Worldcoin Ordered to Delete Biometric Data Collected from Kenyans

Thumbnail Image

The information displayed in the AIM should not be reported as representing the official views of the OECD or of its member countries.

Kenya's Data Protection Commissioner confirmed that Tools for Humanity, linked to the Worldcoin project, deleted all biometric data collected from Kenyan citizens after a High Court ruling found the AI-powered iris scanning system violated data protection laws and privacy rights. Regulatory intervention followed months of scrutiny and legal action.[AI generated]

Why's our monitor labelling this an incident or hazard?

The event involves the use of AI-enabled biometric data collection systems (Orb devices) that process sensitive personal data (iris scans and facial images) to generate digital identifiers. The misuse and non-compliance with data protection laws, including invalid consent and unauthorized data transfers, constitute violations of fundamental rights under applicable law. The regulatory confirmation of data deletion follows these breaches, indicating that harm occurred and was addressed. Since the AI system's use directly led to violations of rights and regulatory breaches, this is an AI Incident rather than a hazard or complementary information. The event is not unrelated because it clearly involves AI systems and their impact on rights.[AI generated]
AI principles
Privacy & data governanceRespect of human rights

Industries
Digital security

Affected stakeholders
General public

Harm types
Human or fundamental rights

Severity
AI incident

AI system task:
Recognition/object detection


Articles about this incident or hazard

Thumbnail Image

Kenya Confirms Deletion Of Worldcoin Biometric Data

2026-01-20
CIO Africa
Why's our monitor labelling this an incident or hazard?
The event involves the use of AI-enabled biometric data collection systems (Orb devices) that process sensitive personal data (iris scans and facial images) to generate digital identifiers. The misuse and non-compliance with data protection laws, including invalid consent and unauthorized data transfers, constitute violations of fundamental rights under applicable law. The regulatory confirmation of data deletion follows these breaches, indicating that harm occurred and was addressed. Since the AI system's use directly led to violations of rights and regulatory breaches, this is an AI Incident rather than a hazard or complementary information. The event is not unrelated because it clearly involves AI systems and their impact on rights.
Thumbnail Image

Kenya Confirms Worldcoin Biometric Data Deleted

2026-01-20
TechTrendsKE
Why's our monitor labelling this an incident or hazard?
Worldcoin's biometric iris scanning system qualifies as an AI system because it uses biometric imaging and data processing to identify individuals and issue digital tokens. The unlawful collection and processing of biometric data without proper consent constitutes a violation of fundamental rights and data protection laws, fulfilling the criteria for an AI Incident under violations of human rights or breach of legal obligations. The deletion of data is a corrective measure but does not negate the fact that harm (privacy violation) occurred. Hence, this event is classified as an AI Incident.
Thumbnail Image

World's iris biometrics scans launch in one country, undone in another | Biometric Update

2026-01-20
Biometric Update | Biometrics News, Companies and Explainers
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI system (World ID) using iris biometric scans, which qualifies as an AI system under the framework. The Kenyan data protection authority's findings confirm that the system's use violated data protection laws, including failure to conduct a required Data Protection Impact Assessment and issues with voluntary consent, which are breaches of legal obligations protecting fundamental rights. The deletion of biometric data in Kenya is a direct consequence of these violations. These facts meet the criteria for an AI Incident under category (c) violations of human rights or breach of applicable law protecting fundamental rights. The event does not merely describe potential future harm or general AI-related news but documents realized legal violations and regulatory enforcement actions tied to the AI system's use. Hence, it is classified as an AI Incident.
Thumbnail Image

RUTO's Government issues update on deletion of Kenyans' biometric data collected by Worldcoin amid privacy concerns

2026-01-21
kenyan-post.com
Why's our monitor labelling this an incident or hazard?
The event involves an AI system (biometric data collection by Worldcoin's Tools For Humanity) whose use led to a violation of data protection laws and privacy rights, which are human rights. The High Court ruling and subsequent deletion of data indicate that harm (violation of rights) had occurred due to the AI system's use. Therefore, this qualifies as an AI Incident because the AI system's use directly led to a breach of legal obligations protecting fundamental rights. The article focuses on the update about remediation following the incident, but the incident itself is clearly described and has occurred.
Thumbnail Image

Worldcoin deletes Kenyans' biometric data after court order

2026-01-21
businessdailyafrica.com
Why's our monitor labelling this an incident or hazard?
Worldcoin's AI system collected biometric data without proper approval, violating data protection laws and privacy rights of Kenyan citizens. The court order to delete the data and the suspension of the project indicate that harm in the form of legal rights violations occurred. The AI system's use directly led to this harm, fulfilling the criteria for an AI Incident under violations of human rights or breach of legal obligations. The event is not merely a future risk or complementary information but a concrete incident with realized harm and regulatory action.
Thumbnail Image

ODPC confirms deletion of Kenyans' Worldcoin biometric data

2026-01-22
Capital News
Why's our monitor labelling this an incident or hazard?
The event involves an AI system component (biometric iris scanning) used by Worldcoin, which had previously raised data privacy concerns leading to suspension of operations. However, the article focuses on the confirmation of data deletion and compliance with legal directives, indicating remediation rather than new or ongoing harm. There is no indication of new injury, rights violations, or other harms currently occurring or plausible future harm from this event. Instead, it reports a regulatory and compliance update, which fits the definition of Complementary Information as it provides follow-up and context on a previously reported AI-related issue.
Thumbnail Image

