Hong Kong Orders Worldcoin Foundation to Cease Operations Over Privacy Concerns

Hong Kong's privacy regulatory body has mandated the cessation of operations by the Worldcoin Foundation within its jurisdiction, citing breaches of local privacy statutes.
According to a statement released on Wednesday, the Office of the Privacy Commissioner for Personal Data (PCPD) revealed that Worldcoin had gathered biometric data, including facial and iris scans, from more than 8,300 individuals during its activities in Hong Kong.
Following covert investigations conducted at six Worldcoin sites between December 2023 and January 2024, the PCPD concluded that the extent of data collection exceeded what was necessary, thus violating Data Protection Principles.
One contentious issue highlighted by the PCPD was Worldcoin’s proposal to retain personal data for up to a decade for training artificial intelligence models used in the user verification process. The PCPD deemed this retention period excessively long and tantamount to prolonged retention of personal data.
READ MORE: Brazil Central Bank Extends Timeline for Crypto Regulation
In response to these findings, the PCPD issued an enforcement notice to Worldcoin, instructing the organization to halt all operations within Hong Kong. Privacy Commissioner Ada Chung urged the public to report any instances of continued Worldcoin activity within the city.
Despite Worldcoin’s March announcement regarding the discontinuation of personal data collection, concerns persist in various jurisdictions. In March, South Korea initiated an investigation following similar complaints, while Spain and Portugal have also commenced inquiries.