orderConcluded
Office of the Privacy Commissioner for Personal Data (PCPD) — Worldcoin Foundation
May 22, 2024 · Hong Kong
The PCPD found the Worldcoin iris/face-scanning project (8,302 individuals scanned) contravened the Personal Data (Privacy) Ordinance through excessive biometric collection and served an enforcement notice directing it to cease all iris- and face-scanning in Hong Kong.
Key takeaway — how to prevent this
Biometric data (faces, iris, fingerprints) needs an explicit lawful basis or consent. Scraping or capturing it without one is unlawful across the EU/UK and many US states (e.g. Illinois BIPA) — and draws the largest fines.
Inclusion does not imply wrongdoing or liability. Status reflects the latest information we have — always check the official source for current status.