In response to findings from an investigation, the Privacy Commissioner in Hong Kong has issued a directive to Worldcoin, instructing an immediate halt to its activities within the city. This action follows the discovery that Worldcoin's procedures were in breach of the regulations outlined in the Personal Data (Privacy) Ordinance.

During the inquiry, which involved clandestine visits to Worldcoin's premises on ten occasions, it was revealed that the gathering of facial images was deemed unnecessary for verifying the authenticity of participants. Additionally, the Privacy Commissioner highlighted Worldcoin's failure to furnish adequate details to individuals, thereby impeding their ability to make informed choices and provide genuine consent.

Moreover, the Privacy Commissioner concluded that Worldcoin's extended retention of sensitive biometric data, such as facial and iris scans for a period of up to a decade solely for AI training purposes, lacked justification. The investigation disclosed that 8,302 individuals underwent facial and iris scanning for verification during Worldcoin's operations in Hong Kong.

Since its inception in 2021, Worldcoin has attracted regulatory scrutiny in multiple nations due to privacy apprehensions, leading to service suspensions in Kenya and temporary halts on iris scanning in India.

The enforcement notice from Hong Kong's Privacy Commissioner emphasizes the significance of safeguarding individuals' personal data privacy and the necessity for corporations to comply with stringent data protection protocols. As Worldcoin confronts these obstacles, it serves as a poignant reminder for all entities to prioritize data privacy and transparency in their undertakings.