Skip to content
Brief Security & Trust ·

EU regulator: smart glasses makers can't pass privacy duties to wearers

The EDPB says makers and AI providers stay responsible under GDPR; India has no such guidance.

In brief
  • The EDPB said on October 13 that makers and AI providers cannot rely on wearers to meet their GDPR duties. Its statement is non-binding.
  • MediaNama reported that India has no regulatory guidance on who is responsible when a wearer films a bystander.

The European Data Protection Board (EDPB) said on October 13 that smart glasses makers cannot leave their privacy duties to the people who wear the glasses, MediaNama reported. The EDPB is the body that brings together EU data protection regulators. It said the same applies to firms that provide linked apps and AI services. It wants glasses to show clearly when they record, using bright lights, sounds, phone alerts and a distinct look. It also urged face blurring on the device and no footage storage by default for live AI assistant features.

The statement is not binding. It does guide how EU regulators judge compliance with the GDPR, the EU's privacy law. The EDPB said more guidance on smart glasses may follow. In India, MediaNama reported, no regulator has said who is responsible when a wearer films a bystander. India's 2023 data protection law does not cover data handled for personal or domestic purposes. No Indian court has ruled on whether a maker is liable when its glasses record a bystander.

Teams that build or buy devices, apps or AI tools that process camera footage of people should note the EDPB's view. The company running the AI assistant is responsible for that data under the GDPR, not only the wearer. In India, that question has no official answer yet.

A WebPulse Brief: a short report of an important event, written by the WebPulse Newsroom with AI assistance and checked against the reporting below. When there is more to explain, we follow up with a full story. How we use AI.

Reporting: MediaNama.