Daily Surveillance Briefing: June 20, 2026

Norway's prime minister banned AI tools in primary schools from August 2026, the first national classroom-AI prohibition. EFF and a civil-society coalition pushed the Open Courts Act to retire PACER and end the $150 million the federal courts charge to read public records. Senators Cruz and Wyden introduced the JAWBONE Act to create the first federal cause of action against government coercion of platforms. A Mozilla engineer documented Google Workspace threatening to block Firefox. OVPN, the court-tested Swedish no-logs VPN, was acquired by a US company in California.

State of Surveillance Editorial Team

An empty classroom with rows of wooden desks and a chalkboard at the front, the kind of primary-school room where Norway August 2026 ban on AI tools will take effect
Photo: Janko Ferlič / Unsplash License

Today in Surveillance:

  • Norway banned AI tools in primary schools, effective August 2026. Prime Minister Jonas Gahr Store announced on June 19 that grades 1 through 7 will be barred from using AI tools, the first national-level classroom-AI prohibition, extending the country's 2024 smartphone ban [1].
  • EFF and a civil-society coalition pushed the Open Courts Act of 2026. Joe Mullin's EFF Deeplinks brief carried a coalition letter to retire PACER and end the roughly $150 million in annual fees the federal courts charge to read public court documents [2].
  • The Cruz and Wyden JAWBONE Act would create the first federal cause of action for government coercion of platforms. Introduced June 11, the bill would let broadcasters, online platforms, and AI providers sue when officials pressure them to suppress lawful speech [3].
  • Google Workspace threatened to block Firefox. A Mozilla engineer documented a Google plan to require Workspace OAuth2 clients to use a Google-specific API instead of the open standard, breaking access for third-party browsers and extensions [4].
  • OVPN, the court-tested Swedish no-logs VPN, was sold to a US company. Its updated privacy notice now contemplates transferring account data to the United States after the acquisition by OVPN Inc of Redwood City, California [5][6].

Also today: A 2023 Cory Doctorow essay on forcing Real ID for all internet traffic resurfaced in discussion [7], and EFF argued the UK's new under-16 social media ban will cause more harm than it prevents [8]. The Financial Times reported companies are reining in AI spending as costs strain budgets [9], and a satellite study covered by Space.com revealed the scale of worldwide GPS signal tampering [10].

Norway Bans AI Tools in Primary Schools From August 2026

Prime Minister Jonas Gahr Store announced on June 19 that Norway will prohibit AI tool use in primary schools, grades 1 through 7, covering children ages 6 to 13, when students return from summer break in August 2026. Lower-secondary students in grades 8 through 10, ages 14 to 16, may use AI only under teacher supervision. Upper-secondary students, ages 17 and up, are encouraged to use AI tools when their teachers judge it appropriate. Reuters reporter Nora Buli broke the story on June 19 [1].

"We want our children to learn to think for themselves, to write by themselves, to do the mathematics themselves," Store said. "AI is a tool, not a substitute for real learning." The policy extends Norway's 2024 smartphone ban, which a Norwegian Institute of Public Health study tied to lower bullying rates and higher grade-point averages in enforcing schools. It also reverses a 2016 policy that put a tablet in front of every student, a program the same evidence base has now discredited [1].

The surveillance angle is the data-collection surface inside classroom AI tools. A blanket ban in primary schools reaches every product that gathers student-input data, prompt history, learning-behavior records, or automated assessment decisions on children. This is the first national classroom-AI prohibition, and the data-protection logic mirrors regimes like the Colorado AI Act rules on automated decision-making and the EU AI Act general-purpose rules that apply from August 2: a government deciding that the consent and data-handling regime in a youth-facing context is structurally unsound. Our full brief carries the Reuters primary and the implementation detail [11].

EFF Coalition Pushes the Open Courts Act to Kill PACER's Fees

EFF attorney Joe Mullin published a June 18 Deeplinks brief carrying a coalition letter, signed by Fix the Court, the Free Law Project, EFF, and a long list of civil-society and media groups, in support of the Open Courts Act of 2026. The bill would retire PACER, the aging federal court-records system, and replace it with a free modern successor. It would eliminate the roughly $150 million in annual fees the federal courts collect from the public to read documents that are, by definition, public records [2].

PACER charges $0.10 per page, capped at $3.00 per document, and a single civil case can run $30 or more to pull. The Free Law Project's CourtListener and its RECAP browser extension have spent more than a decade clawing those documents back into the open, and Fix the Court has tracked the modernization backlog for years. The Open Courts Act would fold a free RECAP-style capability into the platform itself and end the per-page toll [2].

