Internet Freedom Monthly: News Recap, June 2026
ICE spent the first day of June buying 1,570 biometric scanners with no competitive bid and no congressional review, and by the time Chinese researchers leaked documents on AI systems built to predict political dissent before it happens, the pattern for the month was already set. Surveillance infrastructure kept expanding through procurement contracts, research partnerships, and quiet product updates rather than headline announcements, with San Diego jailing an innocent man over a license plate camera's color match and Meta recording its own employees' keystrokes to train the AI meant to eventually replace them.
Meanwhile, the censorship side of the ledger ran just as steadily, with governments leaning on "national security" the same way child safety bills lean on "for the children." Türkiye blocked an unfinished investigation into a visa monopoly, then blocked coverage of that block, then blocked coverage of the coverage. Israel sentenced a Jerusalem journalist to 20 months over Facebook posts that included photos taken inside a mosque, and Pakistan sealed off Azad Jammu and Kashmir for a march it could not stop anyway.
This recap covers 50 articles published in June 2026. The thread connecting nearly all of them is that the infrastructure built under one justification rarely stays limited to it, whether that justification is keeping children off Instagram, keeping scanners off the books, or keeping a corruption story off the internet.
ICE Quietly Paid $25M for 1,570 Biometric Scanners
ICE awarded Bi2 Technologies a $25.1 million sole-source contract for 1,570 field scanners linked to a five million-record biometric database, skipping competitive bidding and congressional oversight entirely.
A 200-device trial became a 1,770-device national network with no audit requirement attached, and neither ICE nor DHS answered questions about it, which is itself an answer about how this infrastructure expands.
China Turns AI Into a Tool for Predicting Political Risk
Leaked documents from Geedge Networks show the firm building AI systems that analyze location, internet activity, and telecom records to flag political risk before any dissent occurs, constrained mainly by US chip export limits.
No evidence shows the system deployed yet, but the ambition alone, built by a firm with documented government ties, is the preview Vanderbilt researchers warned it would become.
Your Travel Checklist Is Missing One Critical Item
Global internet freedom declined for a 15th consecutive year, with Access Now logging a record 313 shutdowns across 52 countries in 2025, and most travelers never check whether their destination's internet resembles the one they use at home.
WhatsApp, Google services, and navigation apps are blocked or monitored in dozens of countries, and SIM registration laws can link a tourist's identity to their browsing the moment they buy a local card.
The Internet Was Their Safe Space. Now It's Being Taken Away
Pride month arrived alongside expanding criminalization of LGBTQ+ content in Russia, Uganda, and Hungary, with platforms separately removing queer content at higher rates than equivalent straight content.
Age verification laws marketed as child protection function as identity registries for anyone trying to access lawful content anonymously, and for LGBTQ+ users in hostile countries, that registry is the danger.
Sadiq Khan Is Right About the Manosphere and Wrong About the Fix
London Mayor Sadiq Khan called for banning under-16s from social media to stop manosphere radicalization, citing data showing 80% of British boys aged 16 to 17 had consumed Andrew Tate content.
Bans evaded within days elsewhere do nothing for boys whose isolation drives them toward extremist content, and the same blanket restriction locks out the girls and LGBTQ+ teens who use those platforms for support.
Colorado's Governor Chose Corporate Pricing Algorithms Over His Own Voters
Governor Jared Polis vetoed HB26-1210 on June 2, rejecting what would have been the strongest US ban on using personal data to set individualized prices, despite the bill already being amended to exempt loyalty programs.
Nearly 80% of Coloradans supported the ban, and Polis handed the tech industry exactly the outcome it lobbied for while more than 40 similar bills advance across 24 other states.
xAI Wants Grok's Deepfake Victims to Choose: Go Public or Lose Your Case
xAI is moving to strip four anonymous Grok deepfake victims of their courtroom anonymity, arguing insufficient evidence of future harm justifies continued pseudonymity in their lawsuit.
One plaintiff disclosed law enforcement found alleged child sexual abuse material generated from images of her as a child, and forcing real names onto sexual exploitation cases functions as a deterrent against filing at all.
They're Not Just Watching. They're Silencing
Governments shut down internet access at least 313 times in 2025, and commercial spyware from firms including NSO Group has compromised journalists across multiple EU member states with no convictions to show for it.
SIM registration laws and criminalized VPN use compound the surveillance, and the UN's first resolution on commercial spyware abuse arrived non-binding three years after the first warning.
