NAIROBI, Kenya, Sep 7 — The Office of Data Protection Commissioner (ODPC) has proposed an independent security audit on Worldcoin to ascertain the safety of data collected from 508,569 Kenyan users.
ODPC called for an audit following findings by a multi-agency team comprising Communications Authority, Central Bank of Kenya, Ministry of ICT and National Computer and Cybercrimes Coordination Committee (NC4) tasked to ascertain the Worldcoin activities.
Appearing before the National Assembly Adhoc Committee on Thursday, Data Commissioner Immaculate Kassait called for the fast tracking of the audit as it remains unclear the location on the personal and sensitive data collected from Kenyans.
“Tools for Humanity (TFH ) and Worldcoin were, through their products – World App, WorldID and Worldcoin Protocol collecting personal and sensitive personal data. The location of the data remains unclear but includes-Italy, South Africa, Germany, Poland and United States,” she said.
Kassait accused Worldcoin Project of being cagey on the purposes of collection of the personal data and the issuance of World ID and provision of Worldcoin cryptocurrency.
The Data Commissioner said while the number of verified Kenyan users stood at 508,569, the evidence available on the consent obtained from Kenyans was insufficient and did not comply with the Data Protection Act, 2019.
Punitive measures
The multi-agency team, a report finalized on Friday, recommended punitive measures against TFH including suspension of Worlcoin operations for twelve months.
Under the recommendations, the firm will be required to provide government access to its data, establish a local representative, and provide clarity on data storage.
The team recommended the pulling down of the WorldApp from all App Stores within Kenyan until Tools for Humanity complies with a security audit and issuance of access to their data.
Kassait urged MPs to institute legal reforms on the Data Protection Act 2019 saying that at least twenty six sections of the Act requiring amendments to align with emerging challenges and technological advancement in the processing of personal data.
The Data Commissioner said that Tools for Humanity exploited legal loopholes to process sensitive data of Kenyans.
“We want to urge this committee to look into the legal loopholes in the law because some of this companies take advantage of the legal loopholes as certificate of registration is not an issuance of licence,” Kassait told the lawmakers.
