The Digital Economy and Society (DES) Ministry has ordered a nationwide review of iris-scanning cryptocurrency schemes amid growing concerns over privacy risks.
DES Minister Chaichanok Chidchob has directed the Personal Data Protection Committee (PDPC) to conduct strict inspections across the country, following public unease about the collection and use of biometric data for digital currency exchanges.
The PDPC recently issued a warning to the public, highlighting the potential dangers of trading iris scans for cryptocurrency. The committee stressed that iris data is classified as sensitive personal information under Thailand’s Personal Data Protection Act (PDPA), making its protection a legal requirement.
“Activities involving iris scans may compromise individual privacy and increase the risk of misuse of biometric data,” Mr. Chaichanok said.
To ensure compliance and transparency, the ministry is working closely with Tools for Humanity (TFH) and relevant state agencies.
The review will focus on three key areas. First, data retention and destruction: companies must provide evidence that iris data is deleted immediately after its intended use.
Second, control over paid scanning services: citizens are advised to exercise caution while authorities investigate the sources of funding and how data is handled.
Third, transparency and consent: organizations must clearly disclose how data is used, encrypted, and protected, and ensure that user consent is genuinely obtained.
The DES Ministry emphasized that the inspections aim to safeguard personal privacy and prevent potential misuse of sensitive biometric information.
Authorities said they will take strict action against any entities found violating privacy regulations, signaling increased scrutiny over emerging technologies that trade personal data for digital assets.
