The High Court of Kenya, on Monday, May 5, ordered Worldcoin to delete Kenyan biometric data within seven days. The court declared that the company unlawfully collected Kenyans’ biometric data in September 2023.
The court noted the firm did not undertake the Data Protection Impact Assessment contrary to section 31 of the Data Protection Act, 2019. Worldcoin claims the data is encrypted and safe, but it has encountered trouble over the use of personal data in other countries, including Hong Kong, Spain, Indonesia, and Portugal.
Court orders Worldcoin to delete Kenyan biometric data
Facial data collected from Kenyans by commercial cryptocurrency project Worldcoin, which uses iris biometrics through its Orb device, ordered to be deleted by the High Court for breaching data protection laws and infringing on privacy rights.
The court ruled that the data… pic.twitter.com/hcg7lyVA5Y
— Cyprian, Is Nyakundi (@C_NyaKundiH) May 5, 2025
The High Court of Kenya has issued an order of Mandamus compelling Worldcoin to delete the biometric data of Kenyans that it unlawfully collected using its orb in September 2023. Lady Justice Aburili Roselyne also ordered the activity to be under the supervision of the Office of the Data Protection Commissioner (ODPC).
The magistrate issued an order of prohibition restraining Worldcoin from further processing such data without conducting a thorough Data Protection Impact Assessment or obtaining valid consent. The judge also issued an order of Certiorari quashing the Worldcoin Foundation and its agents’ decision to collect or process biometric data in Kenya.
Katiba Institute also challenged the collection, processing, and transfer of biometric data using the Worldcoin App and the Orb against the Worldcoin Foundation.
“Today, Lady Justice Aburili Roselyne has allowed our Judicial Review Application, where we challenged the collection, processing, and transfer of iris and facial images (biometric data) using the World Coin App and the Orb against the Worldcoin Foundation.”
The ODPC argued during the hearing that the processing of personal data through the company does not adhere to the principles of data protection as noted in section 25 of the Act.
The Office of Data Protection asked the court to intervene in the failure to which Kenyans’ personal data mined during the Worldcoin project will be erased and modified. Deputy Data Commissioner Oscar Otieno acknowledged in an affidavit that, having reviewed the Worldcoin project operations in the country, he was satisfied that it is unsafe for Kenyans.
The crypto company was banned in Kenya after it collected biometric data of thousands, who were given $50 in return. A few days into the registrations, the government halted the exercise due to security concerns after Kenyans turned in large numbers in the Central Business District to have their eyes and faces screened.
The firm’s developer, Tools for Humanity, announced in 2024 that Worldcoin would resume operations in Kenya following the decision by Director of Public Prosecution Renson Ingonga to close the case. He said that the company would continue working with the government of Kenya and others and hoped to resume World ID registration nationwide.
After months of investigation, the Director of Criminal Investigations (DCI) directed the firm to consider business registration services in liaison with the Registrar of Business Registry if it decides to continue operations in the country.
Worldcoin faces troubles in other countries
7/ penutup dan saran
crypto memang decentralized tapi ingat penggguna nya hidup di dalam negara yang dimana ada aturan dan regulasi
terkait penutupan operasi world coin di indonesia di karenakan pelaporan calo dan investigasi mengenai keamanan data itu suatu tindakan yang… pic.twitter.com/t0vEYaWVaS
— AutoSultan Official 🇮🇩 (@Autosultan_team) May 4, 2025
Worldcoin and World ID-related activities were suspended in Indonesia on May 4 due to legal violations. Indonesia’s Ministry of Communication and Informatics cited misuse of outdated registration documents by a local partner and opened investigations into potential data risks and compliance breaches.
Alexander Sabar, the ministry’s director general for digital space supervision, said that freezing Worldcoin’s activities was a preventive measure to prevent potential risk to the public. He also acknowledged the country would summon Worldcoin’s local operators, PT Terang Bulan Abadi and PT Sandina Abadi Nusantara, to provide clarification on their activities.
Hong Kong’s Privacy Commissioner for Personal Data (PCPD) told the crypto company last May to stop scanning and collecting iris and face images after finding it breached privacy. Portugal announced the firm’s suspension in March 2024, citing concerns over data protection for minors, following Spain’s data protection agency ordering Worldcoin to suspend its activities in the country.
Cryptopolitan Academy: Want to grow your money in 2025? Learn how to do it with DeFi in our upcoming webclass. Save Your Spot
