Lenskart's Q1 FY27 earnings call revealed it fed 63 lakh eye test records into proprietary AI models. The company collects facial scans from 100,000 users daily, raising significant questions about consent under DPDPA. Users' biometric data, once captured, cannot be reset if compromised, unlike passwords or credit cards.
Lenskart acquired AI-based computer vision startup Tango Eye in 2023 to monitor remote tests using CCTV. Since January, the eyewear giant has required facial scans from customers in stores and on its app.
Clarity on DPDPA enforcement around purpose limitation for AI training data will be crucial as the law beds in. Watch for Lenskart to formalize its consent mechanisms and opt-out procedures or face scrutiny from consumer protection bodies.
🇮🇳 Why This Matters for India
For founders building consumer tech in Mumbai and Delhi, Lenskart's case highlights the tightrope between leveraging AI for growth and navigating biometric data privacy under nascent Indian regulations.
The Take
Lenskart's aggressive AI adoption forces an early test of India's DPDPA on biometric data reuse. This case defines how user facial scans can legally train AI models, shaping data collection practices for all consumer tech companies operating at scale.
Source:  MediaNama ↗