企業ガイド
Worldcoin and Iris-Scanning Privacy
Worldcoin, renamed World in 2024, is a project from the company Tools for Humanity.
このページでは4 分で読めます
概要
It scans people's irises with a device called the Orb to issue a World ID, a credential meant to prove that someone is a unique human, and it has offered WLD crypto tokens to people who sign up. It draws privacy scrutiny for three reasons: an iris pattern cannot be changed if it is exposed, early sign-ups were concentrated in lower-income countries, and several regulators have suspended or restricted its operations.
ディープダイブ
World is a proof-of-personhood project from Tools for Humanity. The Orb verifies a person and issues a World ID. Historically, the project described computing iris codes and comparing them with enrolled codes to establish uniqueness. Its current AMPC description differs: World says the Orb processes iris information into anonymized encrypted fragments without storing iris codes or plaintext Hamming-distance comparisons. Apps are designed to receive a proof and an app-specific nullifier, not an iris image or code. These are project claims, not an independent audit, and the protocol can change. Privacy concerns include an irreversible biometric, whether sign-up consent is informed, retention and deletion, and protections for minors. A 2022 MIT Technology Review investigation reported incentives and limited explanation during some early sign-ups. In 2024 World announced “personal custody,” with iris images encrypted and stored on the user’s phone. The later AMPC design, launched in 2025 and updated in May 2026, is described by World as using encrypted fragments across multiple parties. Regulators have taken different actions. Kenya suspended operations in 2023; in May 2025 its High Court ordered deletion of biometric data collected there using the Orb. Spain and Portugal temporarily halted collection in 2024, and Hong Kong’s privacy regulator ordered Worldcoin to cease iris and face scanning. On December 19, 2024, Bavaria’s data protection authority (BayLDA) issued a corrective order requiring GDPR-compliant erasure and explicit-consent procedures and deletion of specified iris codes and encrypted shares collected from 2023 through December 13, 2024. This case-specific order addressed the processing examined at that time, not every later version of the system. Those orders address processing and periods considered in each proceeding; they do not decide every question about later systems, model training, or service terms. Check current regulator records and distinguish them from the company’s technical claims.
戦略的影響
ベンダー戦略
ベンダーのロードマップは、チームが次に構築できる機能に影響を与えます。
費用と予算
商業条件と導入オプションは、長期的なコストとリスクに影響します。
リスクと安全性
企業のインセンティブは、製品のデフォルト、安全姿勢、オープン性を形成します。
The Future of Worldcoin and Iris-Scanning Privacy
Demand for proof-of-personhood tools is likely to grow as AI-generated accounts spread. World now competes with government digital IDs and other verification methods. Its expansion, including a U.S. launch in 2025, keeps its practices in front of regulators. Several questions remain open: whether courts and data protection authorities accept its encryption and deletion measures, how it handles consent and the exclusion of minors, and how users can scrutinize the entities and protocol that control identity verification. Outcomes are likely to vary by jurisdiction rather than be settled globally.
現実世界の実装
A 2022 MIT Technology Review investigation reported on Orb sign-ups in countries such as Indonesia and Kenya. It described cash and token incentives, limited explanation of how data would be used, and gaps between the project's privacy claims and its early practices.
Kenya suspended Worldcoin activities in August 2023. In May 2025, its High Court later quashed the challenged collection decision and ordered erasure of biometric data gathered there with the Orb; that was a case-specific judgment, not a global shutdown.
In March 2024 Spain's data protection agency ordered a temporary halt to Worldcoin's data collection there, and Portugal's regulator imposed a similar suspension the same month.
A social platform adds World ID to its sign-up flow to limit bots. The platform receives a cryptographic proof that the user is a verified unique human, plus an identifier specific to that app. It never receives the iris code itself.
リスクとガードレール
実際の制作ワークフローでは、発売の発表が安定性を上回る可能性があります。
API の価格設定やポリシーの変更により、一夜にして想定が崩れる可能性があります。
単一ベンダーへの依存により、ロックインと移行のコストが増加します。
実装ロードマップ
独自のタスクとデータセットを使用してプロバイダーを評価します。
統合する前に、プライバシー、セキュリティ、法的条件を確認してください。
モデルやベンダー全体でフォールバック計画を維持します。
ロードマップの変更がチームを驚かせないように、リリース ノートを監視します。
探検を続けましょう
Free newsletter
Get the daily AI briefing
Three verified AI stories every weekday morning, written in plain English. Free forever, no ads.
One email each weekday. Unsubscribe in one click. We never sell or share your address.
Test yourself
Take the Worldcoin and Iris-Scanning Privacy quiz
Instant feedback on every answer, and a shareable certificate with a verifiable ID once you pass a course.
Support free AI education. AI Understanding is a 501(c)(3) nonprofit — no ads, no paywall, ever. Make a donation
よくある質問
What is Worldcoin and Iris-Scanning Privacy?
Worldcoin, renamed World in 2024, is a project from the company Tools for Humanity. It scans people's irises with a device called the Orb to issue a World ID, a credential meant to prove that someone is a unique human, and it has offered WLD crypto tokens to people who sign up. It draws privacy scrutiny for three reasons: an iris pattern cannot be changed if it is exposed, early sign-ups were concentrated in lower-income countries, and several regulators have suspended or restricted its operations.
Why can't an iris code simply be protected by running it through a cryptographic hash?
Iris matching tolerates small differences between scans. A cryptographic hash changes completely when even one bit changes, so matching on hashes would fail.
According to World’s current AMPC description, how is uniqueness checked without storing iris codes?
The guide reports World’s current AMPC description: encrypted fragments are used for uniqueness checks while the project says it does not store iris codes or compare plaintext Hamming distances. This is a project architecture claim; the guide distinguishes it from earlier designs and regulator decisions.
When an application verifies a World ID proof of human, which information does it receive?
World ID is designed so apps learn only that the user is a verified unique human. The iris data stays out of the app's hands.
How does a per-application nullifier help World ID proofs avoid cross-site linkability?
Because the nullifier is specific to each app and action, it blocks duplicate sign-ups while preventing apps from connecting a user's activity across services.
What did Kenya’s High Court order in May 2025 regarding Worldcoin data collected there?
The High Court ordered erasure of the biometric data collected from Kenyan residents through the Orb; the order concerned the Kenyan collection and respondents.
学び続ける
関連ガイド
このトピックのために選ばれたその他のガイド