PDPC Flags Growing Privacy Concerns Over AI Wearables and Biometric Technology

Singapore's data protection watchdog is turning its attention to a new frontier in AI governance: wearable devices and biometric technology. Speaking at the opening of the inaugural Singapore Data Festival on July 20, Personal Data Protection Commission (PDPC) Commissioner Denise Wong signalled that the regulator is closely monitoring the rapid adoption of AI-powered wearables and biometric systems, and plans to issue clearer guidance for organisations deploying them.

The remarks come as AI-enabled smart glasses, fitness trackers with advanced sensors, and workplace biometric systems become more widespread in Singapore. Commissioner Wong noted that while the PDPC's existing advisory guidelines on AI recommendation and decision systems cover many use cases, the specific privacy implications of biometric data collection — including facial recognition, iris scanning, and continuous physiological monitoring — warrant closer scrutiny. The commission indicated it would provide more specific guidance to help organisations achieve responsible AI by design and demonstrate accountability.

The privacy questions around wearables are not hypothetical. In May, Member of Parliament Gerald Giam filed a parliamentary question asking whether the Ministry of Digital Development and Information would introduce new regulations requiring visual indicators on smart glasses to prevent surreptitious recording, and how AI-enabled wearables that collect biometric or environmental data from non-users would be governed. MDDI's response at the time pointed to existing laws under the Personal Data Protection Act (PDPA) and Penal Code, but did not announce new wearable-specific rules — a gap the PDPC now appears ready to address.

The issue sits at the intersection of two accelerating trends: the falling cost of AI-powered sensors and the proliferation of always-on wearable devices. Consumer smart glasses from Meta, Xiaomi, and Chinese upstarts are entering the Singapore market, while enterprises deploy biometric access systems and AI-powered workplace cameras. The PDPC's concern is that existing consent frameworks — designed for discrete data collection events — may not adequately address continuous, passive data collection from devices that users and bystanders may not even realise are recording.

Why it matters for Singapore: The PDPC's focus on wearables and biometrics signals that the next phase of AI governance in Singapore will move beyond chatbots and recommendation algorithms to address ambient data collection. For businesses deploying AI wearables or biometric systems — from retail analytics to workplace safety monitoring — the message is clear: self-regulation and existing frameworks may not be enough. Specific guidance is coming, and organisations should start auditing how their wearable and biometric systems handle personal data before the rules crystallise.