The Kenyan High Court has taken a firm stand on digital privacy by ruling against Worldcoin, the cryptocurrency initiative co-founded by OpenAI’s Sam Altman and Alex Blanca. The court ordered the company to cease all biometric data collection and processing in Kenya and to permanently delete all previously gathered biometric data within seven days, unless it conducts a proper Data Protection Impact Assessment (DPIA).
The ruling, delivered on May 5 by Lady Justice Aburili Roselyne, is the result of a legal challenge filed by the Katiba Institute, a constitutional advocacy group that has consistently raised red flags over the legality of Worldcoin’s operations. The organization argued that Worldcoin’s collection and processing of sensitive biometric data—including iris scans and facial images—violated Kenya’s Data Protection Act, particularly Section 31, which deals with the handling of sensitive personal data without explicit consent and proper impact assessments.
Worldcoin is a cryptocurrency project that aims to create a global digital identity and financial system. Its model hinges on using an iris-scanning device known as the Orb, through which users can verify their identity as human in exchange for cryptocurrency tokens worth approximately Ksh.7,000 ($45). While this “proof of personhood” concept was marketed as a tool for equitable digital access and financial inclusion, critics in Kenya and abroad raised serious questions about consent, data sovereignty, and exploitation, especially in lower-income regions.
The court further prohibited Worldcoin from offering cryptocurrency incentives in exchange for biometric data, citing ethical and legal concerns. This move follows earlier suspension of Worldcoin’s operations in Kenya amid rising public scrutiny and investigations by local regulators. Worldcoin had claimed full compliance with local laws and promised transparency and engagement with Kenyan authorities. However, the court found these assurances insufficient without a formal data protection evaluation.
Kenya is not alone in its crackdown on Worldcoin. In Indonesia, regulators also suspended the platform’s activities, citing violations of national digital service laws. Authorities discovered that Worldcoin’s local operator, PT Terang Bulan Abadi, had failed to register as an Electronic System Organizer (PSE) and lacked the legally required TDPSE certification. Instead, services were reportedly conducted under a different legal entity, PT Sandina Abadi Nusantara, raising regulatory red flags.
Despite these legal troubles, Worldcoin had garnered massive interest in Kenya. A CoinJournal report from February last year found that Kenya had the highest global interest in Worldcoin, scoring 100 on Google Trends, well above other countries. This shows that while the appetite for cryptocurrency innovations remains high, the legal framework and public trust must evolve in tandem.
The Kenyan High Court’s decision serves as a wake-up call for digital platforms collecting sensitive data under the guise of innovation. As countries strengthen their data protection frameworks, tech companies must prioritize consent, transparency, and legal compliance—not just speed to market.
This ruling marks a turning point in Africa’s approach to digital rights and privacy, particularly in the context of emerging technologies like blockchain and biometrics. For Worldcoin, and other similar ventures, the message is clear: innovation cannot come at the expense of people’s privacy.
