UK Government Launches Public Consultation on VPN Age Restrictions
The UK government has initiated a public consultation to assess whether virtual private networks (VPNs) should be subject to age restrictions, as part of broader efforts to enhance digital safety under the Online Safety Act. This move comes after a notable increase in VPN downloads following the implementation of age checks for adult websites last year, raising questions about the technology's role in circumventing online protections.
Consultation Details and Key Questions
On 2 March 2026, the Department for Science, Innovation and Technology opened the "Growing up in the online world" digital safety consultation, which will remain active until 26 May 2026. The inquiry specifically seeks public input on whether universal age checks should be required to access VPNs and what potential impacts such measures might have on ordinary users who rely on these services for privacy and security. It also examines how children are currently bypassing online safety rules, including the use of VPNs as circumvention tools, and whether any restrictions could be effectively enforced without unintended consequences.
Cybersecurity Experts Warn of Enforcement Challenges
Cybersecurity specialists have expressed significant concerns about the feasibility of restricting VPNs. Corey Nachreiner, chief security officer at WatchGuard Technologies, highlighted that while it might be possible to compel VPN providers based in UK-partner countries to comply with age restrictions, many global VPN and proxy solutions operate in jurisdictions where legal enforcement is more difficult. He noted that attempts to block VPNs could lead to an ongoing cat-and-mouse game, as providers adapt their network and encryption protocols or alter traffic patterns to evade detection. Nachreiner added that the most legitimate VPNs, used by businesses and individuals for valuable privacy features, are often the easiest to block, potentially harming both adults and children.
Pierre Noel, field chief information security officer at Expel, further explained that VPN technology is designed to blend in with normal internet traffic, making it challenging to detect or block. He stated, "VPNs are adept at masking themselves as standard web communications. It will be challenging for the UK government to determine whether a connection is from a legitimate originator or a minor trying to bypass age-verification controls."
Digital Rights Campaigners Question Effectiveness
Digital rights advocates have also raised doubts about whether restricting VPNs would genuinely improve online safety. James Baker, platform power programme manager at the Open Rights Group, argued that there is little evidence to suggest young people are using VPNs to bypass digital ID checks imposed by the Online Safety Act. He warned, "The government's proposals to age gate them will have little impact on children's online safety but will deter adults from using them or force people to hand over personal documents or biometric data to companies."
Broader Context and Future Steps
This consultation is part of a larger political debate sparked by the Online Safety Act, which has brought VPN technology into the spotlight. While an outright ban is not currently proposed, the government is exploring ways to expand age checks to VPNs in response to their increased usage. After the consultation closes, the government will review responses to decide whether further action is necessary, balancing online safety concerns with privacy and security needs.
