The PCPD ruled that Worldcoin’s retention of sensitive biometric data for up to 10 years solely for AI model training, including face and iris images, was unjustified.