European privacy board issues preliminary guidance on smart glasses and bystanders
The European Data Protection Board adopted a smart-glasses statement on October 13, addressing discreet recording, responsibility for personal data and clearer signals to bystanders. It is preliminary regulatory guidance under existing law, not a new EU-wide ban on smart glasses.
Confirmed facts
Responsibility depends on the actual processing
The EDPB explains that GDPR responsibilities can involve users, device makers and connected-service providers, depending on who determines the processing. A narrowly assessed household exemption may cover purely private use; public sharing or professional activity can fall outside it. Other laws may apply even where that exemption does.
The board calls for effective transparency measures, including noticeable recording indicators, and discusses local processing, reduced retention and protective defaults. It cautions that manufacturers and service providers cannot simply shift their own obligations onto wearers.
A statement and a separate commissioned report
The accompanying news announcement also introduces an externally authored report about smart-glasses use. The EDPB expressly distinguishes that contractor's views from its own position. Neither publication should be reported as legislation imposing a blanket prohibition. This coverage is not legal advice about a particular recording or deployment.
What deployment teams can examine now · Analysis
A practical procurement review should trace the complete journey of an image or conversation: collection, on-device analysis, service access, retention and onward sharing. The person wearing the frame may not be able to explain every stage without documentation from the supplier. That makes a clear responsibility map more useful than a generic assurance that a product respects privacy.
A second test concerns people who are not customers. Can a nearby person understand when processing is happening, and can an organization explain how concerns will be handled? These are design and operational questions, not findings that every currently sold device fails a legal test.
Why it matters · Analysis
The statement places bystander experience alongside wearer convenience in the adoption debate. Organizations considering glasses should assess governance and support procedures with the hardware, rather than treating privacy as a notice added after purchase. The document does not decide the legality of every use case; context-specific assessment remains necessary.