By Allan Juma, Lead Cyber Security Engineer at ESET
EssilorLuxottica and Meta sold more than seven million Ray-Ban and Oakley-branded smart glasses in 2025. The sales of these intelligent wearables increased almost threefold from 2023 and moved the category to mainstream.
In 2023, global smart glasses shipments increased by 210% year-on-year, and ABI Research has predicted that shipments will grow from 5.9 million in 2024 to 114.1 million by 2030.
The technology is moving faster than awareness, regulation or governance, and South Africa is sitting closer to the edge of privacy and regulatory controversy than most people realise.
This controversy has already affected East Africa. In early 2026, Kenyan and Ghanaian authorities identified Vladislav Luilkov as the Russian vlogger who travelled through Kenya and Ghana wearing the Ray-Ban Meta smart glasses, recording intimate encounters with women without their knowledge and posting the footage online for profit.
In the UK, a BBC investigation documented how a woman was covertly filmed at a beach, with the footage receiving around one million views online.
By May 2026, a second victim was also reported by the BBC. She was told that the footage would only be removed as a paid service, which was effectively extortion.
Smart glasses with inconspicuous cameras extend patterns already seen with smartphones – they make it easier to capture and distribute images or video of women in public and private spaces without their knowledge, in a society where harassment, exploitation, and violations of privacy remain widespread.
Wearers can potentially discover a person’s identity, address, and other personal details and share these, along with video footage, with anyone they want, on any platform they want, and this creates significant security and privacy risks.
Two Harvard students recently showed how the footage streamed through these glasses could be linked to external AI facial recognition tools allowing strangers to be identified in real time with names, home addresses and personal information pulled from the internet.
Smart glasses are also an Internet of Things (IoT) device with connected hardware running software that can be targeted in the same way any connected device can.
Research by ESET has found that specific attack vectors such as unpatched firmware vulnerabilities, compromised companion apps, and malicious Wi-Fi hotspots are gaining in momentum and capability.
These threats can compromise the glasses or the device they are paired with, and the attacker gains access to everything the wearer sees.
South Africa has begun to adapt its legal framework to digital abuse, including the Cybercrimes Act, the Protection from Harassment Act, the Domestic Violence Amendment Act, and the Film and Publications Act. These all apply to online harassment, harmful content and image-based abuse.
Smart glasses are already changing the boundaries of privacy. These devices represent high-risk AI systems that capture biometric data in public spaces without meaningful consent mechanisms, process footage through offshore contractors beyond South African data protection oversight, and directly challenge POPIA’s consent framework, designed before invisible, wearable surveillance became normalised.
Under POPIA, biometric information is categorised as ‘special personal information’ with processing generally prohibited unless authorised.
South Africa has both the constitutional foundation and the legislative architecture through POPIA to lead African wearable AI governance.
The country, as Africa’s most technologically advanced economy with BRICS ties and a mature data-protection framework, is uniquely positioned to do for African wearable regulation what the GDPR did for Europe and establish a high-water mark that neighbouring jurisdictions can copy. And now is the time to get it right.
Don’t miss important articles during the week. Subscribe to techbuild weekly digest for updates
