• 09/21/2024

Hong Kong orders crypto project Worldcoin to halt operations in city over ‘excessive’ data collection

Hong Kong Free Press

PCPD Worldcoin crypto

Cryptocurrency project Worldcoin has been found to violate Hong Kong’s privacy law by the city’s data watchdog. Requiring users to provide face and iris scans to verify their “humanness” amounted to “unnecessary and excessive” collection of personal data, the privacy body said. 

Member of the Office of the Privacy Commissioner for Personal Data (PCPD) entered six premises involved in the operation of the Worldcoin project with court warrants on January 31, 2024 to carry out investigations. Photo: PCPD.
Member of the Office of the Privacy Commissioner for Personal Data (PCPD) entered six premises involved in the operation of the Worldcoin project with court warrants on January 31, 2024 to carry out investigations. Photo: PCPD.

The Office of the Privacy Commissioner for Personal Data (PCPD) on Wednesday ordered Worldcoin to cease all operations of its biometric crypto project in Hong Kong which involved scanning and collecting people’s iris and face images. 

Covert visits

The PCPD’s enforcement notice came after the watchdog conducted 10 covert visits at six premises linked to the operation of the crypto organisation founded by Open AI CEO Sam Altman, Alex Blania and Max Novenstern. 

Following the visits between last December and January, the watchdog entered the premises in Yau Ma Tei, Kwun Tong,  Wan Chai, Cyberport, Central and Causeway Bay with court warrants for investigation in late January. Two rounds of inquiries were conducted afterwards. 

According to the PCPD’s findings, participants of the Worldcoin project were required to grant permission to the group to use iris scanning to confirm their “humanness” and generate iris codes before they could obtain a “digital passport” known as a World ID. 

This photo taken on May 22, 2024 shows Worldcoin's office in Jordan. Photo: Kyle Lam/HKFP.
This photo taken on May 22, 2024 shows Worldcoin’s office in Jordan. Photo: Kyle Lam/HKFP.

The users could then receive Worldcoin tokens, also known as WLD, which the company said could be used to pay for “certain actions in the Worldcoin Ecosystem” in the future. The cryptocurrency may also be used as a store of value or make payments, according to Worldcoin’s website. 

Worldcoin confirmed that 8,302 individuals had their faces and irises scanned for verification during the group’s operation in Hong Kong. 

‘Unnecessary’

The crypto group’s operation breached the provisions on data collection, retention, transparency, access and correction rights stated in the Personal Data (Privacy) Ordinance, Privacy Commissioner Ada Chung said on Thursday. There were “less privacy-intrusive means” for the group to verify the identity of participants, the watchdog said. 

“The PCPD considered that the face and iris images collected by the Worldcoin project were unnecessary and excessive,” an English statement from the PCPD read.

Privacy Commissioner Ada Chung meets the press on December 21, 2022. Photo: Office of the Privacy Commissioner for Personal Data.
Privacy Commissioner Ada Chung. File photo: Office of the Privacy Commissioner for Personal Data.

The watchdog accused Worldcoin of collecting personal data “unfairly,” saying the privacy notice and bio-metric data consent form were not available in Chinese. Worldcoin’s staff operating the iris scanning device also did not give any explanation or confirm participants’ understanding of the documents, it said. Such practices showed that there was a lack of transparency, the PCPD found.

“Worldcoin failed to provide adequate information to participants to enable them to make an informed choice or give a real consent,” the statement read. 

PCPD added that Worldcoin would keep personal data for up to 10 years for training artificial intelligence models on how to verify users.

“The PCPD considered that the retention period was too long and amounted to prolonged retention of personal data,” the watchdog said.  

Chung called on the public to report to the PCPD immediately if they saw any iris scanning services operated by Worldcoin. 

By Wednesday afternoon all banners and logos of Worldcoin had been removed from its office in Jordan, according to an HKFP reporter on the ground. 

Support HKFP  |  Policies & Ethics  |  Error/typo?  |  Contact Us  |  Newsletter  | Transparency & Annual Report | Apps

Help safeguard press freedom & keep HKFP free for all readers by supporting our team

TRUST PROJECT HKFP
SOPA HKFP
IPI HKFP
contribute to hkfp methods

Original reporting on HKFP is backed by our monthly contributors.

Almost 1,000 monthly donors make HKFP possible. Each contributes an average of HK$200/month to support our award-winning original reporting, keeping the city’s only independent English-language outlet free-to-access for all. Three reasons to join us:

  1. 🔎 Transparent & efficient: As a non-profit, we are externally audited each year, publishing our income/outgoings annually, as the city’s most transparent news outlet.
  2. 🔒 Accurate & accountable: Our reporting is governed by a comprehensive Ethics Code. We are 100% independent, and not answerable to any tycoon, mainland owners or shareholders. Check out our latest Annual Report, and help support press freedom.
  3. 💰 It’s fast, secure & easy: We accept most payment methods – cancel anytime, and receive a free tote bag and pen if you contribute HK$150/month or more.

Support press freedom & help us surpass 1,000 monthly Patrons: 100% independent, governed by an ethics code & not-for-profit.

https://hongkongfp.com/2024/05/22/hong-kong-orders-crypto-project-worldcoin-to-halt-operations-in-city-over-excessive-data-collection/