Hong Kong: Announced PCPD investigation into Worldcoin project for potential data privacy violations

On 31 January 2024, the Office of the Privacy Commissioner for Personal Data (PCPD) in Hong Kong announced an investigation into the Worldcoin project, which offers services in digital identity and cryptocurrency, suspecting serious risks to personal data privacy. The project, which involves the collection of iris information through scanning, is believed to potentially contravene the requirements of the Personal Data (Privacy) Ordinance (PDPO) regarding biometric data, which is a kind of sensitive personal data. The PCPD executed court warrants and entered six premises of the Worldcoin project to carry out investigations. The Privacy Commissioner urged the public to be cautious about the project and to protect their sensitive personal data. She highlighted the need for citizens to consider the legitimacy, extent, purpose, intended use, retention period, and safety precautions of any organisation collecting biometric data.