CEPD issues guidance on data protection challenges of smart glasses

What happened

The European Data Protection Board adopted a declaration on connected glasses and released a report outlining privacy risks. It clarifies when users act as data controllers under the GDPR and stresses that manufacturers and service providers cannot shift their obligations to users. The declaration calls for sectoral standards and greater transparency about data processing.

Why it matters for trust and compliance

• Its status is published. It is enacted but may not be in force yet. Check the effective date before planning around it.
• The guidance highlights how smart glasses raise new privacy challenges and sets expectations for users, manufacturers, and service providers under EU data protection law.

Who is affected

Recommended actions

1. Check that privacy notices describe the practices this addresses.
2. Map the security requirements to existing controls and close gaps.