EDPB: when the GDPR applies to people wearing smart glasses
In an initial statement, the European Data Protection Board explains when people recording with smart glasses have obligations under the GDPR.
Source of truthedpb.europa.eu/…/edpb-publishes-stateme…On October 13, the European Data Protection Board (EDPB) announced statement 1/2026 on smart glasses, initial and preliminary guidance for users, manufacturers and service providers. If you post a photo or video on a public social media account, or wear the glasses in professional or political activities, you count as a data controller under the GDPR. Recording family or friends, or using them for translation in a private setting, falls outside the GDPR, though criminal, civil or labor law may still apply. Manufacturers cannot pass their obligations on to users. EDPB Chair Anu Talus says the glasses should make recording obvious, for example with a bright LED or a sound. The Board also published “The connected gaze”, a report by an external contractor.
Related stories
Microsoft: Storm-0940 group automated attacks with AI agents
According to Microsoft, Storm-0940, which it assesses as China-state aligned, used the open-source ARTEX framework to automate attacks targeting hundreds of organizations; most of the targeting was not successful.
LiteLLM: malicious version 1.107.0 published to PyPI and Docker
According to LiteLLM, version 1.107.0, pushed on October 21, contained malware that steals credentials. LiteLLM advises anyone who installed it on a host with outbound internet access to assume the data was exfiltrated and to rotate keys and secrets.