Türkiye Scrubs Visa Corruption Reports From the Internet Mid-Investigation
Türkiye's BTK blocked four unfinished installments of an international investigation into VFS Global's visa outsourcing monopoly, citing Article 8/A national security powers before the series was even complete.
When journalists covered the censorship, a second court blocked that coverage, and when reporting on that censorship appeared, a third court blocked it too, with the same justification recycled three times in three days.
Texas App Store Age Law Kicks In as Apple Moves Right After Court Ruling
Apple activated Texas SB 2420's age verification requirements one day after a court lifted the injunction blocking the law, sorting new accounts into four age brackets via a new Declared Age Range API.
Tim Cook reportedly lobbied Governor Abbott personally to kill the bill, and after losing that fight, Apple built compliance infrastructure documented and ready to expand into every other state running similar laws.
Weeks of Protesting Meta's AI Tracking Won Employees 30 Minutes of Privacy a Day
Meta has recorded US employees' keystrokes and mouse movements since late April through its Model Capability Initiative, with no opt-out on company laptops, to train AI agents on how skilled people work.
Weeks of employee pushback won a 30-minute pause option and a narrow exemption for a few workers, while Zuckerberg confirmed the program will likely expand the same week Meta cut 8,000 jobs.
Israel Sentences a Jerusalem Journalist to 20 Months Over Social Media Posts
An Israeli court sentenced journalist Bayan Al-Jo'ba to 20 months in prison over Facebook and Instagram posts that included personal photos taken inside Al-Aqsa Mosque, following 15 months of house arrest.
She gave birth during that house arrest and attended roughly 13 hearings before the verdict landed, and her family calls it part of a systematic effort to criminalize Palestinian digital expression under elastic incitement laws.
The Great Firewall Is Winning, and Chinese VPN Users Are Running Out of Options
China's 2024 regulations criminalize unauthorized VPN use entirely, with fines up to 15,000 yuan for individuals and prosecution carrying up to three years for distributors, and enforcement reaches back years through routine audits.
Leaked 2023 surveillance data from Xinjiang shows cross-border traffic averaging just over 4% of total traffic, suggesting the Great Firewall has succeeded against a population that still wants what it cannot reach.
Bluesky's COO Warns Teen Social Media Bans Will Hand Big Tech the Whole Sector
Bluesky COO Rose Wang warned that compliance costs from teen social media bans fall equally on her 40-person company and on Meta's thousands of trust and safety staff, entrenching the platforms causing the harm.
UK Prime Minister Starmer met bereaved families pushing for an Australian-style ban, while a coalition of 19 organizations urged regulators to fix platform design instead, and the algorithm driving the harm stays untouched either way.
Meta Quietly Deleted Facial Recognition Code After Civil Society Pushed Back
WIRED exposed facial recognition code secretly embedded in Meta's smart glasses companion app, capable of converting strangers' faces into biometric signatures, and Meta removed it within 48 hours of the report.
Meta has not disclosed what happened to data gathered during internal testing or whether the feature returns, which is a thin foundation of trust from a company that already paid over $2 billion in biometric settlements.
San Diego Jailed a Man for a Month Based on a Flock Camera Read That Was Wrong
San Diego police arrested Hugo Parra after a Flock license plate reader matched his car by color and tint alone, five miles and 23 seconds removed from an actual carjacking, with no plate ever captured.
Police had cell phone location data and additional camera footage that could have cleared him before the arrest, and Parra spent nearly a month in jail anyway before charges were dropped and a lawsuit followed.
Nearly 22,000 Live Cameras With No Login Required: A Mysterium VPN Research
Mysterium VPN's research identified 21,786 internet-connected cameras streaming live video with zero authentication, mostly cheap budget recorders rather than the major brands that now mandate password setup, with more than 3 million cameras reachable in total, many of which are quite possibly accessible using default credentials that were never changed.
The open feeds resolve overwhelmingly to residential networks, meaning these are living rooms and bedrooms broadcasting to strangers, with the gap between major brands and budget hardware visible in every metric measured.
NSO Group Is Back to Targeting WhatsApp Users Eight Months After a Court Ban
WhatsApp disrupted a fresh NSO-linked phishing campaign in June, eight months after a federal court permanently barred NSO from targeting the platform following a $4.4 million judgment over a 2019 hacking campaign.
Meta has filed for contempt, and NSO's own CEO confirmed under oath the company actively searches for access vectors beyond WhatsApp, leaving courts as the only check on a firm whose clients are sovereign governments.
