Kenya Court Orders Worldcoin to Delete All Biometric Data

Kenya’s High Court has issued a significant ruling against the Worldcoin Foundation, mandating the permanent deletion of all biometric data collected from local users. The data in question includes sensitive information such as facial images and iris scans. The ruling, delivered by Justice Aburili Roselyne on Monday, highlighted that Worldcoin's actions constituted a violation of constitutional rights through unauthorized data collection.

The court imposed a seven-day deadline for the deletion of the data, with the process to be overseen by Kenya’s Data Protection Commissioner. The legal action was initiated by the Katiba Institute and ICJ Kenya, with the aim of protecting human rights and ensuring transparency. The court found that Worldcoin had failed to comply with its mandatory Data Protection Impact Assessment responsibilities as outlined in Kenya’s Data Protection Act of 2019.

The court criticized Worldcoin for using "inducement" to gain consent, offering cryptocurrency in exchange for biometric data. This method was deemed unethical and lacking in transparency. As a result, the court not only halted the current data collection process but also invalidated all previously authorized consent procedures. Additionally, the court ordered Worldcoin to cease collecting and processing any further biometric data in Kenya until it conducts a valid assessment process. All data obtained through illegal means was ordered to be removed, with the deletion process to be conducted under official oversight.

Worldcoin is facing a global backlash over its biometric data collection practices. In Indonesia, the Ministry of Communications and Digital Technology suspended Worldcoin’s operations on May 4, 2025, citing suspicious activities and regulatory violations. This suspension included the revocation of Worldcoin’s registration certificates for its World ID service. Similarly, Brazilian authorities have expressed concerns about Worldcoin’s payment system for exchanging biometric data from users. In South Korea, the government imposed an operational ban and an $800,000 fine on the project due to breaches of data protection regulations.

Worldcoin has been attempting to engage with regulators since 2024, but many regions still lack complete operational approval. The company promotes universal digital identity through its platform, but critics argue that its processes compromise privacy and data protection standards. Governments worldwide are increasing their efforts to safeguard citizens from practices they deem invasive or deceptive. The Kenyan court decision reflects a growing global focus on technological projects that handle personal data, posing significant challenges for Worldcoin in maintaining trust and adhering to international standards. As more countries demand higher transparency and accountability, Worldcoin faces an uphill battle in navigating these regulatory landscapes.