KE | Incident Report
Regulatory Action
2026-01-20
Kenya regulator confirms Worldcoin deleted biometric data after High Court order
AI Model: Worldcoin Orb (biometric identity system) Data ProtectionBiometricsRegulatory EnforcementDigital IdentityAfrica
I. Executive Summary
Kenya’s Office of the Data Protection Commissioner (ODPC) confirmed that Tools for Humanity/Worldcoin deleted biometric data collected from Kenyan citizens. The deletion followed a High Court order requiring permanent erasure of unlawfully collected iris-scan data and ODPC supervision. The episode reinforces enforcement expectations for biometric and AI-adjacent identity systems operating in Kenya.
II. Key Facts
- ODPC notice dated 2026-01-20 confirmed deletion of Kenyan biometric data collected in 2023.
- Deletion followed a High Court order (May 2025) directing permanent erasure under ODPC supervision.
- Worldcoin registrations were previously suspended in Kenya amid privacy and data security concerns.
- ODPC indicated any future operations would require compliance steps (e.g., approvals, DPIA, proper consent).
III. Regulatory & Ethical Implications
Demonstrates active enforcement of Kenya’s Data Protection Act for high-risk biometric processing. Legal and compliance advisors should treat biometric/AI identity deployments as requiring rigorous DPIAs, lawful consent, registration/authorization, and supervised deletion/auditability where ordered.