The High Court has ordered Worldcoin, the crypto-biometric firm founded by tech entrepreneur Sam Altman, to delete all biometric data it unlawfully collected from Kenyan citizens during its operations in September 2023.
The court ruling, delivered under the supervision of the Office of the Data Protection Commissioner (ODPC), bars Worldcoin from further processing any such data unless it conducts a comprehensive Data Protection Impact Assessment and obtains valid, informed consent from data subjects.
The court’s decision followed a petition by the ODPC, which accused Worldcoin of violating Kenya’s data protection laws, particularly Section 25 of the Data Protection Act, which outlines core principles of data privacy and lawful processing.
In an affidavit filed before the court, Deputy Data Commissioner Oscar Otieno stated that after reviewing Worldcoin’s activities in the country, he was convinced that the project posed a serious risk to the safety and privacy of Kenyan citizens.
“Failure to intervene,” he said, “would result in the illegal modification and continued misuse of Kenyans’ personal data.”
Worldcoin’s operations in Kenya were suspended in 2023 after it emerged that the company had collected sensitive biometric data—including iris scans—from thousands of Kenyans in exchange for a $50 cryptocurrency token. The method, carried out using a device known as “the orb,” drew sharp criticism from civil society groups, legal experts, and data protection advocates.
Despite the ban, Worldcoin announced its return to Kenya in 2024, a move that reignited public concern over the safety and regulation of personal data in the digital age.
The ODPC welcomed the court’s decision, calling it a significant step in upholding Kenyans’ rights to privacy and in holding global tech firms accountable under local law.
By Kelly Were
