The Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong has initiated an investigation into the local operations of the Worldcoin identity verification project, citing "serious risks to personal data privacy." The PCPD executed arrest warrants and entered six locations controlled by Worldcoin in Hong Kong as part of its investigation. The committee has requested documents and information and cautioned Hong Kong residents to consider the potential implications for their biometric data privacy, as WorldCoin employs an iris scanning ball for identity verification.
Expressing concern about the operation of WorldCoin in Hong Kong, the PCPD stated that it perceives significant risks to personal data privacy. The commission believes that the collection and processing of sensitive personal data by relevant organizations associated with WorldCoin may potentially violate the provisions of the Personal Data (Privacy) Ordinance Regulations. The PCPD emphasized that any personal data controlled by Worldcoin should be related to the legitimate functions or activities of the project. Additionally, the commission highlighted that information collected from users' irises is considered "sensitive" under regulatory guidance.
WorldCoin, which was announced in 2021, garnered more than 2 million sign-ups before officially launching in July 2023. The project has faced scrutiny from regulators in various countries due to privacy concerns, leading to service suspension in Kenya and the discontinuation of iris scanning in India. As of December 2023, Worldcoin reported that over 5 million people had created accounts using their identities.
