In a significant turn of events, the UK government has opted against imposing restrictions or a ban on virtual private networks (VPNs). This decision comes after the technology gained heightened attention following the introduction of the Online Safety Act last year, and it has sparked relief among privacy advocates who view VPNs as essential tools for online security.
Government’s Consultation and Concerns
The discussions surrounding the potential regulation of VPNs began in March when the Department for Science, Innovation and Technology initiated a public consultation on children’s online safety. The government sought input on a range of topics, including whether social media platforms should enforce age limits and how to address the bypassing of age verification measures by minors. Notably, there was concern over whether VPNs were being used by children to evade restrictions on adult content.
The consultation aimed to gauge public opinion on requiring universal age checks for VPN access and the potential repercussions such measures could bring for those who rely on these services for privacy. The government also examined how children were circumventing online safety protocols and the feasibility of enforcing any new restrictions.
New Online Safety Measures
On 15 July, the government published its response to the consultation, unveiling a series of new online safety initiatives aimed at protecting younger users online. Among the measures announced was a midnight-to-6am curfew for social media use by 16 and 17-year-olds, limits on features that promote excessive use, mandatory breaks for under-18s engaging with AI chatbots, and additional safeguards to be explored in the future.
In a notable affirmation for privacy advocates, the government confirmed that VPNs would not be age-gated or banned outright. “VPNs have legitimate privacy and security uses and we will therefore not age-gate or ban them,” stated then-Technology Secretary Liz Kendall. However, the government did indicate that platforms would be required to implement “robust” strategies to prevent underage users from using VPNs to bypass age verification measures when the new regulations come into effect in early 2027.
Findings from the Study
An independent study commissioned by the government found scant evidence of children using VPNs primarily to bypass age restrictions. While 26 per cent of young users reported having used a VPN, only 7 per cent admitted to doing so for accessing age-restricted content. Furthermore, just 10 per cent utilised location-changing tools to evade age verification processes.
This data has, in part, influenced the government’s decision to step back from enforcing a VPN ban, as it appears that the actual use of VPNs by children for such purposes is limited.
Challenges of Enforcing a VPN Ban
Experts in cybersecurity have weighed in on the complexities of regulating VPNs. Corey Nachreiner, Chief Security Officer at WatchGuard Technologies, pointed out that any attempts to restrict VPNs would face significant enforcement challenges. “While you might compel ‘friendly’ VPN providers based in UK-partner countries to comply with not offering VPNs to children, there are many VPN and proxy solutions globally, some in countries that may be harder to legally compel,” he explained.
Such a ban could have led to a continuous struggle between regulators and VPN providers, as these services are designed to blend seamlessly with standard internet traffic, making detection difficult. Pierre Noel, Field Chief Information Security Officer at cybersecurity firm Expel, echoed this sentiment, noting the challenges the government would face in identifying whether connections originate from legitimate users or minors attempting to bypass age-verification controls.
The government has instructed Ofcom to collaborate with the Information Commissioner’s Office to investigate ways online services can better identify VPN usage. Additionally, they will engage with VPN providers to explore voluntary measures while keeping the policy under review for any necessary future adjustments.
Why it Matters
The government’s decision to forgo a VPN ban is monumental, highlighting a commitment to preserving digital privacy rights in an era where online security is paramount. As VPNs serve as essential tools for many users seeking privacy and security online, this ruling not only supports individual rights but also sets a precedent for how technology will be viewed amid growing concerns about online safety. As we navigate the complexities of the digital landscape, maintaining access to VPNs will empower users to safeguard their online activities, ensuring they can browse the web with confidence and discretion.
