Worldcoin’s controversial iris-scanning operations in Kenya have officially come to an end, following months of legal pressure and regulatory scrutiny that culminated in the deletion of all biometric data collected from Kenyan citizens.
The move follows a ruling by the Kenyan High Court, which found that Worldcoin’s data collection activities violated the country’s data protection laws. The Office of the Data Protection Commissioner (ODPC) confirmed that all iris scans and related biometric information gathered during the company’s 2023 enrolment exercise have now been permanently erased from its systems under regulatory supervision.
Worldcoin, a crypto-backed digital identity project co-founded by OpenAI Chief Executive Officer Sam Altman, uses specialised “orb” devices to scan users’ irises in exchange for a digital ID and cryptocurrency tokens. In Kenya, the promise of free tokens attracted large crowds, sparking widespread interest but also raising serious concerns over informed consent and the handling of highly sensitive biometric data.
The court ruled that Tools for Humanity, the company behind Worldcoin, failed to properly obtain consent from participants and did not conduct a legally required Data Protection Impact Assessment before rolling out the programme. The judgment underscored that technological innovation does not exempt companies from complying with privacy and data protection laws.
In effect, the ruling reaffirmed that individuals’ personal data—especially biometric identifiers—must be safeguarded, regardless of the novelty or potential benefits of the technology involved.
Beyond Kenya, the decision adds momentum to growing global resistance against Worldcoin’s operational model. Regulators in parts of Europe and Asia have also questioned the project’s data collection practices, making Kenya’s action one of the strongest regulatory rebukes the initiative has faced so far.
Analysts say the case sends a clear signal to digital identity startups worldwide: privacy protections and regulatory compliance must come before rapid expansion or user acquisition.
