UK Government Consults on Age Restrictions for VPNs Amid Online Safety Debate
The UK government has initiated a public consultation to assess whether virtual private networks (VPNs) should be subject to age restrictions, as part of broader efforts to enhance digital safety under the Online Safety Act. This move comes after a notable increase in VPN downloads following the implementation of age checks for adult websites last year, sparking a political debate about the role of VPNs in circumventing online regulations.
Consultation Details and Scope
On 2 March 2026, the Department for Science, Innovation and Technology launched the "Growing up in the online world" digital safety consultation, which will remain open until 26 May 2026. The consultation seeks public input on various digital safety measures, including whether social media platforms should have a minimum age limit and whether design features like infinite scroll and auto-playing videos should be restricted due to addiction concerns. Specifically, it addresses VPNs, asking whether universal age checks should be required to access these services and what potential impacts such measures could have on users who rely on VPNs for privacy and security.
The inquiry delves into how children might be bypassing online safety rules, exploring if VPNs are used as circumvention tools, the feasibility of enforcing any restrictions, and the possible unintended consequences of implementing age verification on VPN services. While an outright ban on VPNs is not currently proposed, the government is considering expanding age verification to include VPNs as a preventive measure.
Cybersecurity Experts Warn of Enforcement Challenges
Cybersecurity specialists have expressed skepticism about the practicality of restricting VPNs. Corey Nachreiner, chief security officer at WatchGuard Technologies, highlighted the difficulties in enforcement, noting that while "friendly" VPN providers based in UK-partner countries might comply with age restrictions, many global VPN and proxy solutions operate in jurisdictions where legal compulsion is challenging. He warned that attempts to block VPNs could lead to a cat-and-mouse game, with providers adapting their network protocols, encryption methods, or traffic patterns to evade detection and blocking measures.
Nachreiner added that VPNs with evasive features might become more prevalent, while legitimate services used by businesses and individuals for privacy could be disproportionately affected. "The VPNs that are easiest to block are, unfortunately, the most legitimate ones used by businesses or that have valuable privacy features for adults and children alike," he stated.
Technical and Privacy Concerns Raised
Pierre Noel, field chief information security officer at cybersecurity firm Expel, emphasized the technical challenges in detecting or blocking VPNs, as they are designed to blend in with normal internet traffic. "VPNs are adept at masking themselves as standard web communications," he explained. "It will be challenging for the UK government to determine whether a connection is from a 'legit' originator or a minor trying to bypass age-verification controls."
Digital rights campaigners have also questioned the efficacy of such restrictions. James Baker, platform power programme manager at the Open Rights Group, argued that there is little evidence young people are using VPNs to bypass digital ID checks imposed by the Online Safety Act. He cautioned that age-gating VPNs might not significantly improve children's online safety but could deter adults from using these services or force them to surrender personal documents or biometric data to companies.
Broader Implications and Next Steps
The consultation reflects ongoing tensions between enhancing online safety and preserving digital privacy and freedoms. As the government reviews responses after the consultation closes, it will decide whether further action is warranted. This debate underscores the complex balance between regulatory measures and the evolving landscape of internet technologies, with VPNs at the forefront of discussions about security, privacy, and access in the digital age.
