The UK abandons its proposal to impose restrictions on VPNs.

      The UK appeared poised to impose restrictions on VPNs as it tightened regulations for children online. However, it has since reconsidered, influenced by its own research.

      Online Safety Minister Kanishka Narayan made the situation clear during a BBC interview, stating, “We decided not to limit VPNs.” A VPN conceals a user's actual location, allowing individuals to bypass age verification checks.

      This decision coincided with the introduction of a new midnight social media curfew for 16 and 17-year-olds. Technology Secretary Liz Kendall confirmed this in a written statement, acknowledging that VPNs serve “legitimate privacy and security purposes.”

      Findings from the research

      The government had commissioned a study involving over 2,000 children, which undermined the rationale for a VPN ban. The report revealed that approximately 25% of 11 to 17-year-olds have used a VPN, primarily for privacy rather than to violate rules.

      Only about 7% of children utilize VPNs to access age-restricted content, while many more simply provide false information. Nearly half of those who circumvent age checks do so by entering a fictitious date of birth, indicating that the VPN is not the primary bypass method.

      Responsibility shifts to platforms

      Instead of regulating the tools themselves, the government is transferring the responsibility to the platforms. They are now required to implement “robust steps” to identify and prevent underage users from bypassing age checks.

      Ofcom is expected to report by October on what constitutes a solid over-16 age verification system. The government has also asked it, alongside the data regulator, to explore how platforms can effectively detect VPN usage. Additionally, ministers will engage with VPN providers regarding voluntary measures and will “keep this area under close review.”

      A victory for privacy advocates

      This reversal is a significant victory for digital rights organizations. A coalition of over 20 tech companies and advocacy groups, including Proton and Mozilla, had urged the government to refrain from restricting VPNs. Mozilla cautioned that imposing age restrictions on VPNs could lead to cybersecurity issues without effectively safeguarding children.

      However, not everyone believes the broader strategy is effective. Critics point out that the curfew and feature limitations can be disabled, creating a noticeable loophole. One analyst remarked that the government is “leaving the side door open.”

      This development contrasts with the global trend, as it coincides with the upcoming under-16 social media ban in the UK, while Australia's teen ban has faced challenges with VPN circumventions, and New Zealand has recently decided against such limits. Even US courts are grappling with the regulation of online age verification. For now, the UK has opted for an evidence-based approach rather than imposing a sweeping ban.