Pakistan Sealed Kashmir, Killed the Internet, and Called Protesters Terrorists
Pakistan suspended internet access across Azad Jammu and Kashmir, branded a grassroots economic rights movement a terrorist organization, and arrested over 100 people ahead of a planned June 9 strike.
An activist was shot and killed by police with no indication he posed a threat, and the strike went ahead anyway despite authorities deepening the shutdown specifically to stop people from joining the march.
The UK Wants to Turn Every Child's Phone Into a Surveillance Node by Default
Prime Minister Starmer announced Apple and Google must activate device-wide nudity scanning on children's phones within 90 days, covering every app and the camera itself, or face legislation including executive liability.
Signal called the plan mass surveillance infrastructure that will not stay narrowly scoped, arguing genuine child safety requires funded education rather than a scanning layer whose future reach the government alone defines.
Apple's WWDC26 Privacy Language Runs Into Some Inconvenient Architectural Facts
Apple's WWDC26 keynote showcased genuinely strong on-device AI privacy architecture while the same conference expanded its Declared Age Range API into a global, permanent compliance framework spanning multiple countries.
The EFF calls every age verification system a surveillance system regardless of design, and Apple is building the infrastructure for laws in Utah, Brazil, and beyond while talking mainly about Siri.
Governments Found a Quieter Way to Censor the Internet: Remove the App
Apple removed 2,045 apps under government takedown demands in 2025, with Russia responsible for over half, achieving censorship without ever blocking a website or generating the visible backlash a public block creates.
Users in restricted countries rarely know what disappeared or why, and sideloading, the obvious structural fix, remains against both companies' commercial interests despite EU pressure to allow it.
FIFA's World Cup Rights Deals Show Why Sports Blackouts Push Fans to Piracy
FIFA sold World Cup broadcast rights in over 180 territories, yet India had no confirmed broadcaster until 10 days before kickoff, leaving pirate streaming sites pre-selling ads against the expected audience gap.
UK fans get all 104 matches free, while some fans elsewhere faced no legal option at all, and the resulting court injunctions enforce territorial exclusivity rather than fixing the access gap that created the demand.
Canada Just Banned Under-16s From Social Media and Left the Algorithms Running
Canada introduced Bill C-34 on June 10, banning under-16 social media accounts and requiring AI chatbots to redirect users expressing suicidal intent to human crisis services, with fines up to 5% of global revenue.
The engagement algorithms researchers link to the underlying mental health harm go entirely unaddressed, and platforms can apply for exemptions from the age ban, turning prohibition into a compliance exercise.
US Congress Passed a Copyright Office Overhaul With No Debate and No Hearings
The House passed H.R. 6028 in a voice vote with no committee hearings, making the Register of Copyrights a presidential appointee and transferring DMCA Section 1201 rulemaking authority to that politicized position.
A coalition of digital rights and library groups formally objected in March, warning the changes would harm speech and security research, and Congress proceeded without responding before sending the bill to the Senate.
Cruz and Wyden's JAWBONE Act Would Let You Sue the Government for Censorship
Senators Cruz and Wyden introduced the JAWBONE Act, creating a federal cause of action against officials who coerce platforms or AI providers into censoring speech, covering attempts that fail as well as those that succeed.
Eleven organizations spanning the political spectrum endorsed the bill, and its public transparency portal means a senior official's call to a platform becomes a future public record rather than a private conversation.
The Human Rights Council Has a Surveillance Report and a Room Full of the Guilty
HRC62 opened with a landmark report on AI-assisted surveillance suppressing assembly rights, debated by a council that includes some of the world's most prolific deployers of spyware and facial recognition.
Civil society access to the session was simultaneously curtailed due to a UN liquidity crisis, leaving the people most affected by these surveillance practices with the least ability to shape the language meant to constrain them.
AJK's Blackout Blew Past Its Deadline and the Internet Still Is Not Back
Azad Jammu and Kashmir's internet shutdown, announced as a one-week measure ending June 12, remained suspended days past its own deadline with no updated government explanation for the gap.
State media declared normal life continuing on the same day the deadline passed, while the ISP's own status page still showed the uplink suspended, echoing the structural logic of Iran's 87-day blackout.
The UK Says It Will Ban Under-16s From Social Media, Platforms Left Intact
Prime Minister Starmer announced a ban on under-16s across major platforms expected by early 2027, capping a months-long process that leaves platform business models, addictive design, and data extraction untouched.
Nineteen organizations told the UK to hold platforms accountable for design instead, and daily VPN use already jumped from 650,000 to 1.4 million after earlier age assurance rules, a pattern the government is now considering restricting too.
