The collection of facial and iris images is deemed unnecessary and excessive. Worldcoin unfairly collects personal data, and there is a lack of Chinese versions of relevant documents. The staff at the operating point failed to fully explain or confirm the participants’ understanding of the content of the documents and did not inform them of the risks or answer their questions.
Participants were not clearly informed of the purpose of collecting personal data, whether the provision of data is voluntary, the transfer of data recipients, and the statutory information on the right to access and rectify.
Worldcoin retains personal data for up to 10 years for the purpose of training artificial intelligence models for identity verification procedures, which is considered excessive data retention.
The transparency of policies and standard practices for handling personal data is insufficient, and the absence of a Chinese version of the “Privacy Statement” makes it difficult for participants who are native Chinese speakers to understand the relevant policies and terms.
Participants were unable to exercise their right to access and rectify personal data.