Smart Glasses, Sexual Harassment, and Business Ethics: What Irish Companies Need to Know Before the Regulations Hit
Two Harvard students proved in October 2024 that off-the-shelf Meta Ray-Ban glasses, combined with facial recognition software, could identify a stranger's name, address, and phone number within seconds of looking at them. No consent. No warning. No way for the target to know it was happening.
Paris didn't wait for a committee to discuss it. French authorities moved to classify nonconsensual recording devices as tools of sexual harassment under existing penal code provisions, with penalties running to three years in prison and fines of €45,000. Ireland has made no such move. Most Irish businesses have made no such move either. That gap is where your liability lives.
The Technology Is Already Here
Meta sold millions of Ray-Ban smart glasses before the Harvard experiment went public. The current generation records video, streams live to Instagram, and responds to voice commands. The next generation, already in developer previews, adds a display layer. Within two to three product cycles, the distinction between glasses and a wearable surveillance device will be entirely a matter of software configuration, not hardware.
This is not a future problem. It is a now problem wearing a fashionable frame.
The employee who wears smart glasses to a client meeting is recording that meeting. The floor manager who wears them during a warehouse walkthrough is recording every worker in the building. The sales rep who wears them to a networking event is capturing faces, conversations, and body language without a single person in the room knowing it is happening. Under GDPR, recording identifiable individuals without a lawful basis is already a breach. The Data Protection Commission has handed out fines to Irish organisations for far less intrusive data collection than this.
Why Irish Leaders Are Unprepared
The honest answer is that most Irish business leaders are still trying to build an AI policy that covers ChatGPT. Wearable devices that capture biometric and behavioural data in real time are three steps beyond where most governance conversations are happening.
The binary here is simple: you either have a wearables policy before an incident, or you build one in response to a complaint, a DPC investigation, or an employment tribunal. The second path costs more, takes longer, and happens at the worst possible moment.
Workplace harassment law in Ireland already covers recording without consent. The Employment Equality Acts and the Safety, Health and Welfare at Work Act both carry obligations that a smart glasses incident could trigger. Add a GDPR breach notification requirement, a potential DPC investigation, and a constructive dismissal claim from the employee who was recorded, and you are looking at legal costs that would fund three years of proper governance work.
The Four Things You Need to Do Before the Regulations Land
The EU AI Act is already in force. The wearable and biometric provisions tighten in 2025 and 2026. French case law on recording devices as harassment tools will influence Irish courts and the DPC, because Irish data protection law is built on the same EU foundations. Here is the order of the work, and the order matters.
Step 1: Audit what devices are already in your building. This means adding wearable technology to your acceptable use policy and asking the question explicitly in your next staff survey. You will be surprised what is already in your workplace. Fitness trackers that capture health data, smart watches that mirror notifications, and the first generation of smart glasses owned by early adopters on your team.
Step 2: Write a wearables policy with teeth. A policy that says "employees should be mindful of privacy" is not a policy. It is a paragraph. A real policy names prohibited device categories in client-facing environments, sets rules for recording consent in any context, and specifies consequences for breach. Tie it to your existing disciplinary procedure so it has the same standing as your data protection policy.
Step 3: Train managers, not just staff. The person most likely to miss a smart glasses incident is a line manager who does not know what the device looks like or what it is capable of. A thirty-minute briefing session with your management team, covering what current smart glasses can do and what your policy requires, costs almost nothing. An employment tribunal costs a multiple of your annual HR budget to defend.
Step 4: Build a response protocol. When a complaint lands, the first twenty-four hours determine whether the matter is contained or whether it escalates. Your protocol needs to cover who leads the investigation, whether you have an obligation to notify the DPC, how you preserve evidence, and how you communicate with the affected individual. If you are building this protocol on the day of the complaint, you have already made the most expensive mistake.
The Opportunity Hidden in the Problem
There is a producer's opportunity inside this regulatory shift. Irish compliance startups are already moving into this space, and the demand for wearable governance frameworks is going to grow sharply as the EU tightens its grip on biometric data collection. If your business advises other businesses, builds HR software, or sells compliance services, wearable technology policy is a product gap that nobody in the Irish market has cleanly filled yet.
The companies that build this capability now, rather than waiting for a regulator to mandate it, will carry a genuine advantage into client conversations. Demonstrating that you have a wearables policy is a differentiator in procurement processes where GDPR compliance is a threshold requirement.
The Stance
Smart glasses are not a curiosity item for tech conferences. They are recording devices that fit on your face, and they are about to become as common as smartphones. The law is moving to treat nonconsensual recording as harassment. The ethical case for treating it that way does not need to wait for the law.
Governance built in advance of a crisis is an asset. Governance built in response to one is a cost. Pick the version that makes your business stronger.
