Smart Glasses and GDPR: Why Europe Is Cracking Down on Camera-Equipped Eyewear

2026-06-10 · Source: GDPR Local · Field: Legal & Regulatory — Compliance & Risk Management, Regulatory Affairs & Government Relations, Legal Technology (LegalTech) · Depth: Intermediate, long

Summary

European regulators are intensifying scrutiny of smart glasses with built-in cameras, such as Meta's Ray-Ban models, which sold over 7 million pairs worldwide in 2025. The core concern is the inability of bystanders to provide informed consent when being recorded by these devices, which are less obvious than smartphones. This regulatory crackdown, led by France's CNIL and the European Data Protection Board (EDPB), was significantly triggered by a 2026 Swedish media report revealing that Meta contractors in Kenya reviewed deeply private footage, including bathroom visits and banking details, for AI training. The EDPB is preparing a report on the "social acceptability" of smart glasses due in summer 2026. The debate also extends to potential facial recognition capabilities, which would elevate data to a special category under GDPR Article 9 and engage EU AI Act provisions, posing a much larger compliance challenge for manufacturers and deployers.

Key takeaway

For Directors of AI/ML or Legal Professionals deploying camera-equipped wearables, you must proactively address the heightened GDPR compliance risks. Regulators are scrutinizing smart glasses due to consent issues and potential facial recognition. Your organization should map current usage, establish a lawful basis for data capture, and conduct Data Protection Impact Assessments (DPIAs) for high-risk scenarios, especially if AI analysis or biometric features are involved. Ignoring these obligations creates significant legal exposure as EU enforcement intensifies.

Key insights

Smart glasses pose significant GDPR compliance risks due to invisible recording and lack of bystander consent, prompting EU regulatory action.

Principles

• GDPR Article 6 requires a lawful basis for image capture.
• Special category data (Article 9) needs explicit consent.
• DPIAs are mandatory for high-risk biometric processing.

In practice

• Map existing smart glasses use within your organization.
• Document a lawful basis for any footage retention.
• Implement clear policies on recording and data rights.

Topics

• Smart Glasses
• GDPR Compliance
• Data Privacy
• Biometric Data
• AI Act
• Consent Mechanisms
• Data Protection Impact Assessment

Best for: Legal Professional, Consultant, Director of AI/ML

Related on AIssential

• Samsung’s entry into AI-powered glasses forces CISOs to again consider corporate risk — AI smart glasses escalate covert data capture risk, demanding tiered policies and user education over unenforceable bans.
• Europe expands regulatory crackdown on Big Tech — European regulators are actively challenging Big Tech's market dominance and privacy practices, particularly concerning AI and emerging technologies.
• An Indian Trans Person’s Harrowing Encounter Fuels Backlash Against Meta AI ‘Pervert Glasses’ — Meta's smart glasses raise critical privacy, consent, and ethical concerns for users, bystanders, and data workers.
• Smart glasses in court are a privacy nightmare — Smart glasses pose significant privacy and enforcement challenges for established courtroom recording prohibitions.
• VICTORY: Meta Strips Facial Recognition Code From Smart Glasses App After Public Outcry — Public outcry and independent research can compel tech companies to remove privacy-invasive features, highlighting the need for robust consumer privacy laws.
• Smart glasses are deeply creepy. Why are celebrities like Kylie Jenner endorsing them? — Wearable recording devices like Meta's AI glasses pose significant privacy and safety risks, often circumventing intended safeguards.

See Counsel's argued verdicts on the open AI decisions leaders are weighing →

Open in AIssential →

Editorial summary, takeaway, and curation by AIssential. Original article published by GDPR Local.