NATIONAL
Advocates Philippines
NPC Halts World App's Biometric Data Collection Over Privacy Violations
Photo credit: World App/NPC
QUEZON CITY, PHILIPPINES — The National Privacy Commission (NPC) has issued a Cease and Desist Order (CDO) against Tools for Humanity (TFH) — the company behind the World App and its Orb verification system — for multiple violations of the Data Privacy Act of 2012 (DPA).
In an official statement, the NPC ordered TFH to “immediately cease and desist from all processing of personal information, including biometric data,” related to the World App, the Orb, and their associated ecosystem in the Philippines.
Privacy Violations Identified
Following an investigation by its Complaints and Investigation Division (CID), the NPC found that TFH’s data processing practices breached several core principles of the DPA and the rights of Filipino data subjects.
The Commission cited four main grounds for the order:
• Invalid Consent Due to Undue Influence — The NPC said offering monetary incentives in exchange for iris scans compromised users’ freedom of choice, making consent “not freely given” and therefore invalid under privacy laws.
• Lack of Transparency and Information — TFH failed to provide clear and specific details on the purpose, nature, scope, and duration of data processing, including the absence of a detailed privacy policy.
• Excessive Collection of Biometric Data — The collection of iris scans was deemed disproportionate to TFH’s stated goal of “proof of humanity” or identity verification.
• Grave Risk of Harm — The continued use of immutable biometric data exposes Filipinos to serious risks such as identity theft, fraud, and lasting reputational damage.
NPC’s Strong Warning
“The integrity of a Filipino citizen's biometric data is non-negotiable, as it is a unique and immutable identifier,” said Deputy Privacy Commissioner Jose Amelito S. Belarmino II.
“When consent is compromised by the lure of compensation, it ceases to be a true expression of choice. This Cease and Desist Order is a clear signal that the NPC will not permit practices that exploit socioeconomic vulnerability or compromise fundamental data privacy rights in the pursuit of business objectives.”
Belarmino emphasized that accountability and compliance are essential to building public trust in the digital age.
Immediate Compliance Required
The NPC said Tools for Humanity is mandated to comply with the order immediately and reaffirmed its commitment to upholding the privacy rights of Filipinos.
The Commission added that it will continue to monitor compliance and ensure that data privacy laws are strictly enforced against any entity that violates the DPA.
In an official statement, the NPC ordered TFH to “immediately cease and desist from all processing of personal information, including biometric data,” related to the World App, the Orb, and their associated ecosystem in the Philippines.
Privacy Violations Identified
Following an investigation by its Complaints and Investigation Division (CID), the NPC found that TFH’s data processing practices breached several core principles of the DPA and the rights of Filipino data subjects.
The Commission cited four main grounds for the order:
• Invalid Consent Due to Undue Influence — The NPC said offering monetary incentives in exchange for iris scans compromised users’ freedom of choice, making consent “not freely given” and therefore invalid under privacy laws.
• Lack of Transparency and Information — TFH failed to provide clear and specific details on the purpose, nature, scope, and duration of data processing, including the absence of a detailed privacy policy.
• Excessive Collection of Biometric Data — The collection of iris scans was deemed disproportionate to TFH’s stated goal of “proof of humanity” or identity verification.
• Grave Risk of Harm — The continued use of immutable biometric data exposes Filipinos to serious risks such as identity theft, fraud, and lasting reputational damage.
NPC’s Strong Warning
“The integrity of a Filipino citizen's biometric data is non-negotiable, as it is a unique and immutable identifier,” said Deputy Privacy Commissioner Jose Amelito S. Belarmino II.
“When consent is compromised by the lure of compensation, it ceases to be a true expression of choice. This Cease and Desist Order is a clear signal that the NPC will not permit practices that exploit socioeconomic vulnerability or compromise fundamental data privacy rights in the pursuit of business objectives.”
Belarmino emphasized that accountability and compliance are essential to building public trust in the digital age.
Immediate Compliance Required
The NPC said Tools for Humanity is mandated to comply with the order immediately and reaffirmed its commitment to upholding the privacy rights of Filipinos.
The Commission added that it will continue to monitor compliance and ensure that data privacy laws are strictly enforced against any entity that violates the DPA.
Oct 7, 2025
We are dedicated storytellers with a passion for bringing your brand to life. Our services range from news and media features to brand promotion and collaborations.
Interested? Visit our
Contact Us page for more information. To learn more about what we offer, check out our latest article on services and opportunities.
