The Office of the Data Protection Commissioner (ODPC) has confirmed that Tools for Humanity, the organization behind the controversial Worldcoin project, has deleted all biometric data previously collected from Kenyan citizens.
The announcement, released in a public notice on Tuesday, marks a significant milestone in a year-long regulatory standoff regarding digital privacy and the harvesting of iris scans in exchange for cryptocurrency.
The ODPC, established under the Data Protection Act of 2019, is the primary watchdog responsible for overseeing how personal information is processed within Kenya. In its statement, the regulator emphasized its mandate to safeguard the privacy of individuals and ensure that international entities adhere to the legal and institutional frameworks of the country.
“The Office remains dedicated to enforcing the law, protecting data subjects, and ensuring that all data controllers and processors are held accountable for any non-compliance,” the ODPC stated.
”Regarding the processing of Kenyans’ personal data by Tools For Humanity, we confirm that the Data Controller has deleted all biometric data previously collected from Kenyan citizens,” ODPC added.
The friction between the Kenyan government and Tools for Humanity began in mid-2023 when thousands of Kenyans lined up at malls and public spaces to have their eyes scanned by “Orbs” biometric imaging devices. In exchange, participants were offered digital tokens (WLD), valued at roughly $50 at the time.
This prompted immediate government intervention, leading to a suspension of the project’s operations in August 2023 over concerns regarding informed consent and the security of sensitive biological identifiers.
The situation escalated into a landmark legal case, culminating in a High Court ruling in May 2025. The court declared that Worldcoin’s data collection was unlawful, citing the company’s failure to conduct a mandatory Data Protection Impact Assessment (DPIA) and its use of financial incentives to induce consent. The presiding judge ordered the permanent deletion of all unlawfully collected data under the direct supervision of the ODPC.
The suspension led to a multi-agency investigation involving the Ministry of Interior and the ICT Ministry, culminating in the recent verification that the collected data has been purged.
The deletion of the data serves as a corrective measure under Section 25 of Kenya’s Data Protection Act, which outlines the principles of data minimization and purpose limitation. By confirming the destruction of these biometric records, the ODPC aims to reassure the public that sensitive biological identifiers cannot be misused or leaked.
While Worldcoin has expressed a desire to resume operations in Kenya by implementing more robust verification processes, the ODPC maintains that all data controllers, local or international, will be held to the highest standards of accountability moving forward.
[Secure Your Seat at Africa Tech Summit Nairobi 2026 | February 11–12 here] Use code TTRENDS10 at checkout to save 10% on your pass and join the leaders building Africa’s $1 trillion cross-border payment future.
Go to TECHTRENDSKE.co.ke for more tech and business news from the African continent.
Follow us on WhatsApp, Telegram, Twitter, and Facebook, or subscribe to our weekly newsletter to ensure you don’t miss out on any future updates. Send tips to editorial@techtrendsmedia.co.ke
