Skip to content
Submit incident
AII-1001-99257
ConfirmedA court, a regulator or the organization itself has stated the core facts, or the record cites a court or regulator source.

Indonesia suspends WorldID service over biometric data privacy violations

Indonesia's communications ministry suspended the WorldID biometric verification service operated by Tools for Humanity after finding it violated data protection laws and targeted vulnerable populations unethically. The regulator ordered deletion of all collected iris biometric data and closure of scanning operations.

16 June 2025 Β· Tools for Humanity Β· Privacy and surveillance
16 June 2025
AII-1001-992576 sources ↓
Quick facts
Category
Privacy and surveillance
Country
Indonesia
Source
katadata.co.id
Date
16 June 2025
Drafted by
Raidu Incident Detection

What happened

Indonesia's Ministry of Communication and Digital (Komdigi) suspended the WorldID platform operated by Tools for Humanity and its local partner PT Sandina Abadi Nusantara after determining the service violated personal data protection regulations and electronic system operator obligations.

Komdigi ordered World to delete all biometric iris data collected from Indonesian citizens in Jakarta and Bekasi. The ministry's technical evaluation found violations in data protection provisions and administrative obligations for electronic system operators.

Reported impact

Komdigi determined that World's biometric data collection targeted vulnerable populations including children, teenagers, elderly people, persons with disabilities, people with low literacy, and those in remote areas with limited access to information. The practice was deemed unethical.

World offices in Jakarta and Bekasi were closed and biometric scanning operations were halted as a precautionary measure to protect citizens from iris biometric data collection risks.

Index analysis

Tools for Humanity stated it does not store or sell personal data including iris biometrics, and that user identities are anonymized after verification. The company claimed iris images are encrypted end-to-end, sent to the user's device, and then permanently deleted from Orb devices.

Governance controls

Komdigi determined that Tools for Humanity and its partners must comply with Indonesia's data protection regulations and obligations as electronic system operators, and must demonstrate such compliance before operations can resume.

Classification

Category
Privacy and surveillance
Industry
Government, security and defence
Country
Indonesia
Harm status
Potential harm
Intent
Unknown
Timing
Post-deployment
Harm types
Human or fundamental rights
Harmed
General public, Children
Consequences
System suspension or termination, Regulatory investigation
AI systems
WorldID
Regulations
GDPR (cited)

Sources and evidence

This record was researched and written by the Index, based on the following original reporting.

katadata.co.id
Komdigi Masih Blokir WorldID, Minta Data Iris Mata Warga Indonesia Dihapus - Startup Katadata.co.id
16 June 2025
Warta Kota
Komdigi Hentikan Sementara Platform World, Alexander Sabar: Langkah Preventif Lindungi Masyarakat
16 June 2025
ANTARA News - The Indonesian News Agency
Kemkomdigi: Penghentian sementara platform WorldID masih berlaku
16 June 2025
CNBCindonesia
Komdigi Sanksi World, Data Retina Mata Warga RI Wajib Dihapus
16 June 2025
CNNindonesia
Komdigi Sanksi Platform World, Data Iris Mata Warga RI Wajib Dihapus
16 June 2025
Liputan 6
Sanksi Platform World, Komdigi Minta Data Biometrik Masyarakat RI Dihapus
16 June 2025