Developing
The statement names no company, sets no deadline and has no binding effect; it was not preceded by a public consultation.
In 60 seconds
- The EDPB's statement, signed by chair Anu Talus, runs eight pages with 36 numbered paragraphs.
- Device makers and linked AI service providers may be controllers and cannot shift transparency duties onto wearers.
- The household exemption must be "narrowly construed", and legitimate interest would be "particularly difficult to demonstrate" for AI training.
- The board recommends hard-to-disable LEDs, audio cues and design features that distinguish the glasses from ordinary eyewear.
Impact Layer
- What changed
- European regulators have set out how they expect camera-equipped wearables to meet GDPR duties.
- Why it matters
- Camera glasses record bystanders who cannot consent, and any product that sends such data to AI services will face these questions.
- Who is affected
- Wearable makers, AI service providers and marketers considering ambient-capture products.
- Martech stack area
- AI, Data
- Stack impact
- If you build or plan to use camera wearables, document the legal basis for bystander data and the visible cues you provide.
- Business impact
- Moderate A preliminary, non-binding statement relayed by PPC Land. Critics, including Brussels lawyer Peter Craddock, questioned the "social acceptability" angle and the lack of consultation.
- Related technologies
- What to watch
- Whether formal guidelines follow and how makers respond.
The European Data Protection Board adopted a statement on smart glasses on October 13, 2026, according to PPC Land. It runs eight pages with 36 numbered paragraphs and 39 footnotes and is signed by chair Anu Talus. A separate report, “The connected gaze”, was published alongside it; the board says that report may not reflect its official position.
Key positions
- Device makers and providers of linked AI services may be controllers under the GDPR. A terms-of-service clause asking wearers to inform bystanders does not discharge those duties.
- The household exemption must be “narrowly construed”; posting footage to a public account can take a wearer outside it.
- Bystander consent is difficult to obtain, and consent collected after recording is invalid.
- Legitimate interest would be “particularly difficult to demonstrate” for AI training or commercial further processing.
- Recommended: transparency by default, such as hard-to-disable LEDs, audio cues and optional phone proximity alerts.
Criticism
Peter Craddock, a Brussels lawyer, asked on LinkedIn how “social acceptability” is part of data protection authorities’ remit, and argued the board skipped promised stakeholder engagement.
What it does not do
It names no company, declares no current product unlawful and sets no deadline or enforcement action. It is a preliminary statement, not formal guidelines.
Our read
The message is design-led: if a device records people who cannot opt in, make the recording obvious. Expect similar questions for any ambient-capture product.
Sources
- PPC Land: EDPB says smart glasses makers can't rely on wearers to meet GDPR duties (opens in a new tab)
Source for the statement's positions, criticism and what it does not do.