Key Takeaways:
- Hong Kong investigates Worldcoin’s identity verification project.
- The PCPD states that all personal data, held by Worldcoin must be collected for lawful purposes.
In a recent move, the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong has conducted raids on multiple locations associated with Worldcoin, an iris biometrics firm.
This action comes amidst growing concerns over the company’s scheme offering crypto tokens in exchange for iris scans, raising serious questions about the handling and security of personal biometric data.
The PCPD has expressed suspicion regarding Worldcoin’s management of the biometric data it has acquired, prompting the raids on six premises linked to the Worldcoin project across various districts in Hong Kong.
Ada Chung Lai-ling, Hong Kong’s privacy commissioner for personal data, emphasized the need for caution when sharing sensitive personal information, particularly through activities such as iris scanning.
The PCPD’s investigation aims to ensure compliance with local data protection laws and safeguard the privacy of Hong Kong residents.
In a statement, the PCPD highlighted concerns over the potential risks to personal data privacy posed by Worldcoin’s operations, particularly regarding the collection and processing of sensitive personal data, which may potentially contravene the requirements of the Personal Data (Privacy) Ordinance.
The regulator has advised the public to carefully consider the necessity, purpose, and retention period of biometric data collection before engaging in such activities.
Emphasizing the unique and unalterable nature of biometric data, the PCPD underscored the sensitivity surrounding its handling and usage.
Under the Personal Data (Privacy) Ordinance, organizations are mandated to collect personal data for lawful purposes and ensure its security against unauthorized access or use.
Moreover, using personal data for new purposes without explicit consent is restricted under this ordinance.
While the Privacy Commissioner’s office lacks formal authority to suspend Worldcoin’s operations in Hong Kong, the raids signify the latest development in a series of concerns raised by governments worldwide regarding the company’s activities.
Last year, governments worldwide heightened scrutiny on Worldcoin’s data practices. In August, Kenya raided a Nairobi Worldcoin warehouse due to privacy concerns, while in July, France’s CNIL investigated potential legal issues with Worldcoin’s data handling.
These incidents reflect a global trend of regulatory inquiries into Worldcoin’s data practices, highlighting the need for enhanced data protection measures in cryptocurrency operations.
With uncertainties surrounding Worldcoin’s intentions regarding the use of collected iris biometric data, regulatory scrutiny continues to mount as governments strive to uphold data privacy and protection standards within their jurisdictions.
