EDPB explains the risks smart glasses pose to personal data protection
The European Data Protection Board (EDPB) has adopted a statement on smart glasses and published the report “The connected gaze. Video recording, surveillance and administering evidence in the age of smart glasses”, developed under the Support Pool of Experts (SPE) programme.
Smart glasses offer new opportunities for communication and everyday assistance, but they also raise questions about personal data protection. They look similar to ordinary glasses, yet may be equipped with cameras, microphones and internet connectivity. This means that people nearby may be filmed or photographed without their knowledge. Particular attention is needed when these devices are used in schools, hospitals and workplaces, as well as when children’s personal data are involved.
The EDPB stresses that people must be clearly aware when recording takes place, who processes their personal data and for what purpose. Recording signals should be reliable and easy to notice.
Users’ responsibilities depend on how they use their smart glasses. For example, when sharing recordings on a public social media account or using the glasses for professional activities, users become data controllers and must comply with the GDPR. Use solely for personal or household purposes may fall under the household exemption. Even then, other applicable laws must be respected. Manufacturers and providers of connected applications or services cannot transfer their own data protection obligations to users.
The expert report examines both smart glasses users’ experiences and the views of people who do not use these devices. The research shows that smart glasses can also become tools for monitoring other people and gathering evidence, creating power imbalances between device users and those being recorded.