Worldcoin Permanently Deletes All Biometric Data Collected from Kenyans
The cryptocurrency project Worldcoin, backed by OpenAI CEO Sam Altman, has fully erased all biometric data it gathered from Kenyan citizens during its 2023 rollout. This confirmation comes from Kenya's Office of the Data Protection Commissioner (ODPC), marking the resolution of a major privacy and data protection case that began over two years ago.
In a public notice dated January 20, 2026, the ODPC stated: “Regarding the processing of Kenyans’ personal data by Tools For Humanity, we confirm that the Data Controller has deleted all biometric data previously collected from Kenyan citizens.” Tools For Humanity (TFH), the US- and Germany-based entity operating Worldcoin, carried out the deletion in September 2023, but the process was only recently verified and supervised under court directives.
The action follows a landmark High Court ruling on May 5, 2025, which declared Worldcoin's data collection unlawful under Kenya's Data Protection Act, 2019. The court found multiple violations, including:
Failure to conduct a mandatory Data Protection Impact Assessment (DPIA) before processing sensitive biometric information.
Obtaining consent through inducement by offering cryptocurrency rewards (approximately 25 WLD tokens, worth around KSh 8,256 at the time, or roughly $50 USD).
Non-registration of affiliates as data controllers or processors in Kenya.
Collection of iris scans via Orb devices without proper safeguards.
The High Court issued orders of prohibition, certiorari, and mandamus, requiring TFH to permanently erase the data within seven days under ODPC supervision. The ruling emphasized that such practices breached constitutional rights to privacy and data protection.
Worldcoin's operations in Kenya were suspended in August 2023 shortly after launch, when the government halted all activities pending security and compliance certifications. The project, which aimed to create a global digital identity system (World ID) through iris scanning in exchange for crypto tokens, drew widespread criticism over privacy risks and the vulnerability of biometric data.
The ODPC reiterated its commitment: “The office will remain committed to enforcing the law and ensuring that all data controllers and processors are held accountable for any non-compliance.”
This development closes a significant chapter in Kenya's enforcement of data protection laws against emerging tech firms handling sensitive personal information. Worldcoin's activities remain banned in the country, with no indication of resumption. The case sets a precedent for how biometric data projects must comply with local regulations, particularly around informed consent and risk assessments.
No immediate comment was available from Worldcoin or Tools For Humanity regarding the confirmation. The focus now turns to similar regulatory scrutiny in other jurisdictions where the project has faced challenges.
