Kenya’s Office of the Data Protection Commissioner (ODPC) has confirmed that all biometric data collected from Kenyan citizens by Worldcoin has been permanently deleted, bringing an end to a long-running legal and regulatory dispute over the handling of sensitive personal information.
In a statement issued this week, the data protection authority said the deletion was carried out by Tools for Humanity, the company behind Worldcoin, in compliance with a High Court order. The court had ruled that Worldcoin’s collection of biometric data violated Kenya’s Data Protection Act after it emerged that the project failed to conduct a mandatory data protection impact assessment and did not obtain valid consent from participants.
Worldcoin launched its operations in Kenya in 2023, offering cryptocurrency tokens in exchange for iris and facial scans collected using specialised devices known as “orbs.” The initiative quickly gained attention, with thousands of people lining up at registration centres across Nairobi. However, concerns soon followed, with civil society groups and privacy advocates questioning how the sensitive data was being collected, stored, and processed.
The legal challenge culminated in a court ruling that ordered the immediate suspension of Worldcoin’s activities in Kenya and directed that all biometric data already collected be erased under the supervision of the Data Protection Commissioner. The ODPC was tasked with overseeing the process to ensure full compliance with the law.
According to the regulator, the deletion has now been completed in line with the court’s instructions. While the ODPC did not disclose the volume of data involved, it confirmed that strict procedures were followed to ensure the information was removed from all systems controlled by the company.
Privacy advocacy groups have welcomed the confirmation, describing it as a significant step in enforcing data protection laws and safeguarding citizens’ rights. They say the case sets an important precedent for how emerging technology and crypto-related projects must operate within existing legal frameworks, particularly when handling highly sensitive personal data.
Worldcoin has not resumed operations in Kenya since authorities suspended its activities in August 2023. Any future attempt to return would require the company to fully comply with local data protection laws, including proper registration, transparent consent mechanisms, and regulatory approval.
The case underscores the growing scrutiny facing global technology and crypto projects as governments tighten oversight around data privacy, especially in regions where biometric information is protected by law.
Read also: Gates Foundation and OpenAI Partner to Expand AI Use in African Healthcare
