Worldcoin’s Biometric Bid: Exploring Privacy Implications

In the age where personal data becomes currency and privacy a luxury, the responsibility falls upon us, the users and beneficiaries, to tread carefully. Worldcoin, launched by OpenAI’s Sam Altman on July 24, is at the forefront of this paradigm shift. Almost a month since its launch, this novel technology’s promise of biometric data as the passport to the future has sparked significant regulatory discourse and debates on the right balance between security, anonymity, and accessibility.

Worldcoin’s central proposition is alluring yet controversial: Scan your iris with their unique ‘orb’ device and, in return, receive a share of cryptocurrency tokens (WLD). The underlying ambition aims to draw a line to differentiate between humans and AI in an era where intelligence may not be enough to reliably identify personhood. Over 2 million individuals have opted in, handing over their unique biometric identifiers to this ambitious project.

Proof-of-Personhood: Can We Ensure Authencity in Worldcoin’s Ecosystem?

Worldcoin’s primary objective amidst the tidal wave of AI advancements is distinguishing real human users from AI bots or deepfake entities. This differentiation is not a mere tech gimmick; it’s foundational for systems that base operations on user uniqueness and authenticity. To this end, Worldcoin’s “proof-of-personhood” mechanism has emerged.

Worldcoin’s method involves generating a unique iris code based on this biometric detail. While irises, like fingerprints, are individual to each person, the reliance on such biometric data invokes concerns about user privacy, data security, and potential misuse. Though innovative, merging biometrics with blockchain technology comes with challenges, especially regarding data breaches or system vulnerabilities.

Ethereum co-founder, Vitalik Buterin, voiced his reservations about Worldcoin’s identity verification methods. He cautioned that a universal approach to validating people’s identities might not exist. A concern Buterin highlighted with Worldcoin is the Orb’s limited global presence and the potential for users to unintentionally disclose more data than they realise during the iris scans.

He underscored the potential vulnerabilities within the device, stating that,

“Even if the software layer is perfect and fully decentralised, the Worldcoin Foundation still has the ability to insert a backdoor into the system, letting it create arbitrarily many fake human identities,”

While the “proof-of-personhood” concept solves the AI impersonation challenge, it’s worth noting that no system can be entirely foolproof. As deepfake technologies evolve and become more sophisticated, there’s potential for such systems to be outsmarted or bypassed.

Kenya Bans Worldcoin’s Biometric Data Collection

The campaign initially launched in developing nations, with thousands lining up at registration sites. Kenya cautioned its residents about providing their information to private firms.

The Communications Authority of Kenya expressed concerns regarding the following:

• The storage of biometric information

• Offering money in return for personal data

• The control of vast amounts of data by a single, private entity

These apprehensions led to Kenya prohibiting Worldcoin’s data-gathering activities. The offer of $60 to Kenyans, which equates to nearly half of the average monthly income in the region, highlighted these ethical concerns. This raised suspicions of potential exploitation, prompting critics to question whether Worldcoin was capitalising on the economic vulnerabilities of the Kenyan populace.

The ICO’s Perspective on Worldcoin

The Information Commissioner’s Office (ICO), on July 31, 2023, took a definitive stance on Worldcoin, primarily concerning its UK launch.

The ICO mandated a Data Protection Impact Assessment (DPIA), considering the high-risk nature of biometric data processing by Worldcoin. The ICO stated that individuals should freely consent and have the liberty to withdraw without facing any repercussions.

The ICO’s ability to levy substantial penalties in case of significant data breaches adds a layer of accountability to Worldcoin’s operations. In April, a fine of £12.7m was imposed on TikTok, underscoring the ICO’s assertiveness. The statement’s broad nature suggests that a comprehensive investigation is underway, resonating with views shared by other European regulators.

However, the UK and the EU have indicated a general openness to the crypto sector, hinting at the potential for collaboration once these concerns are addressed.

Worldcoin’s Main Privacy Concerns

• Informed Consent: There are doubts about whether users genuinely comprehend the implications when they consent to share their biometric details.
  
  

• Single Entity Control and Data Centralisation Risks: With one organisation wielding control over such a vast amount of sensitive information, we must ask;
  
  

• Is it right for so much power to be concentrated in one place?
  
  

• Is this concentration of data indeed in the best interest of users?
  
  

• Can we trust one entity with such a responsibility?
  
  

• Do the risks outweigh the benefits?
  
  

• Data Transparency: Even though Worldcoin has provided assurances regarding the privacy and safety of user data, doubts remain. Can they consistently maintain high-security standards? And will they stay wholly transparent about every aspect of their data operations?
  
  

• Regulatory Scrutiny: Several European data watchdogs are investigating the large-scale collection of sensitive data by Worldcoin. French Privacy Data Agency CNIL is actively questioning the legality of Worldcoin’s methods. The Bavarian State Office for Data Protection Supervision launched an investigation into Worldcoin in November 2022 due to concerns over the processing of sensitive data on a vast scale. The interest is heightened as Tools For Humanity, Worldcoin’s parent company, has a subsidiary in Germany.

At a Crossroads

In the face of global reactions that span from cautious optimism to outright resistance, Worldcoin finds itself at a crossroads. The project’s future, undoubtedly, hinges on its ability to address these varied concerns while staying true to its ambitious vision.Ultimately, while Worldcoin has initiated a compelling conversation, the onus of defining the narrative and setting boundaries falls upon the collective conscience of the global community. As we navigate this uncharted territory, let’s remember to prioritise humanity, in all its facets above all else.