The European Data Protection Board (EDPB) adopted a Statement on smart glasses on 13 October 2026. These are initial interpretative reflections, not guidelines or guidelines (the Statement does not introduce a general ban on smart glasses). Cameras, microphones, streaming and artificial intelligence functions can acquire data from people who do not use the device and do not perceive that they are being filmed or heard. The EDPB reports accentuated risks in places of care, schools, workplaces and restricted spaces, including for business secrets and intellectual property.

The distribution of roles depends on who decides on the purposes and means: the user, producer and provider of the app or AI function can be independent controllers or joint controllers. The exception for exclusively personal or domestic activities is interpreted strictly: it does not cover professional use or publication on a social profile open to an indeterminate number of people. Furthermore, any exemption of the private user does not exempt the producer and provider from their obligations.

Traditional information aimed at the buyer alone is not sufficient for the third parties filmed. The Committee proposes visible and difficult-to-deactivate registration signals, possibly combined with acoustic indicators and other contextual measures. Consent from passers-by collected after filming does not legitimise the collection that has already taken place; legitimate interest requires a concrete balance and is particularly difficult to sustain for commercial reuse and AI training. Minimisation, retention, rights, special data, transfers and, in relevant cases, ePrivacy rules remain to be assessed.

For manufacturers, app providers and companies evaluating the use of the device, data acquisition, real-time support and reuse should be separately mapped, as well as the legal basis and feasibility of transparency towards third parties should be verified, and continuous recording and access to sensitive areas should be restricted.