The High Court of Kenya has ruled that the collection of biometric data from Kenyans by Worldcoin in 2023 was conducted illegally, violating the country’s data protection laws. Justice Roselyne Aburili, presiding over the matter, ordered the immediate deletion of all biometric data collected through the project’s iris-scanning operations.
“Collection of personal data from Kenyans by Worldcoin in 2023 was illegal, conducted without adherence to Kenya’s data protection laws,” said Justice Roselyne Aburili in judgment delivered on Monday.
The decision concludes nearly two years of public controversy, police investigations, and civil litigation surrounding the crypto-linked identity project. It sets a legal benchmark on how personal data — especially sensitive biometric information — can be collected, stored, and transferred in Kenya.
Timeline: Worldcoin in Kenya
- 2022–2023: Worldcoin rolls out in Kenya, offering crypto in exchange for iris scans.
- July 2023: Data commissioner issues public warning.
- August 2023: Government suspends operations; ODPC files court case.
- June 2024: Police investigations are dropped, but legal challenge continues.
- March 2025: Final court submissions heard.
- May 5, 2025: Court rules Worldcoin’s actions were unlawful; orders deletion of all biometric data.
United States Expands, Indonesia Suspends
Kenya’s court ruling comes amid a wave of global regulatory activity around Worldcoin.
In the United States, Worldcoin officially launched on May 1, 2025, in six cities including Los Angeles and Miami. The rollout is supported by the Trump administration’s shift toward a pro-crypto regulatory stance, allowing for public registration, token distribution, and World ID onboarding.
Meanwhile in Indonesia, authorities have suspended all Worldcoin and World ID-related activities over legal violations. The country’s Ministry of Communication and Informatics cited misuse of outdated registration documents by a local partner and opened investigations into potential data risks and compliance breaches.
These developments highlight the stark contrast in how different countries are approaching the governance of biometric and blockchain-linked identity systems.
What Happens Next?
The High Court’s judgment raises several critical questions:
- What exactly does the deletion order entail? Will authorities monitor or audit whether Worldcoin deletes data from all systems, including offshore servers?
- Does this ruling effectively suspend all Worldcoin activity in Kenya moving forward? Or can the company reapply under a compliant framework?
- Will Worldcoin issue a public response or appeal the decision in court?
- What precedent does this ruling set for other crypto and biometric ID projects operating in Kenya and the broader region?
The court ruling significantly tightens expectations around how companies handle personal data in Kenya. Whether this triggers a broader regulatory shift remains to be seen.
This article will be updated if Worldcoin or government agencies respond to the ruling.
Discover more from Techish Kenya
Subscribe to get the latest posts sent to your email.
