The UK government is pushing ahead with plans to restrict children’s access to Virtual Private Networks (VPNs) as part of a sweeping online safety drive — and the implications for every VPN user in Britain are significant. With a public consultation now underway and legislative amendments already tabled, the debate over VPN regulation in the UK has moved from theoretical to very real, very fast.
What Is the Government Proposing?
Under proposals linked to the Online Safety Act (OSA), the government is examining options to age-restrict or limit children’s use of VPN services where those services are being used to bypass safety protections — such as age verification systems on adult content platforms and social media sites.
The measures are being introduced as amendments to two existing pieces of legislation: the Children’s Wellbeing and Schools Bill (CWSB) and the Crime and Policing Bill (CPB). The House of Lords has already voted in favour of provisions within the Children’s Wellbeing and Schools Bill that would prohibit VPN providers from offering their services to under-18s in certain contexts.
Crucially, the government has been clear that it is not proposing a blanket ban on VPNs for adults. A spokesperson stated: “We make no apology for ensuring platforms prevent children from bypassing safety protections.” The focus, at least for now, is on minors using VPNs to circumvent age-gating on social media and adult websites — a practice that has surged since the OSA’s age verification requirements came into force.
To inform the policy, the government launched a Children’s Digital Wellbeing Consultation on 1 March 2026, which runs until May 2026. Titled “Growing Up in the Online World,” the consultation seeks input from parents, children, and industry stakeholders on how best to protect young people online — including whether VPN services should be required to implement age verification of their own. Sources: ISPreview UK, GB News.
Background: Why VPNs Are in the Spotlight
The Online Safety Act, which received Royal Assent in 2023, placed a legal duty on online platforms to implement “highly effective” age verification to prevent children from accessing harmful content. Since those requirements began to bite, VPN downloads in the UK have spiked — with many users, including teenagers, turning to VPNs to mask their location or IP address and bypass the new age checks.
This has created a policy headache for the government. The OSA was designed to make the internet safer for children, but VPNs — tools primarily used by adults for legitimate privacy and security purposes — have become an unintended workaround. Rather than wait for entirely new legislation, ministers want powers that allow them to respond quickly to evolving technology, which is why the amendments are being attached to existing bills currently passing through Parliament.
The government’s approach reflects a broader pattern of “political mission creep” around the OSA, with its scope gradually expanding beyond its original remit. Ofcom, the UK’s communications regulator, is responsible for enforcing the Act and typically focuses its resources on major platforms and the worst offenders — but VPN providers could increasingly find themselves in the regulatory crosshairs.
Critics Warn of Serious Unintended Consequences
The proposals have attracted fierce criticism from privacy advocates, cybersecurity experts, and prominent public figures.
Wikipedia founder Jimmy Wales called the potential restrictions an “embarrassment,” arguing that VPNs are fundamental privacy tools and that children should be taught how to use the internet safely — including understanding the legitimate uses of VPNs — rather than having access to them blocked.
Cybersecurity professionals have raised practical objections too, pointing out that enforcing a VPN restriction on minors would be technically extremely difficult — one expert compared it to trying to ban smoking inside private homes. There are also concerns that any such restrictions could push young people towards less reputable, potentially unsafe VPN services that operate outside UK jurisdiction and have no incentive to comply.
Perhaps most strikingly, critics have warned that restricting VPN access — even for children — risks placing the UK in uncomfortable company. Countries that restrict or ban VPN use include China, Russia, Iran, and North Korea. Several commentators have cautioned that the UK risks becoming a “digital pariah state” and damaging its international reputation as a champion of digital freedom and open internet access.
What This Means for UK VPN Users
If you are an adult VPN user in the UK, the immediate message from the government is that your access is not under threat. The proposals are specifically targeted at children’s use of VPNs to bypass safety measures — not at the broader adult market.
However, there are several reasons why all UK VPN users should be paying close attention to how this develops:
- Age verification requirements for VPN providers: If legislation passes requiring VPN services to implement age verification, providers operating in the UK market may face significant compliance costs. This could affect pricing, service availability, and the range of providers willing to serve UK customers.
- Regulatory precedent: Today’s child-focused restrictions could become tomorrow’s broader controls. Once a regulatory framework for VPN oversight exists, it becomes easier for future governments to expand its scope.
- Privacy implications of age verification: Any age verification system requires users to submit personal data — potentially including identity documents. For privacy-conscious VPN users, this is a significant concern, as it could undermine one of the core reasons many people use a VPN in the first place.
- Provider market changes: Smaller or international VPN providers may choose to exit the UK market rather than comply with new regulations, reducing consumer choice.
The consultation closes in May 2026, and the government has indicated it wants to move quickly once findings are published. UK VPN users — and the providers that serve them — should consider responding to the consultation to ensure the privacy and security community’s voice is heard in the policy process.
What Happens Next?
The Children’s Digital Wellbeing Consultation runs until May 2026. Following the consultation, the government is expected to publish its findings and set out its legislative intentions. The amendments to the Children’s Wellbeing and Schools Bill and the Crime and Policing Bill are already progressing through Parliament, meaning some form of VPN-related provision could become law before the end of 2026.
We will continue to monitor this story closely and report on any developments that affect VPN users in the UK. In the meantime, if you want to make your voice heard, the government’s consultation — “Growing Up in the Online World” — is open to responses from members of the public.
Sources: ISPreview UK | GB News | Serverspace.io – European VPN Regulation Guide 2026