Why Worldcoin erased Kenyans' biometric data

2026-01-22
People Daily
Why's our monitor labelling this an incident or hazard?
Worldcoin's biometric iris scanning system is an AI system used to generate unique digital identities. The Kenyan High Court found that Worldcoin violated data protection laws by failing to conduct required assessments and obtain valid consent, leading to unlawful processing of sensitive biometric data. This constitutes a breach of privacy rights, a violation of applicable law protecting fundamental rights, and thus harm has occurred. The court's order to delete the data confirms the harm and the AI system's role in it. Hence, this event meets the criteria for an AI Incident due to violations of human rights and legal obligations linked to the AI system's use.
Thumbnail Image

Worldcoin Deletes Kenyan Biometric Data Following Court Order

2026-01-22
Blockonomi
Why's our monitor labelling this an incident or hazard?
Worldcoin's iris-scanning biometric system is an AI system as it processes biometric data to generate digital identities. The unlawful collection of biometric data without proper consent constitutes a violation of data protection laws and human rights. The court ruling and subsequent deletion of data confirm that harm in the form of rights violations occurred. The event directly involves the use of an AI system leading to legal and rights breaches, fitting the definition of an AI Incident under violations of human rights and legal obligations.
Thumbnail Image

Worldcoin deletes Kenyans' iris data after High Court ruling - Nairobi Law Monthly

2026-01-22
Nairobi Law Monthly
Why's our monitor labelling this an incident or hazard?
The iris scanning system used by Worldcoin qualifies as an AI system because it involves biometric data processing and identity verification using advanced technology likely involving AI for pattern recognition and secure identification. The unlawful collection and processing of biometric data constitute a violation of fundamental rights (privacy and data protection). The High Court ruling and subsequent data deletion confirm that harm related to rights violations occurred. Therefore, this event meets the criteria of an AI Incident due to the direct involvement of an AI system in causing a breach of fundamental rights, which has been legally recognized and remedied.
Thumbnail Image

Worldcoin deletes data collected from Kenyans in 2023

2026-01-22
The Standard
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI system used for biometric data collection (iris and facial recognition), which is a clear AI application. The High Court ruled that the data collection was illegal and violated privacy rights, a breach of fundamental human rights. The harm has already occurred, and the data deletion is a remedial action. Since the AI system's use directly led to a violation of rights, this is an AI Incident. The article focuses on the harm and legal consequences, not just on the response or broader context, so it is not merely Complementary Information.
Thumbnail Image

REGULATION | Data Protection Commissioner Confirms Deletion of Kenyans' WorldCoin Biometric Data

2026-01-22
BitKE
Why's our monitor labelling this an incident or hazard?
WorldCoin's biometric data collection system qualifies as an AI system because it involves biometric scanning and processing, which typically uses AI technologies for iris and facial recognition. The Kenyan High Court ruling found that WorldCoin's data collection violated privacy rights and data protection laws, constituting a breach of legal obligations intended to protect fundamental rights. The deletion of data is a response to this harm. Although the article focuses on regulatory enforcement and compliance updates, the underlying event involves realized harm to privacy rights due to unlawful AI system use. However, the current article mainly reports on the confirmation of data deletion and regulatory enforcement rather than the initial harm event itself. Therefore, this article is best classified as Complementary Information, as it provides an update on the resolution and enforcement actions following a previously established AI Incident involving privacy violations.
Thumbnail Image

Sam Altman's World deletes data collected from Kenyans following High Court order - Cryptopolitan

2026-01-22
Cryptopolitan
Why's our monitor labelling this an incident or hazard?
Worldcoin's iris-scanning system qualifies as an AI system because it uses biometric data collection and processing, which involves AI technologies for identity verification. The event describes the use of this AI system in a way that violated data protection laws and privacy rights, constituting a breach of obligations intended to protect fundamental rights. The High Court order and subsequent deletion of data indicate that harm (violation of rights) has occurred. Therefore, this event is an AI Incident due to the realized harm caused by the AI system's use in biometric data collection without proper legal compliance.
Thumbnail Image

Institute welcomes deletion of unlawful data by Worldcoin

2026-01-23
The Star
Why's our monitor labelling this an incident or hazard?
The event explicitly involves an AI system (Worldcoin's iris-scanning Orb device) used to collect biometric data. The unlawful collection and processing of this data without consent and legal compliance constitutes a violation of constitutional rights to privacy and data protection, fulfilling the criteria for harm under human rights violations. The High Court ruling and subsequent deletion of data confirm that harm occurred and is being remedied. Hence, this is an AI Incident, not merely a hazard or complementary information, as the AI system's use directly led to a breach of rights and legal obligations.
Thumbnail Image

Worldcoin's Eye-Scan Data Controversy Ends After Court Orders

2026-01-23
Nairobi Wire
Why's our monitor labelling this an incident or hazard?
Worldcoin's biometric data collection involved an AI system (eye-scan device) used to generate digital identities. The unlawful collection and retention of biometric data represent a breach of data protection and privacy rights, which are fundamental human rights. The High Court ruling confirms the harm has materialized, and the deletion of data is a response to this harm. Hence, the event meets the criteria for an AI Incident because the AI system's use directly led to a violation of rights. The article focuses on the incident and its legal resolution, not just a complementary update or potential hazard.