Worldcoin has deleted all biometric data it collected from Kenyan citizens in 2023 following a High Court of Kenya order directing the company to permanently discard the information amid concerns over the security and legality of iris scan data collected for its cryptocurrency project. The data deletion was confirmed in an official notice issued on January 20, 2026 by the Office of the Data Protection Commissioner (ODPC).
In its statement, the ODPC said the data controller, Tools for Humanity, which operates the Worldcoin project, had fully complied with the court directive. “Regarding the processing of Kenyans’ personal data by Tools for Humanity, we confirm that the Data Controller has deleted all biometric data previously collected from Kenyan citizens,” the ODPC stated. The regulator added that it remains committed to enforcing data protection laws and holding data controllers accountable for non compliance.
The deletion follows a May 5, 2025 High Court ruling that declared Worldcoin’s biometric data collection activities in Kenya unlawful and ordered the permanent deletion of the data within seven days under ODPC supervision. The court found that the project had violated provisions of the Data Protection Act 2019 by collecting sensitive personal data without conducting a required Data Protection Impact Assessment and without obtaining valid informed consent from participants.
In the judgment, Lady Justice Aburili Roselyne ruled that the collection and processing of biometric identifiers such as iris scans and facial images contravened constitutional and statutory protections on privacy. The court further prohibited Worldcoin and its agents from collecting, processing, or dealing with biometric data in Kenya without meeting the legal requirements set out under data protection law.
Worldcoin’s project attracted widespread attention in 2023 when thousands of Kenyans queued in various urban centres, including Nairobi, to have their iris patterns scanned using specialised devices known as Orbs. Participants were offered cryptocurrency tokens in exchange for their biometric data as part of the platform’s efforts to build a global digital identity system.
In August 2023, the Kenyan government suspended Worldcoin’s public operations, citing concerns over data security, consent, and the absence of clear safeguards around the storage and use of biometric information. Investigations were launched by multiple government agencies, and the project did not resume data collection activities in Kenya following the suspension.
Civil society organisations and privacy advocates welcomed the High Court ruling and the confirmation of data deletion, describing the decision as a significant milestone for data protection enforcement in Kenya. One rights advocate noted that the ruling “affirmed that innovation must operate within the law and respect fundamental rights,” particularly where sensitive personal data is involved.
The Worldcoin data deletion marks an important moment in Kenya’s evolving digital governance framework. It underscores the growing regulatory scrutiny of emerging technologies that rely on biometric data and highlights the role of courts and regulators in safeguarding personal privacy as digital and financial innovations expand across the country.
