The Information Commissioner's Office (ICO) in the UK is investigating World Coin's biometric data collection practices due to the classification of biometric data as high risk and the need for a lawful basis for processing such data. The ICO is expected to take time to conduct a thorough investigation, and its full scope is not yet known. This investigation comes after Kenya halted World Coin's services, and France and Germany are coordinating their investigations following concerns raised by France's privacy authority about the legality of World Coin's biometric data collection practices. The situation highlights the challenge governments face in regulating tech companies, often playing catch up due to the companies' rapid advancements and the governments' slower regulatory processes. The need for proactive and robust regulation is emphasized to prevent risks and vulnerabilities for individuals using such technologies.