Africa's Internet Freedom Problem Is Bigger Than Shutdowns
Africa recorded 30 internet shutdowns across 15 countries in 2025, more than double the 2016 rate, with the visible blackouts sitting atop quieter telecom pressure and platform restrictions that make each shutdown easier to repeat.
Regional frameworks like African Commission Resolution 580 exist on paper, but the same governments signing them are the ones ordering shutdowns, leaving enforcement as aspirational as the documents themselves.
UK Tells Ofcom to Nail Down Highly Effective Age Assurance by October 2026
Technology Secretary Liz Kendall asked Ofcom to define highly effective age assurance by October to inform a parliamentary ban on social media for under-16s expected to take effect in spring 2027.
The verification methods under consideration, including facial estimation and document checks, require collecting exactly the identity data that persists, can be breached, and eventually gets sought by actors beyond the regulator that commissioned it.
World Refugee Day: Forced to Flee, Then Forced to Hand Over Every Digital Detail
World Refugee Day arrived alongside UNHCR data showing 41.6 million refugees globally, each entering border systems built on mandatory biometric collection, phone searches, and GPS tagging with minimal safeguards.
The UK's GPS tagging of asylum seekers was ruled unlawful by its own data protection regulator, yet a December 2025 law moved to mainstream the practice further, voiding the finding in advance.
Florida AG Sues TikTok for Deceiving Parents on Child Safety and Breaking HB3
Florida sued TikTok over violations of HB3's under-14 account ban and over falsely rating its app appropriate for 13 and up while internal documents showed executives knew the platform caused self-harm and suicide risk.
The complaint targets deceptive conduct and false safety ratings rather than blunt access restriction, which is a meaningfully different approach from the blanket bans that have failed to hold everywhere else.
Inside Russia's Layered System of Internet Control
Russia's censorship runs on a blacklist, sovereign internet infrastructure with a built-in kill switch, and wartime speech laws that criminalize even private messages, with each layer added incrementally since 2012.
VPN downloads spiked over 2,000% when Instagram was blocked in 2022, and Russia responded by pressuring providers to comply with its blocklist or be blocked themselves, treating circumvention tools as a problem to solve.
The UAE Just Drew a Line in the Sand on Kids and Social Media
The UAE set the minimum social media age at 15 and now requires platforms to verify users' ages, joining Australia, the UK, and the US in age-based restriction laws built on identity collection.
A determined teenager evades these systems within days using a parent's account, while adults who value privacy lose access entirely, trading real anonymity for the appearance of child protection.
Meta's "Child Safety" Bill Is Really About Meta's Safety
Meta is lobbying Congress for federal child safety legislation that would preempt tougher state protections, arriving while hundreds of child harm lawsuits backed by leaked internal documents sit pending against the company.
A federal floor written with Meta's input would set a ceiling instead, echoing how the tobacco and pharmaceutical industries used the same playbook to escape stricter local rules.
If It's Not on Google, Does It Exist?
Governments, copyright holders, and individuals invoking the right to be forgotten can remove content from search results without taking the original page offline, with over a million government removal requests filed in 2023 alone.
The content still exists, but if it does not surface in search, it functions as invisible for practical purposes, and most removal processes happen with no notice to the people searching.
Ohio Wins the Fight to Keep Its Social Media Parental Consent Law Alive
The Sixth Circuit reversed a lower court block on Ohio's parental consent law, ruling NetChoice lacked standing to assert minors' speech rights given its members earn $11 billion annually from underage engagement.
Enforcement still relies entirely on self-reported ages with no verification check, meaning the law survives in court while remaining trivially easy for any child willing to enter a false birthday to bypass.
The Broker Behind FortiBleed: Anatomy of a Russian-Speaking Access Operation
A criminal broker harvested valid remote access credentials for 73,932 Fortinet firewalls across 194 countries through industrial-scale brute forcing, then catalogued victims by revenue for resale to ransomware crews.
The operation ran on commodity tools, including AI-assisted code and rented GPU clusters, proving that compromising tens of thousands of organizations no longer requires elite skill, just patience and a rented server.
India Shut Down Telegram for Six Days as VPN Downloads Hit Record Highs
India blocked Telegram nationwide for six days over alleged exam fraud and separately ordered the company to disable message editing for all Indian users, on no identified statutory basis for that second directive.
VPN downloads jumped 49% the day the ban was announced, and the agency's own press release credited targeted channel takedowns with containing the harm before the platform-wide block was even issued.
