An order has been issued by the Kenyan High Court directing Sam Altman’s World to stop the processing, collection, or handling of biometric data until a Data Protection Impact Assessment is carried out. Additionally, biometric data previously gathered in Kenya without proper assessment has been mandated to be permanently deleted within seven days.
An order has been issued by the Kenyan High Court prohibiting Sam Altman’s World (previously known as Worldcoin) from collecting, processing, or handling biometric data without first conducting a Data Protection Impact Assessment. The same directive, which also restricted the organization from incentivizing users through the distribution of cryptocurrency, indicated that its actions were in violation of Section 31 of the Data Protection Act.
Worldcoin Found in Violation of Data Protection Regulations
The ruling delivered on May 5 has been considered a triumph for the Katiba Institute, an advocacy organization dedicated to upholding the Kenyan constitution. The group had filed a challenge in August 2023 against the operations of World, particularly the transfer of facial and iris data via the Worldcoin app and Orbs. The court’s decision has affirmed the Katiba Institute’s position, which was firmly maintained in opposition to World, even as the Kenyan government seemed to soften its stance toward the company.
As reported by News in 2023, enforcement actions were taken against World by Kenyan authorities, resulting in the suspension of its operations after officials alleged it was functioning without proper licensing. Following the shutdown, a police investigation was conducted and later closed, which subsequently allowed World to restart its activities.
However, the investigation was officially concluded less than a year after the judicial review application filed by the Katiba Institute had been granted by the Kenyan High Court.
As stated by the Katiba Institute, a seven-day deadline has been given to World for the deletion of user data that was unlawfully collected, under an order issued by Kenyan Lady Justice Aburili Roselyne on May 5.
An order of Mandamus compelling the Worldcoin Foundation and its agents to permanently delete (under the supervision of the Data Protection Commissioner) within seven days any biometric data collected in Kenya without undertaking (or using an inadequate) Data Protection Impact Assessment contrary to section 31 of the Data Protection Act, 2019 and by consent obtained through inducement of a cryptocurrency—Worldcoin.
The ruling by the Kenyan High Court, issued only days after similar action was taken against the company in Indonesia, has intensified the growing international regulatory scrutiny facing World. In Indonesia, the company’s operations were declared illegal by government authorities, citing breaches of electronic system implementation laws, such as operating without valid registration and utilizing another entity’s license.
