Privacy commissioner launches probe into Chinese smart glasses company after security flaws exposed

The investigation is the most significant action authorities have taken to address mounting community concern over low-cost smart glasses, which detractors have dubbed "pervert glasses" because their discreet design makes it unclear when they are recording.

In August, Attorney-General Michelle Rowland took the unusual step of asking the privacy regulator to prioritise the issue amid calls for an import ban. The ABC's subsequent testing of the HeyCyan phone app, used by glasses sold on platforms including Kmart, Big W Marketplace and Amazon, uncovered more than a dozen serious security flaws.

Independent testing found that Australians' sensitive data — including email addresses, dates of birth, images and videos — was left exposed to hackers. The devices could be hijacked by nearby attackers via Bluetooth without a password, and data was in some cases being sent to Chinese servers.

Privacy Commissioner Carly Kind said the ABC's reporting raised the prospect that reasonable steps had not been taken to secure user information. Her office also has concerns about possible use of facial recognition technology.

"We will certainly bring to bear the full weight of our powers on the matter," she said.

The regulator made preliminary inquiries with Meta, Google, Kmart and importer BDI Technology over their supply of similar technology, but none is the subject of a formal investigation. Shenzhen Qingcheng was the only company that chose to ignore the regulator completely, Ms Kind said.

"The company did not respond at all to our multiple attempts to obtain information … and did not even acknowledge receipt of our communications," she said. "It does suggest that some of the fundamentals may not be in place, for example, compliance teams that are appropriately staffed."

The formal investigation gives the commissioner power to compel Shenzhen Qingcheng to provide information about its compliance with Australian privacy laws. The next steps if the company continues to ignore the regulator are unclear, but the commissioner has indicated she will use the full force of her powers.

Analysis

Why This Matters

The investigation signals that Australian regulators are willing to take enforcement action against foreign companies that fail to engage with privacy obligations, especially where products pose direct risks to consumers.
For consumers, the case highlights the hidden risks of cheap smart devices: insecure design, unauthorised data transmission overseas, and the potential for bystanders to be recorded without consent.
The outcome could set a precedent for how Australia regulates cross-border data flows and holds non-responsive foreign firms accountable under local law.

Background

Smart glasses that look like ordinary eyewear allow wearers to capture images, video and audio with a button press or voice command. Their inconspicuous design has led to widespread unease about surreptitious recording, particularly in changing rooms, schools and other private settings. The devices under scrutiny are inexpensive models that have flooded the Australian market via major retailers and online marketplaces. The ABC investigation that prompted the probe revealed that the accompanying mobile app had multiple security vulnerabilities, and that some data was being transmitted to servers in China.

Key Perspectives

[Shenzhen Qingcheng Future Technology Co]: The company has not responded to repeated contacts from the regulator, which may indicate a lack of dedicated compliance infrastructure or a deliberate decision not to cooperate with Australian authorities. [Privacy advocates and critics]: They have pushed for an outright import ban on such devices, arguing that the privacy and security risks outweigh any benefit. The investigation is a welcome step but may be too slow to protect consumers from products already on the market. [Retailers and platforms like Kmart, Big W and Amazon]: They have not been subjected to formal investigation but supplied the glasses linked to the flawed app. They may face pressure to tighten product safety checks and could be drawn into future enforcement if the regulator broadens its inquiry.

What to Watch

Whether Shenzhen Qingcheng will now respond to the regulator's formal requests under threat of enforcement action.
Any action by the Attorney-General or other agencies, including potential import restrictions, in response to the investigation's findings.
Whether other smart glasses sold in Australia face scrutiny, as the regulator has made preliminary inquiries with multiple companies including Meta and Google.

Analysis

Why This Matters

Background

Key Perspectives

What to Watch

Sources