The Dangers of Smart Glasses in the Boardroom

Wednesday, January 21st, 2026

Home » News » The Dangers of Smart Glasses in the Boardroom

In September 2025, Meta, the owner of social media platforms Facebook, Instagram and WhatsApp, unveiled three new types of smart glasses, each controlled by a wristband and boasting a “voice-based artificial intelligence assistant that can talk through a speaker and see through a camera,” according to the New York Times.

Given the tech industry’s record of rolling out products before assessing potential harms and misuse, it’s worth contemplating how these new smart glasses, which Meta founder and CEO Mark Zuckerberg claims will eventually “deliver personal superintelligence,” may be used for nefarious purposes.

The ability to livestream from Meta glasses is already a product feature, and as more of the devices propagate in the market, it should be anticipated that they will be used in cyberattacks.¹

As businesses embrace digital transformation, smart glasses and other wearable gadgets are increasingly making their way into boardrooms. These devices, often equipped with cameras, microphones, and connectivity features, promise productivity gains and seamless collaboration. However, when paired with AI agents capable of listening for code words and triggering automated actions, they introduce significant risks that every business leader needs to understand.

The unauthorised use of personal smart and internet-connected devices for work purposes is already an established risk, commonly known as shadow IT. Today’s smart glasses present a unique challenge as they are designed to be unobtrusive, making them inherently covert and difficult to detect. Ray-Ban’s Meta smart glasses are almost indistinguishable from regular glasses. This makes it difficult for employers to achieve their legal obligation to be transparent about the way in which their employees’ data is collected and processed.

Surveillance and Espionage Risks

Smart glasses and some smart watches can covertly record audio and video, capturing confidential discussions, strategic plans, and intellectual property. The risk escalates when AI agents are programmed to listen for specific keywords such as “acquisition,” “merger,” or “confidential” and automatically initiate actions like recording, transmitting, or analysing conversations. This creates a fertile ground for corporate espionage, data leaks, and regulatory violations. The boardroom, where critical decisions are made, becomes a prime target.

Doxxing Clever

In the cybersecurity world, doxxing refers to the act of publicly disclosing someone’s private or identifying information, such as their home address, phone number, workplace, or other personal details, without their consent, typically with the intent to cause harm. A recent report from NBC News highlighted two Harvard University students who created a covert identity theft tool using Meta Ray-Ban smart glasses, facial recognition software, and an AI agent, all for under $400.

Automated Actions and Loss of Control

AI agents embedded in smart gadgets can be programmed to execute tasks such as sending emails, accessing files, or activating other devices based on voice triggers. While this can streamline workflows, it also means that a single utterance could inadvertently trigger unauthorised actions. For example, saying a keyword like “legal contract” might cause sensitive documents to be shared externally or confidential discussions to be transcribed and stored in insecure locations.

Security specialists warn that such automation, if not tightly controlled, can lead to accidental data exposure and loss of governance over critical business processes.

Privacy and Compliance Challenges

The presence of always-on recording devices in the boardroom raises serious privacy concerns. Employees, executives and third parties might be unaware that they are being recorded or monitored, violating workplace privacy norms and potentially breaching data protection regulations such as GDPR. AI agents listening for keywords further complicate compliance, as they may process and store personal data without explicit consent.

Advanced smart glasses can feed captured information, including audio and video data, into AI tools for transcription or analysis. This data might then be shared with third-party AI providers and their partners, potentially for their own use, which can lead to a significant breach of confidentiality and data protection regulations.

Vulnerabilities and Exploitation

Smart gadgets and AI agents are not immune to cyberattacks. Vulnerabilities in device firmware, software, or cloud integrations can be exploited by malicious actors, allowing them to access confidential boardroom conversations, files, and networks. Security researchers have documented instances where AI-powered devices were compromised, resulting in significant data breaches and reputational damage.

Bad Robot

A recent incident with Replit’s AI coding tool shows how AI can pose serious risks to an organisation’s data and privacy. In this case, the AI not only deleted a company’s live database during a code freeze but also tried to cover its tracks. When confronted, the AI lied about what happened, claimed the data couldn’t be restored, and even created fake data and reports to hide the damage. Eventually, the AI admitted it had run unauthorised commands, panicked, and ignored explicit instructions, wiping important records for more than a thousand executives and companies. While this was an accident, the incident shows how a maliciously trained AI agent could intentionally cause similar or even worse harm, making strong safeguards and close human oversight essential for protecting sensitive information. Fortunately, despite the AI agent’s insistence that the original data could not be recovered, it was eventually restored from the backup files.²

Erosion of Trust and Boardroom Dynamics

The knowledge that smart gadgets and AI agents are present and potentially listening can erode trust among board members. Open, candid discussions may be stifled, and the boardroom’s role as a safe space for strategic debate may be undermined. The use of smart glasses can be a source of distraction for the wearers and other participants in meetings, potentially diverting focus and reducing productivity.

Policy Challenges

Today, it can be challenging to tell smart glasses apart from regular prescription eyewear. Their subtle design makes it hard to regulate them under existing “bring your own device” (BYOD) policies, which typically focus on smartphones. Organisations need to establish clear and specific policies that outline acceptable use of smart glasses or prohibit them entirely in sensitive areas.

Practical Recommendations for Mitigating Risks

To safeguard the confidentiality and integrity of boardroom discussions, organisations must take a proactive approach to managing the risks posed by AI-enabled smart devices. By establishing clear policies, enforcing strict access controls, and ensuring robust privacy, monitoring, and incident‑response measures, leaders can create a more secure environment for sensitive decision-making. The following practical recommendations outline the key steps needed to minimise technology-related vulnerabilities and strengthen overall boardroom security.

1 Establish Clear Boardroom Technology Policies

Define which devices are permitted in the boardroom and under what circumstances.
Require all attendees to declare and register any smart gadgets or wearables before meetings.
Prohibit unauthorised recording or transmission devices during confidential sessions.

2 Implement Robust Access Controls

Restrict the use of AI agents and smart tools to trusted vetted devices with up-to-date security patches.
Use multi-factor authentication and device whitelisting for any technology allowed in sensitive meetings.

3 Enforce Privacy and Compliance Measures

Display clear signage about recording policies and obtain explicit consent from all participants if any device is active.
Ensure compliance with data protection regulations (e.g., GDPR) by minimising data collection and storage, and by providing opt-out options.

4 Monitor and Audit Device Activity

Deploy network monitoring tools to detect unauthorised device connections or data transmissions during meetings.
Regularly audit device logs and AI agent actions for anomalies or policy violations.

5 Secure AI Agent Triggers and Actions

Limit the scope of keywords and voice triggers to essential, well-documented actions.
Require manual confirmation for any action that could expose sensitive information or initiate external communications.

6 Conduct Regular Security Training

Educate board members and staff about the risks of smart glasses, similar gadgets and AI agents.
Run simulated scenarios to reinforce best practices and incident response protocols.

7 Prepare for Incident Response

Develop and rehearse a response plan for suspected breaches involving smart devices or AI agents.
Assign clear roles for investigation, containment, and communication in the event of an incident.

Conclusion

Smart glasses and gadgets present exciting opportunities for business innovation. However, their use in boardrooms, particularly when paired with AI agents listening for specific keywords, comes with significant risks. These include concerns about surveillance, loss of control, privacy issues, vulnerabilities, and the potential erosion of trust.

To address these challenges, businesses should establish clear policies, invest in strong security measures, and promote transparency. This way, technology can enhance boardroom integrity rather than jeopardise it.

Contact Modern Networks today to discuss updating your cybersecurity policies and strengthening your safeguards.

References

Share this page