The access-to-justice stakes are direct: a paywall on court records is a paywall on accountability. When journalists, researchers, and ordinary litigants have to pay per page to watch what the government does in open court, the price itself becomes a filter on who gets to see the record. Our dedicated brief covers the coalition letter and the full fee history [12].

The JAWBONE Act Would Let Platforms Sue Over Government Coercion

Senators Ted Cruz of Texas and Ron Wyden of Oregon introduced the Justice Against Weaponized Bureaucratic Overreach to Networked Expression, or JAWBONE, Act on June 11, 2026. It would create the first federal civil cause of action for "jawboning," the practice of officials pressuring broadcasters, online platforms, or AI providers into changing lawful speech. EFF's India McKinney laid out the mechanics in a June 18 analysis [3].

The bill's structure changes the litigation math. Compensatory damages and attorney fees would be available whether or not the censorship attempt succeeded. Officials could not escape liability by claiming they subjectively believed the targeted speech was unprotected. Crucially, plaintiffs could pursue pre-trial discovery before a motion to dismiss closes the case, the recurring gap where the government moves to dismiss on the pleadings and the plaintiff never gets to see the communications. A transparency regime sits alongside it: logging standards for covered government communications, a public portal with 120-day summaries, and unredacted records to Congress at least annually [3].

The bill's authors point to a concrete trigger: the October 2025 pressure on Apple to drop the ICEBlock app from the App Store. The DOJ never obtained a court order; Apple pulled the app anyway. Under the JAWBONE Act, a court could find coercion even when a platform insists it acted independently, because the bill asks whether the government's communication led the recipient to act against its own stated policies. Our Day-1 brief walks through the bill text and the trigger case [13].

Google Workspace Threatens to Block Firefox Access

A June 19 post by a Mozilla engineer documented a Google plan that would require all Workspace OAuth2 clients to use a Google-specific API rather than the open OAuth2 standard. The change would break access for any third-party browser, extension, or developer tool that integrates with Workspace. Firefox is the most prominent casualty, since Mozilla's products and the Google-account ecosystem are deeply intertwined for many enterprise users [4].

The structural read is a gatekeeper using dominance in one market to disadvantage a competitor in another. Google's Workspace footprint becomes a weapon against a rival browser, and the open standard that let third parties interoperate gets swapped for a proprietary one Google controls. It is a direct parallel to the EU Digital Markets Act enforcement against Apple, Microsoft, and Google over Safari, Edge, Teams, Chrome, and Search [4].

Watch for Mozilla's first-party response, which has been the loudest voice against Google gatekeeper moves since the 2021 FLoC fight, and for any signal from the European Commission's DMA enforcement team, which has continued to press Google on Search. The browser-competition and open-web fight rarely shows up in privacy trackers, but the data-access plumbing it governs is exactly where interoperability and user control live.

OVPN, the Court-Tested Swedish No-Logs VPN, Sold to a US Company

OVPN, the Swedish VPN provider that proved in a 2023 Swedish court case that it kept no logs, has been acquired by OVPN Inc, a US company based in Redwood City, California. The OVPN homepage now states that "the company running OVPN is incorporated in US and is named OVPN Inc." The 2023 case, documented by TechDirt, followed a police raid in a piracy investigation; the company demonstrated in court that no logs existed, the canonical court-proven no-logs claim in the industry [6].

The updated privacy notice, dated June 19, 2026, adds two material clauses. One permits sharing personal data with prospective purchasers to evaluate a transaction; the other permits sharing it with a company that buys OVPN's assets or stock, which "may use and disclose personal data for purposes similar to those described in the Privacy Notice." The cross-border section now reserves the right to "transfer account-related information to servers in another location of our choosing," and tells EEA, UK, and Swiss residents their data may be stored in "countries other than the country in which the data was originally collected, including the United States" [5].

The shift matters because it moves account and payment data from an EU data-sovereignty footing to a US one, even if VPN browsing activity stays unlogged as the company claims. It echoes the wave of VPN consolidation users have learned to watch warily, from the ExpressVPN sale to Kape in 2021 to the Surfshark and NordVPN tie-up in 2022. A no-logs promise is only as durable as the jurisdiction and the owner standing behind it.

