The Office of the Data Protection Commissioner (ODPC) has confirmed that all biometric data previously collected from Kenyan citizens by Tools For Humanity (TFH) and linked to Worldcoin has been fully deleted.
In a notice dated January 20, by the ODPC, the data controller confirmed the deletion as part of the regulator’s ongoing mandate to enforce Kenya’s Data Protection Act, 2019, and safeguard citizens’ personal information.
“The Office of the Data Protection Commissioner (ODPC), established under the Data Protection Act, 2019, is mandated to oversee how personal data is processed in Kenya,” their statement read in part.
“Regarding the processing of Kenyans’ personal data by Tools For Humanity, we confirm that the Data Controller has deleted all biometric data previously collected from Kenyan citizens,” they added.
Worldcoin Biometric Data Collection
Tools For Humanity (TFH), linked to Worldcoin, collected iris scans and other biometric data from Kenyan citizens using Orb devices.
The biometric data collected by Worldcoin/Tools for Humanity in Kenya primarily included:
- Iris scans – captured using Orb devices to create a unique digital identifier for each participant.
- Facial images – used in combination with iris scans to verify identity.
These were the core biometric identifiers collected in exchange for cryptocurrency.
Also Read: How to Confirm M-PESA Transaction After a Delayed Message
Participants were offered cryptocurrency as an incentive for providing their biometric information.
While presented as voluntary, investigations later found that the collection and processing of this data did not comply with Kenya’s Data Protection Act, 2019.
The ODPC identified multiple breaches of the law, including failure to obtain valid consent, as payments for participation were considered to compromise the voluntary nature of the agreement.
TFH also did not conduct a proper Data Protection Impact Assessment (DPIA), a mandatory requirement under the Act.
Additionally, the company transferred biometric data outside Kenya without authorization and failed to register affiliates, such as the Worldcoin Foundation, as required by law.
Also Read: Kenya Drops Worldcoin Probe Paving Way for Possible Return
ODPC’s Role in Biometric Data Deletion
In their statement, the data controller stated that the Office of the Data Protection Commissioner (ODPC), established under the Data Protection Act, 2019, oversees the collection, storage, and processing of personal data in Kenya.
Its responsibilities include ensuring compliance with data protection principles outlined in Section 25 of the Act and safeguarding individuals’ privacy.
The office also sets up the legal and institutional framework for personal data protection, ensuring that citizens have access to their rights and remedies under the law.
In cases of non-compliance, including the unauthorised collection or processing of biometric data, the ODPC enforces the law and holds data controllers and processors accountable.
Follow our WhatsApp Channel and X Account for real-time news updates.
