Can I Make Someone Delete a Video of Me Filmed on Smart Glasses?
The right to erasure reads like a yes, until you notice it runs only against a "controller" — and a private wearer usually is not one
The right to erasure exists, and it points at organisations. Against a stranger keeping a clip for themselves it mostly does not reach, and the route that does reach is a different one.
How it started
Europe wrote a deletion button for the wrong kind of hand
Europe wrote a deletion button for the wrong kind of hand. The General Data Protection Regulation, in force since 2018, gave every person two blunt tools against the organisations that hold information about them: a right of access, to be told what is held and get a copy of it, and a right to erasure — "the right to obtain from the controller the erasure of personal data concerning him or her without undue delay." Both were drafted with a bank, an employer, a marketing list in mind: a body that keeps files and can be made to open or empty them. The word doing the quiet work in each right is controller. Neither tool was written for a stranger.
What changed since
The file-keeper turned into a person on the pavement
Then the file-keeper turned into a person on the pavement. Meta's Ray-Ban glasses put a camera and microphones on an ordinary-looking frame, and the "data" a person might want deleted is now just as likely to sit on a passer-by's face as in a company database. Europe wrote no new right for that. What its regulators did instead was quieter: Ireland's Data Protection Commission published guidance saying that even "simply recording and/or storing video and audio data could be considered 'processing'," and that a 2014 ruling about a home CCTV camera "is still helpful in deciding whether the exemption applies in cases where individuals are using other types of video recording equipment, such as 'dash cams' or 'action cams'." The device changed. The question of who counts as a controller is what actually moved.
Where it stands now
The confident version of this answer reads backwards
This is the part that reads backwards from the confident version. Your right to erasure and your right of access both fire only against a controller — and a person who films you in the street for their own use is usually not one. The GDPR "does not apply to the processing of personal data by a natural person in the course of a purely personal or household activity," and a private wearer capturing a clip for themselves sits, at least at first, inside that shelter. So the same clause that makes their filming lawful is the clause that empties your deletion right against them: no controller, no obligation to erase, nothing to serve an access request on. It is the exact exemption we traced across the EU as the thing that lets a wearer film at all — read from the other side of the lens. The right reappears only when the wearer steps outside the shelter, which they do the moment they publish or share the footage or use it commercially; and even then erasure is not a certainty, because freedom of expression and legal claims are written in as exceptions. Meta, for its part, gives the wearer buttons to delete their own captures and gives the person filmed none.
What happens next
Nothing is scheduled, and that is the finding
Nothing is scheduled that changes this, and that is the finding rather than a gap in it. No European law is written for smart glasses, no court has ruled on an erasure request against a wearer, and the Data Protection Commission's guidance reaches the device only by analogy to dash cams without saying when it will do more. The United Kingdom, running its own retained version of the same right, has added one ground the EU text lacks: erasure of data processed on a malicious allegation that was later investigated and dropped, which widens the tool slightly without touching the controller problem underneath it. Until a regulator or a court addresses the wearable case directly, the rights above are what apply, and they apply exactly as unevenly as described: strong against a company, thin against the individual most people are actually worried about.
Sources and verification
- Regulation (EU) 2016/679 (GDPR), Article 17 — Right to erasure: "the right to obtain from the controller the erasure of personal data… without undue delay," the controller's obligation to erase, and the grounds in Article 17(1)(a)–(d), quoted verbatim.
- Regulation (EU) 2016/679 (GDPR), Article 15 — Right of access: the right to "obtain from the controller confirmation… and… access to the personal data," quoted verbatim; the shared reliance of both rights on a "controller."
- Regulation (EU) 2016/679 (GDPR), Article 2(2)(c) and Recital 18 — household exemption: "the processing of personal data by a natural person in the course of a purely personal or household activity," quoted verbatim.
- Data Protection Commission (Ireland) — "What is the household exemption?": the DPC's plain-language definition of the exemption and that it is lost once data is used commercially or "made publicly available," quoted verbatim.
- Data Protection Commission (Ireland) — "Video Recording" guidance: that recording/storing is "processing," that a wearer "may become a data controller… depending on what you do with the recorded footage," and the application of the 2014 CJEU ruling to "dash cams" and "action cams," quoted verbatim.
- Data Protection Commission (Ireland) — Right to erasure (Articles 17–19 GDPR): the grounds for erasure and the exceptions — freedom of expression and information, legal obligation and public-interest tasks, archiving and research, and "the establishment, exercise or defence of legal claims" — quoted verbatim.
- CJEU, František Ryneš v Úřad pro ochranu osobních údajů, C-212/13 (11 December 2014): the boundary that surveillance covering "even partially, a public space" and "directed outwards from the private setting" is not a purely personal or household activity — cited as the Data Protection Commission quotes and applies it; the raw judgment did not render for this desk.
- UK GDPR, Article 17 — Right to erasure (retained EU law): the retained UK equivalent, its UK-added ground for data processed on a malicious allegation later dropped, and the EU-Exit modifications, read on legislation.gov.uk.
- Meta — Privacy settings for Ray-Ban Meta AI glasses: the wearer's controls to manage or delete their own captures, the capture-LED and "stop recording" bystander guidance, and the absence of any deletion route for a person who was filmed, read verbatim.
This piece reports what the Regulation, the retained UK law, the Court of Justice and the Data Protection Commission say, and it advises no reader on whether they personally can obtain a copy or deletion of any particular recording. No European law is written specifically for smart glasses and no court has ruled on an erasure or access request against a wearer; the analysis applies the existing rights to the device. The raw Ryneš judgment was unreachable from this desk, so its holding is quoted only as the Data Protection Commission reproduces it. The device capabilities are Meta's own published description.