AI Governance Institute
← News
Enforcement2026-10-05

Norway's AI Glasses Ban Opens a New Category of Physical Surveillance Compliance Risk

Source

AI glasses face their first major government crackdown

Financial Times / Ars Technica

What happened

Norway's government announced plans to introduce a temporary ban on AI-enabled smart glasses in public spaces, as reported by AI glasses face their first major government crackdown. The ban would apply to locations including parks, beaches, schools, and kindergartens. The digitalization minister described the measure as a bridge period, giving authorities time to conduct a thorough assessment before permanent national rules are established through an expert group. The stated driver is privacy risk from covert recording of bystanders by passersby wearing AI-capable eyewear, a concern that existing data protection law has not resolved. Norway is not an EU member but follows EU privacy law through the European Economic Area. This action may signal broader European regulatory momentum under frameworks such as the EU AI Act (Regulation (EU) 2024/1689) and the General Data Protection Regulation (GDPR).

Why it matters

  • ·Norway's action creates a new compliance category: physical-space AI surveillance by individuals using consumer wearables. Most enterprise AI governance programs cover software systems procured by IT, leaving employee-owned or visitor-carried AI glasses entirely outside existing policy scope.
  • ·Organizations with operations in Norway face direct exposure if employees wear AI-enabled devices in public-facing locations such as retail floors, campuses, or client sites. A ban, once enacted, could apply to workplace common areas or public-adjacent property, and violations could implicate General Data Protection Regulation (GDPR) obligations on unauthorized personal data collection.
  • ·The temporary nature of the ban signals that permanent, potentially stricter rules are coming. The expert group process means compliance teams have a window to engage, but also a deadline: frameworks established now will be harder to revise once permanent rules take effect.

Stay ahead of stories like this

Get every Global AI governance development like this one, plus the rest of the week's developments. Every Thursday.

Free every Thursday. Unsubscribe anytime.

Governance controls affected

SCT-007Consumer and External AI Tool Acceptable Use PolicyDGC-002PII Handling in AI SystemsCMP-001Multi-Jurisdiction AI Regulatory Compliance MappingHOC-001AI System Risk ClassificationCMP-002International AI Standards Monitoring Workflow

What to do now

  • ☐Review your employee acceptable use policy to determine whether it addresses AI-enabled wearable devices such as smart glasses, and update it to cover use in public-facing workplaces and public spaces.
  • ☐Ask your legal and HR teams whether your Norwegian operations include any locations that would fall within the proposed ban's scope, such as campuses near parks, client-facing areas, or school-adjacent sites.
  • ☐Conduct a brief inventory of any AI-enabled wearable devices provided to employees or used by contractors in Norway, and assess whether current data handling practices for those devices comply with GDPR.
  • ☐Assign a monitor to track the Norwegian expert group's output and any EU-level signals, so your compliance team can respond as permanent rules are drafted rather than after they are finalized.
  • ☐Check whether visitor and contractor onboarding materials for Norwegian sites disclose any restrictions on recording devices, and add explicit AI wearable language if they do not.

What to watch next

Compliance teams should track the output of Norway's expert group, which will shape permanent national rules and may serve as a template for other European jurisdictions. The EU AI Act (Regulation (EU) 2024/1689) does not yet specifically address consumer wearable AI in public spaces. However, ongoing implementation guidance from the EU AI Office could extend to this category. The CCPA Regulations on Automated Decisionmaking Technology, Risk Assessments, and Cybersecurity Audits in California and similar US state-level privacy frameworks may face pressure to address wearable AI. Norway's action draws attention to the gap in existing frameworks. Organizations operating across multiple jurisdictions should add wearable AI to their multi-jurisdiction compliance monitoring workflows before the first permanent rules arrive.

Related Coverage

Enforcement2026-11-13

Gemini Lawsuit and School Protests Expose a Student Data Governance Gap

Families in seven US cities protested Google's integration of Gemini AI into school-issued Chromebooks in November 2026. A lawsuit alleges that a 13-year-old student was coached toward self-harm by the chatbot. The Chicago nonprofit Illinois Families for Public Schools (ILFPS) is demanding a moratorium on AI in Chicago Public Schools until a board-approved policy is in place. Contracts reviewed by ILFPS with Google, Anthropic, and OpenAI contain no indication of how student data is handled.

Corporate Policy2026-11-14

Apple's Foundation Models Framework Triggers EU AI Act Downstream Obligations

The release includes Acceptable Use Requirements. For the AFM 3 Cloud model, Apple also published documentation under Article 53(1)(b) of the [EU AI Act (Regulation (EU) 2024/1689)](/policy/eu-ai-act) to support downstream providers. Organizations building or procuring apps on this framework must assess their own compliance obligations as AI system deployers under applicable law.

Enforcement2026-11-11

Congress Targets Medicare AI Coverage Pilot for Repeal in First 100 Hours

A Democratic-controlled Congress is expected to move within its first 100 hours to repeal the Medicare WISeR model. WISeR is a Centers for Medicare and Medicaid Services pilot that uses AI to support coverage review decisions. The Seniors Deserve SMARTER Care Act, which would ban the pilot outright, has bipartisan support and already cleared the House Appropriations Committee unanimously. Separately, Democrats are pushing to delay Medicaid work requirements while calling for increased oversight of the technology vendors helping states implement eligibility systems.