The PCPD ruled that Worldcoin’s retention of sensitive biometric data for up to 10 years solely for AI model training, including face and iris images, was unjustified.
Hong Kong’s Office of the Privacy Commissioner for Personal Data (PCPD) has concluded its inquiry into the Worldcoin project, determining that its operations in Hong Kong violated its Personal Data (Privacy) Ordinance (PDPO).
In a May 22 notice, Privacy Commissioner Ada Chung Lai-ling issued an enforcement notice to Worldcoin, ordering the immediate halt of all project operations in Hong Kong that involve scanning and collecting iris and facial images of the public using iris scanning devices.
The PCPD started its investigation against the Worldcoin project in January 2024 to determine whether the identity verification methods posed serious risks to citizens’ personal data privacy and violated the requirements of the PDPO.