Norway Banned AI in Schools. Here's the Catch
Norway banned AI tools in elementary schools over data collection and content risks, a measure that works only inside school walls while children retain unrestricted access to the same tools at home.
Enforcing any broader restriction would require age verification, and that tradeoff, swapping unsupervised AI access for mass identity collection, may end up worse than the problem the ban was meant to solve.
Three Months In, Australia's Social Media Ban Has Failed to Cut Teen Usage
A peer-reviewed BMJ study found no statistically significant reduction in daily social media use among under-16s three months after Australia's ban took effect, with over 85% still accessing restricted platforms.
Daily use among 16 and 17-year-olds actually climbed during the same period, and the most common circumvention method was simply self-declaring a different age, the exact loophole regulators already knew about.
Google Settled Before Trial in R.K.C.'s Social Media Mental Health Lawsuit
Google settled confidentially with a 15-year-old plaintiff weeks before a bellwether trial over platform design features linked to his diagnosed depression and anxiety, leaving Meta, TikTok, and Snap to face court alone.
The only public jury verdict so far amounted to roughly two days of Meta's revenue, and confidential settlements mean the industry keeps absorbing harm claims as a cost of doing business rather than a reason to redesign.
Yabloko's Deputy Chair Gets Seven Years in Prison for Two Anti-War Telegram Posts
A Moscow court sentenced Yabloko deputy chair Maxim Kruglov to seven years for two 2022 Telegram posts citing UN casualty figures and describing Bucha, despite defense experts finding no false claims in either post.
The prosecution's case rested on a witness who stumbled onto the posts three years later, showing Russian courts evaluate whether speech is inconvenient rather than whether it is actually false.
Australia Toughens Its Social Media Ban After the Evidence Confirmed It Failed
Prime Minister Albanese announced tougher enforcement powers the same day a peer-reviewed BMJ study confirmed the existing ban produced no statistically significant change in teen usage, with not a single fine issued in six months.
Sixteen other countries are following Australia's model regardless, meaning a confirmed failure to reduce usage is being exported globally as proof of concept for identical age verification infrastructure elsewhere.
Türkiye Blocks X Posts Sharing Clips of Deniz Göktaş's Viral Erdoğan Comedy Show
Türkiye blocked X posts sharing clips from a comedian's stand-up special after an AKP official complained the jokes about Erdoğan should not be treated as humor, using national security powers requiring no judicial review.
The special remained live on YouTube globally with over 5 million views, meaning Türkiye suppressed the jokes on one platform while confirming for everyone else exactly which jokes it found most threatening.
Australia Is Doubling Down on a Ban That Isn't Working
Australia doubled the maximum penalty for platform non-compliance with its under-16 social media ban to $99 million AUD, even as the eSafety Commission's own report found seven in ten affected children still had some access.
Meaningful age verification requires the identity data collection that creates new surveillance risk for everyone, and bigger fines do nothing to change a circumvention problem teenagers solved within the ban's first week.
Nebraska's Child Internet Safety Law Is Unconstitutional, Says a Federal Judge
A federal judge blocked key provisions of Nebraska's LB 1074 age verification law, ruling they likely violate the First Amendment by treating online communication as something the government can wall off by default.
The ruling fits a broader pattern of courts in Texas and California reaching the same conclusion that mandatory identity verification for lawful speech fails strict scrutiny regardless of the child safety framing attached to it.
EFF Urges Illinois' Governor to Veto an Age-Gating Law
The Illinois legislature passed House Bill 5511, a device-level age-gating law covering nearly all internet-enabled hardware, and the EFF formally urged the governor to veto it as a privacy and free speech nightmare.
The bill mirrors California and New York frameworks, neither tested in court, and its verifiable parental consent requirement cuts off vulnerable youth in non-traditional families rather than protecting them.
The Kids Act Just Passed the House, Experts Sound Alarms
The House passed the bipartisan KIDS Act 267 to 117, mandating age verification and new safety features, after stripping out the Senate version's duty of care requirement that Senator Maria Cantwell called gutted.
The EFF warns the bill's patchwork of differing age-gating standards will push companies toward restrictive age checks across entire platforms, sweeping adults into verification systems built for minors.
Be part of the resistance, quietly.
Get Mysterium VPN
Dominykas is a technical writer with a mission to bring you information that will help you in keeping your digital privacy and security protected at all times. If there's knowledge that can help keep you safe online, Dominykas will be there to cover it.
Related Articles
.png)
.png){kind=small}
