may be in contravention of the requirements of the Personal Data (Privacy) Ordinance (PDPO).

The PCPD has warned that iris information is a kind of biometric data that is unique and cannot be altered, and can be regarded as sensitive personal data. 

Ada Chung, privacy commissioner for personal data, said: “Any person or organisation as a data user in Hong Kong that controls the collection, holding, processing or use of personal data must comply with the requirements under the PDPO and the relevant data protection principles.”

“Members of the public should carefully protect their sensitive personal data and avoid participating in any activities that collect sensitive personal data, such as iris scanning, arbitrarily,” Chung added.

The PCPD has also suggested citizens consider the legality and purposes of organisations collecting relevant personal information, as well as safety measures adopted.

“Worldcoin was established to help create access and participation in the global digital economy while preserving privacy. Worldcoin does not seek to know who a person is, just that they are human and unique. As such, any information used to verify unique humanness is promptly deleted by default," said the Worldcoin Foundation in a statement to MARKETING-INTERACTIVE.

Worldcoin added that it welcomes regulators and consumers to inquire and seek information or clarifications about its programmes available to the people in their communities, cities, countries or regions.

According to Worldcoin’s official website, it is an open-source protocol, or system, created to help give everyone access to the global economy. It aims to become the world's largest digital identity and financial network, providing universal access to the global economy regardless of country or background. It strives to create a space where every individual can benefit in the age of AI.

Photo courtesy: Worldcoin’s official website

Related articles:

HK privacy watchdog reveals 10 eateries' apps collect customers' data for marketing
HK privacy watchdog releases new guidelines on data breach handling
HK privacy watchdog to check credit reference agencies amid Softmedia's data breach crisis
HK privacy watchdog vows to monitor data privacy risks related to ChapGPT