UK Government Decides Not to Restrict VPNs, Calls Them Legitimate Privacy Tools

20.07.2026 11
UK Government Decides Not to Restrict VPNs, Calls Them Legitimate Privacy Tools

The UK government has decided not to restrict VPN services after all. In a written parliamentary statement, Technology Secretary Liz Kendall confirmed there will be no ban and no age-gating of VPN apps, because these tools "have legitimate privacy and security uses." It is a rare win for the privacy industry - and the direct answer to a question we have been following for months, ever since Britain opened a formal consultation on whether VPNs should be reined in to enforce its online age-verification regime.

What the government actually decided

For most of the past year the direction of travel looked ominous for VPN users. Ministers floated the idea of age-restricting or limiting children's access to VPNs, MPs raised it repeatedly in Online Safety Act debates, and VPN downloads doubled the moment mandatory age checks went live. The obvious next step, many feared, was to come for the circumvention tool itself.

Instead, the government has explicitly ruled that out. VPNs will not be blocked, will not be age-gated, and apps that offer them will not be banned. This is the outcome of the process we covered when Britain closed its public consultation on age verification for VPNs, and it is the policy that Liz Kendall promised would land in July 2026. The promise arrived, and it came down on the side of the privacy tool.

The pressure moves to the platforms

Leaving VPNs alone does not mean the government has dropped the goal. Rather than block the tool, it has shifted the burden onto the services people use it to reach. Platforms "must take robust steps to detect and prevent attempts by underage users to circumvent age assurance measures," and providers now have to weigh VPN circumvention risk as part of their Children's Access Assessments.

To sharpen that, the government has tasked Ofcom and the Information Commissioner's Office with reporting by October on how platforms can better detect and discourage VPN use for dodging age checks. In other words, the fight has not ended - it has moved one layer down, from banning VPNs to teaching websites to spot them.

Worth watching: "Detect and prevent" is doing a lot of quiet work here. A platform trying to identify VPN traffic ends up fingerprinting and profiling all of its users, not just minors - which is exactly the kind of blanket monitoring a VPN exists to prevent. The tool survived; the pressure to unmask it did not.

The evidence that won the argument

What tipped the decision was data rather than ideology. Independent research found that privacy, not rule-breaking, is the top reason children in the UK reach for a VPN, and that only somewhere between 7% and 10% use one specifically to get past age checks. Even after usage doubled following enforcement, only a small minority of young users were turning to VPNs to unlock restricted content. Faced with those numbers, a blanket restriction on tens of millions of law-abiding adult users became impossible to justify.

A rare win, and where it sits

Britain's decision is striking precisely because the trend elsewhere runs the other way. Only days earlier a Paris court ordered five major VPN providers to block pirate domains and slammed the door on an EU appeal, turning the same kind of privacy tool into an enforcement instrument. The UK looked at a similar road and, for once, stepped back from it.

For anyone who relies on a VPN, the practical lesson is that jurisdiction is everything: the same tool can be officially protected in one country and conscripted into censorship in another. That is why understanding what a VPN does - and where its provider can be legally reached - matters as much as which one you pick.

Conclusion: The UK has chosen not to break the VPN, and has publicly recognised it as a legitimate privacy tool - a meaningful precedent when so many governments are heading in the opposite direction. But the October report on detecting VPN use is a reminder that the goal has only changed shape, not disappeared. The tool is safe for now; the appetite to see through it is not going anywhere.
Tags: vpn uk online safety act age verification ofcom privacy digital rights

Read also