Seventy Permissions and a Cloud Connection: Why Smart Glasses Are Becoming a Compliance Headache
Published on 10/07/2026 at 12:02 | Editorial boerse-global.de
Factory floors, warehouses and service vans have quietly become testing grounds for a technology that legal teams are still trying to get their heads around. Smart glasses promise hands-free instructions and instant image analysis, but the way they are built — and the data they ship off-site — sits uncomfortably with the rules that govern trade secrets and personal privacy.
A fresh round of expert analysis has put the spotlight on that tension, examining both the hardware's technical architecture and the legal framework employers must navigate before handing the devices to staff.
Every pair tested sent data to the cloud
Cybernews looked at seven brands of AI-equipped glasses and found that all of them handled core functions — speech, translation and image analysis — through the cloud. Five of the seven manufacturers declined to say how long they keep the data they process.
The companion apps are just as demanding. The application paired with Meta's glasses requests 70 permissions, among them 18 that Android classifies as dangerous, covering access to audio recordings, SMS messages and external storage.
Meta's app does include a tracker; other vendors such as INMO Global and Solos AirGO each build in six. Either way, routing sensitive image and sound data to outside servers raises hard questions about protecting confidential business information.
Technical safeguards have limits here too. Measures like holding your own encryption keys only shield data at rest — during AI processing, content has to be read in plain text.
Regulators have already weighed in
Germany's Data Protection Conference (DSK) has published guidance on handling smart glasses, and supervisory authorities take a sceptical view of everyday use.
In a review dated 10 September 2026, the Hamburg Commissioner for Data Protection and Freedom of Information (HmbBfDI) concluded that recognisable recordings of people outside a private circle of friends and family are not permissible under data protection law absent informed consent, barring rare exceptions. The built-in indicator LED does not do enough to inform bystanders, the office found, since how visible it is depends on lighting and distance.
Professionals bound by confidentiality obligations face an extra layer of difficulty. While the Criminal Code permits the involvement of supporting personnel when data is protected under professional rules, that route obliges companies to put contractual confidentiality agreements in place to avoid criminal liability.
Where there is no effective legal basis — and no contractual safeguards such as standard contractual clauses for transfers to third countries — businesses expose themselves to significant compliance breaches.
Workers are wary, but the industry resists blanket bans
Legal hurdles aside, acceptance inside the workplace is its own question. A survey by the industry association Bitkom found that 76 percent of respondents do not want to be filmed or photographed by others wearing smart glasses.
Bitkom's managing director, Dr. Bernhard Rohleder, came out against sweeping prohibitions, but called for clear rules and penalties for covert recording.
The practical upshot for employers: putting smart glasses to work requires well-defined internal policies and contractual guardrails, so that neither trade secrets nor employees' personal rights end up on the losing side.
