Today's Headlines

1. Meta’s Smart Glasses controversy sparks privacy concerns - what the experts have to say

Source: Google News DPDP | Read Original → Meta’s AI-powered Smart Glasses are under intense scrutiny globally, with experts raising alarms over potential privacy violations, particularly concerning the covert recording capabilities. This controversy directly impacts Indian businesses exploring wearable technology or AI solutions, underscoring the critical need for transparent data collection practices and explicit consent under Section 6 of the DPDP Act for any personal data processed. It serves as a stark reminder for Data Fiduciaries to align their product design with privacy-by-design principles, especially if deemed a Significant Data Fiduciary.

2. Meta sued over reports of AI glasses showing sexual footage to contract workers

Source: The Hindu Tech | Read Original →

Following up on the privacy concerns, Meta is facing a lawsuit after a Swedish media investigation revealed that contract workers in Kenya were exposed to sensitive, including sexual, footage recorded via the Meta AI glasses. If such a situation involved the personal data of Indian citizens, it would constitute a severe data breach and a clear violation of Section 6 (Consent) and Section 8 (Data Fiduciary obligations), potentially incurring penalties up to ₹250 Cr under the DPDP Act for failure to protect personal data. This incident highlights the immense reputational and financial risks associated with mishandling recorded personal data.

3. U.S. House committee wants travel companies to answer questions on use of AI for pricing

Source: The Hindu Tech | Read Original →

A U.S. House committee is probing travel companies over "surveillance pricing," where AI uses consumer personal data like browsing history and location to set individualized, dynamic prices. For Indian businesses, this practice raises questions around purpose limitation (Section 5) and obtaining specific consent (Section 6) for using personal data for algorithmic profiling that could lead to discriminatory pricing. Indian Data Fiduciaries must ensure transparency about how personal data influences pricing models and that such processing aligns with the stated purpose for which consent was obtained.

4. A mobile phone game inspired by the Malayalam movie ‘Vilayath Budha’

Source: The Hindu Tech | Read Original →

A new open-world mobile game, Vilayath Budha: The Sandalwood Survival, has been released, notable for obtaining IP consent to use assets, including the actor Prithviraj Sukumaran's face. While primarily an IP matter, this underscores the increasing importance of explicit consent for using an individual's personal attributes, such as facial data, in digital content. Under the DPDP Act, businesses developing games, AR/VR experiences, or using biometric data would need robust consent mechanisms, especially for personal data extracted from an individual's likeness, ensuring compliance with Section 6.

---

DPDP Impact Analysis

Today's headlines paint a clear picture of the urgent need for Indian businesses to integrate robust data protection practices, particularly as Artificial Intelligence (AI) becomes more pervasive. The controversies surrounding Meta’s AI Smart Glasses serve as a global cautionary tale, directly impacting the way Indian startups and tech companies must approach product development involving data collection through advanced technology. The central theme emerging is the paramount importance of consent, purpose limitation, and strict Data Fiduciary obligations in an an AI-driven world.

The reports of Meta's AI glasses recording and potentially misusing sensitive footage highlight a critical failure in data governance. For Indian businesses, this scenario is a stark reminder that any device or service that collects personal data, especially visual or audio data, must adhere strictly to Section 6 (Consent) and Section 8 (Data Fiduciary obligations) of the DPDP Act. A breach involving such sensitive data of Indian citizens could lead to not only severe reputational damage but also substantial financial penalties, potentially reaching up to ₹250 Cr as stipulated for data breaches. Companies must implement "privacy by design" and conduct thorough Data Protection Impact Assessments (DPIAs) before deploying such technologies.

Furthermore, the inquiry into AI's role in "surveillance pricing" for travel companies in the U.S. signals a future where algorithmic decision-making based on personal data will face intense scrutiny. Indian Data Fiduciaries leveraging AI for personalized pricing, marketing, or any form of user profiling must ensure their data processing aligns with Section 5 (Purpose Limitation). This means clearly communicating to data principals how their data will be used and obtaining specific, informed consent (Section 6) for each distinct purpose, avoiding opaque practices that could disadvantage consumers.

Even seemingly innocuous developments like a mobile game using an actor’s likeness underscore the evolving landscape of personal data. While the game's use of Prithviraj Sukumaran's face involved explicit IP consent, it highlights the broader principle of obtaining consent for the use of personal attributes, especially as AI and digital avatars become more sophisticated. For any Indian company dealing with biometric data or digital representations derived from individuals, Section 6 on consent becomes crucial, demanding transparency and explicit agreement from the data principal.

Collectively, these stories emphasize that the DPDP Act is not just theoretical; it's a practical framework that will govern every aspect of data handling, from cutting-edge AI devices to everyday digital services. Indian businesses, regardless of size, must proactively audit their data processing activities, strengthen their consent mechanisms, clearly define the purpose of data collection, and ensure they meet their Data Fiduciary responsibilities to mitigate legal risks and build consumer trust in the rapidly evolving digital economy.

---

Stay Compliant

Not sure if your business meets DPDP standards? Start with a free check:

🔍 Run Your Free DPDP Audit →

16 questions. 60 seconds. Instant risk report.

---

Published by DPDP News, a Meridian Bridge Strategy initiative. For compliance consulting, book a free call.