The PCPD ruled that Worldcoin’s retention of sensitive biometric data, including face and iris images, for up to 10 years solely for AI model training was unjustified.