Worldcoin suspended in Thailand over iris scanning privacy concerns
Thailand's Personal Data Protection Committee (PDPC) ordered Worldcoin to halt its iris scanning operations and delete over 1.2 million biometric records. The regulator concluded that the practice of trading biometric data for cryptocurrency breached the national Personal Data Protection Act.
Worldcoin's biometric collection model was deemed illegal by Thai regulators for trading sensitive iris data for cryptocurrency.
Key facts
- What
- Thailand's Personal Data Protection Committee (PDPC) ordered Worldcoin to halt its iris scanning operations and delete over 1.2 million biometric records.
- Incident date
- Nov 24, 2025
- Who
- Worldcoin
- Failure mode
- Policy Violation
- AI surface
- Computer Vision
- Severity
- High
What happened
Thailand's Personal Data Protection Committee (PDPC) ordered Worldcoin to immediately suspend its iris scanning services and delete over 1.2 million biometric records. The regulator found that the company's practice of trading biometric data for cryptocurrency violated the Personal Data Protection Act.
What broke inside the model
- 01 · TriggerA prompt pushes against a deployment boundary.
- 02 · Model stepThe model produces the disallowed output.
- 03 · Control gapNo enforcement blocks it at generation time.
- 04 · FailureThe output crosses the policy line.
- 05 · ConsequenceA limit the business set is breached in public.
The output crosses a policy boundary the deployment had defined.
The failure occurred in the legal and regulatory framework governing the AI's data collection process. The system lacked a lawful basis for processing sensitive biometric data for financial incentives under Thai law.
What it cost
Sources
- PressPDPC tells firm to halt iris scan servicebangkokpost.com
- PressThai data regulator orders World to stop iris-scanning serviceforklog.com
Cite this entry
https://failureindex.ai/failures/worldcoin-suspended-thailand-iris-scanning-privacyAI Failure Index. "Worldcoin suspended in Thailand over iris scanning privacy concerns" (FI-0384). Realm Labs. https://failureindex.ai/failures/worldcoin-suspended-thailand-iris-scanning-privacy (indexed Jun 9, 2026).Data fields CC-BY 4.0, prose citation permitted. Incident ID FI-0384. Full dataset at /data.
Note from Realm Labs, the Index steward
How Realm fits
- Prism
- OmniGuard
This entry sits in the index's predictive wing: a system that scores, ranks, perceives, or steers rather than generates. Realm's runtime layer is built for the generative and agentic systems now moving into these same decision seats, where it watches a model's internal state and holds an unsupported claim or an unchecked action before it commits. The control gap on this record, an automated decision that reached people with no runtime check in front of it, is the same gap. The index keeps predictive failures on the record because the pattern carries straight into the systems shipping today.