Age-Verification Pressure Builds on Both Sides of the Atlantic

Two threads kept the age-verification beat alive. A 2023 Cory Doctorow essay, hosted on nochan.net, on how a government could force Real ID for all internet traffic, resurfaced and drew fresh discussion for its anti-surveillance, pro-anonymity framing [7]. Separately, EFF published "The UK's new under-16 social media ban will cause more harm than it prevents," landing the day after Prime Minister Keir Starmer announced the ban framework, with The Guardian, the New York Times, and TechCrunch all carrying the initial coverage [8].

The common thread across every age-verification mandate is the same question: what identity data gets collected, who can see it, and how long it is retained. An age gate is an identity-verification system wearing a child-safety label, and the database it builds is a standing target. EFF's argument on the UK ban is that the harm of mandatory identity checks on every user outweighs the protection the ban claims to offer, the same structural critique that runs through the Doctorow essay [8].

What to Watch

August 2026. Norway's primary-school AI ban takes effect when students return from summer break. Watch for the implementing regulation text and any EU Commission or member-state response, given the August 2 EU AI Act general-purpose rules and the cross-border data-sovereignty framing.

The Open Courts Act. Watch for any movement in committee, a response from the Judicial Conference or the Administrative Office of the U.S. Courts, and tier-1 outlet pickup on the PACER fee fight.

The JAWBONE Act. Watch for a Senate Judiciary Committee markup and whether the ICEBlock removal becomes the first test case if the bill advances.

Google Workspace and Firefox. Watch for Mozilla's first-party response and any EU DMA enforcement signal on the OAuth2 change.

OVPN. Watch for an OVPN first-party statement on the ownership change and any response from the Swedish data-protection authority, the IMY.

Sources

  1. Reuters, Nora Buli: Norway imposes near ban on AI in elementary school, June 19, 2026. https://www.reuters.com/world/europe/norway-imposes-near-ban-ai-elementary-school-2026-06-19/
  2. EFF Deeplinks, Joe Mullin: Court records should be free, not paywalled by PACER, June 18, 2026. https://www.eff.org/deeplinks/2026/06/court-records-should-be-free-not-paywalled-pacer
  3. EFF Deeplinks, India McKinney: A New Bill Takes Aim at Government Pressure to Silence Lawful Online Speech, June 18, 2026. https://www.eff.org/deeplinks/2026/06/new-bill-takes-aim-government-pressure-silence-lawful-online-speech
  4. tales.fromprod.com: Google Workspace threatening to block Firefox access, June 19, 2026. https://tales.fromprod.com/2026/169/google-workspace-threatening-to-block-firefox.html
  5. OVPN: Privacy Notice, June 19, 2026, with the cross-border transfer and asset-or-stock-buyer clauses. https://www.ovpn.com/en/privacy-notice
  6. TechDirt: Cops Raid Swedish VPN Provider Only to Find Out There's No There There, May 1, 2023. https://www.techdirt.com/2023/05/01/cops-raid-swedish-vpn-provider-only-to-find-out-theres-no-there-there/
  7. nochan.net, Cory Doctorow: Think of the Children: How to Force Real ID for All Internet Traffic, August 29, 2023. https://nochan.net/b/Internet-Crap/20230829-Think-Of-The-Children/
  8. EFF Deeplinks: The UK's New Under-16 Social Media Ban Will Cause More Harm Than It Prevents, June 19, 2026. https://www.eff.org/deeplinks/2026/06/uks-new-under-16-social-media-ban-will-cause-more-harm-it-prevents
  9. Financial Times: "We created a monster": companies rein in AI usage as costs strain budgets, June 19, 2026. https://www.ft.com/content/1d37cc08-e0aa-45a4-a45d-4ad282529314
  10. Space.com: "It's quite a bit more than we expected": Satellite reveals immense scale of GPS signal tampering, June 19, 2026. https://www.space.com/space-exploration/satellites/its-quite-a-bit-more-than-we-expected-satellite-reveals-immense-scale-of-gps-signal-tampering
  11. State of Surveillance: Norway Imposes Near Ban on AI in Elementary Schools, the dedicated Day-1 brief. /news/norway-imposes-near-ban-ai-elementary-school-2026
  12. State of Surveillance: EFF Court Records Should Be Free, Not Paywalled by PACER, the dedicated Day-1 brief. /news/eff-court-records-free-pacer-open-courts-act-2026
  13. State of Surveillance: Cruz and Wyden JAWBONE Act Creates Federal Cause of Action, the dedicated Day-1 brief. /news/cruz-wyden-jawbone-act-bipartisan-federal-cause-of-action-2026