In a significant move for digital privacy advocates, the UK government has confirmed it will not pursue a ban or age restrictions on virtual private networks (VPNs). This decision follows extensive discussions ignited by the Online Safety Act introduced last year, which aimed to enhance protections for children online. With VPN usage soaring as a means to maintain privacy, the government has opted to uphold their availability, recognising their legitimate role in ensuring online security.
The Context of the Decision
Initially, the prospect of regulating VPNs emerged when the government observed a notable increase in their downloads, coinciding with the enforcement of age verification measures for adult websites. In March, the Department for Science, Innovation and Technology initiated a public consultation focusing on children’s online safety, which included exploring whether VPNs should fall under age verification requirements.
The consultation sought input on various issues, such as establishing minimum age limits for social media platforms, limiting design features that encourage excessive use, and the potential impact of restricting VPN access. The government aimed to understand the extent to which children might be using these services to circumvent age checks and whether any restrictions could be effectively enforced.
Key Outcomes from the Consultation
On July 15, the government released the findings from the consultation, outlining new measures to bolster online safety for minors. Among these measures is a default midnight-to-6am social media curfew for 16 and 17-year-olds, restrictions on autoplay features, mandatory breaks for users under 18 utilising AI chatbots, and a commitment to further explore additional safeguards.
However, in a notable affirmation for privacy, then-Technology Secretary Liz Kendall stated, “VPNs have legitimate privacy and security uses and we will therefore not age-gate or ban them.” This reaffirmation came alongside a pledge that platforms must implement robust strategies to prevent underage users from using VPNs to dodge age verification systems when the new regulations take effect in early 2027.
Insights from Research
An independent study commissioned by the government revealed interesting insights into children’s use of VPNs. While 26 per cent of children reported using VPNs, only 7 per cent indicated they employed them to access age-restricted content. Furthermore, just 10 per cent admitted to using location-altering tools for bypassing age verification. These statistics suggest that the fears surrounding widespread circumvention of age checks via VPNs might be overstated.
Cybersecurity experts have also weighed in on the challenges of regulating VPNs. Corey Nachreiner, chief security officer at WatchGuard Technologies, noted that while it may be feasible to regulate ‘friendly’ VPN providers in allied countries, countless global VPN options exist, making enforcement tricky. He remarked, “Any attempt to block VPNs would likely have become an ongoing game of cat-and-mouse.”
Pierre Noel, from cybersecurity firm Expel, echoed this sentiment, stating that VPNs are designed to blend in with ordinary internet traffic, complicating any efforts to monitor their use effectively. The government has tasked Ofcom and the Information Commissioner’s Office with researching how online services can better identify VPN usage and collaborate with providers on voluntary measures.
The Future of VPNs in the UK
While the immediate threat of a VPN ban has been quashed, the government remains vigilant, reserving the right to revisit the issue should new evidence emerge. This ongoing review signifies the government’s commitment to balancing online safety for minors with the essential privacy and security that VPNs provide to all users.
Why it Matters
The decision not to impose restrictions on VPNs is a win for privacy advocates and a recognition of the technology’s vital role in protecting users’ online identities. In a world where digital surveillance is increasingly prevalent, maintaining access to VPNs is crucial for ensuring that individuals can navigate the internet safely and securely. As the government moves forward with its online safety measures, the challenge will be to strike a balance that protects young users without infringing on the rights of all internet users to maintain their privacy and security.
