Is World’s biometric ID model a threat to self-sovereignty?

Worldcoin, Sam Altman’s ambitious project, aims to verify human uniqueness through iris scans and distribute its WLD token globally, promoting financial inclusion. However, significant criticism targets its biometric methods, deemed invasive, overly centralized, and contradictory to decentralization and privacy principles.

The core concern revolves around the inherent centralization of biometric identity systems relying on proprietary hardware (the Orb), closed authentication, and centralized data control. Shady El Damaty, co-founder of Holonym Foundation, argues that Worldcoin’s architecture, despite employing multiparty computation (MPC) and zero-knowledge (ZK) proofs, undermines its decentralization claims due to this reliance on custom hardware and centralized code. This concentration of power creates a single point of failure and control, directly opposing the promise of decentralization.

While Worldcoin maintains that its infrastructure isn’t centralized, stating the World App is non-custodial and iris photos are deleted from the Orb after encryption and anonymization, critics remain unconvinced. Evin McMullen of Privado ID acknowledges that the biometric model isn’t inherently incompatible with decentralization but highlights challenges in implementation, particularly concerning data centralization, trust assumptions, and governance.

Further comparisons are drawn between Worldcoin’s data collection and OpenAI’s past practices, highlighting a pattern of aggressive data acquisition framed as innovation. El Damaty points to OpenAI’s scraping of unconsented user data, arguing both instances reflect a disregard for privacy. Worldcoin rejects this comparison, emphasizing its separate entity status and use of privacy-preserving technologies.

Concerns extend to user onboarding, particularly in developing nations where informed consent may be compromised. Several global regulators have expressed concerns, leading to challenges like the temporary suspension of Worldcoin’s registration in Indonesia. The long-term implications raise fears of digital exclusion, creating a two-tiered society where access to services depends on biometric data provision. Worldcoin counters that biometric enrollment isn’t mandatory for basic participation.

The debate also encompasses governance. While Worldcoin points towards decentralization through open-source contributions, critics argue meaningful user ownership is lacking. The need for secure identity systems is undeniable, given the increasing sophistication of AI and blurring lines between human and non-human actors online. However, the path to achieving this security while respecting privacy and decentralization remains highly contested.