PCPD: Any personal information under Worldcoin’s control, including that derived from iris images, “must be collected for a lawful purpose.”
The Office of the Privacy Commissioner for Personal Data (PCPD) of Hong Kong has declared an inquiry into the local operations of the identity verification project Worldcoin, citing “serious risks to personal data privacy.”
Six Worldcoin-controlled premises in Hong Kong were entered, and warrants were executed, the PCPD stated in a notice dated January 31 as part of an investigation into the project.
The commission issued a request for documents and information while also cautioning Hong Kong residents about the potential uses of their biometric data. For instance, Worldcoin verifies users’ identities using iris-scanning devices. The PCPD also stated that:
“The PCPD is concerned that the operation of Worldcoin in Hong Kong involves serious risks to personal data privacy, and believes that the collection and processing of sensitive personal data by the relevant organisation may be in contravention of the requirements of the Personal Data (Privacy) Ordinance,”
Personal information under the jurisdiction of Worldcoin “must be collected for a lawful purpose” that is directly related to the project’s function or activity, as mandated by the PCPD. According to regulatory guidelines, the information obtained from users’ iris was deemed “sensitive” by the commission.
Since its inception in 2021, Worldcoin has garnered over two million registrations in anticipation of its official debut in July 2023. Privacy concerns have prompted numerous regulatory bodies in various nations to scrutinize the project, resulting in the cessation of its operations in Kenya and a halt to retinal scans in India.
As of December 2023, more than five million individuals have created accounts using their identities, according to Worldcoin. Worldcoin was not responsive to a request for comment from reporters, as of the time this article was published.