World App, Orb ordered to stop PH data processing

The National Privacy Commission (NPC) has ordered Tools for Humanity (TFH), the tech company behind World App and the Orb verification system, to immediately stop “illegal” personal data processing.

But World in the Philippines, the local operator of TFH, said it would file a motion for reconsideration and avail of all remedies. It lamented that the NPC decision was “a setback for responsible digital innovation.”

“The decision, if not reversed, could deprive millions of Filipinos of technology designed to protect them from scams, identity theft and AI-driven fraud,” the company said in a statement.

The NPC issued a cease and desist order against TFH, noting that the latter had violated certain provisions of the Data Privacy Act of 2012, its implementing rules and regulations as well as NPC issuances.

The NPC found out that TFH had exerted “undue influence” by offering monetary incentives to individuals in exchange for iris scans. Since the consent was not freely given, the NPC said it was invalid.

The NPC also flagged the lack of transparency and information, citing TFH’s failure to adequately inform data subjects of the purpose, scope, extent and duration of data processing. No clear or accessible explanation was provided in its privacy notice or policy, it noted.

Likewise, the commission cited the excessive collection of immutable biometric identifiers, including iris pattern.

The continued processing of such biometric data is seen to expose Filipino data subjects to what the NPC described as “serious and lifelong risks, such as identity theft, fraud and reputational harm.”

“The order comes as a surprise given we worked closely with regulators to ensure that our technology not only meets but exceeds the country’s data protection requirements,” said Ryuji Wolf, a local operator representing World in the Philippines.