Lawmakers are weighing age-gating VPNs to curb online harm, but argue that VPNs also play crucial privacy and security roles, making any restrictions a delicate balance.

If age restrictions are adopted, advocates say VPNs could fall under online-safety rules, potentially reshaping how privacy tools are used and audited in the UK.

Readers are invited to share their views through the GOV.UK consultation page before the deadline.

The debate sits alongside recent measures like the Children’s Wellbeing and Schools Act, which imposes anti-circumvention duties on service providers and expands discussions on age verification and online safety.

UK officials are winding down a three-month national online-safety consultation, closing on May 26 at 11:59 pm, to consider measures including potential age restrictions on VPNs.

The accompanying government report emphasizes balancing enforceable content controls with preserving legitimate adult use of VPNs, noting the challenge of distinguishing adult from underage users.

International context includes Utah’s VPN restrictions tied to age verification, signals from the EU about possible future regulation, and ongoing questions about the feasibility and enforceability of blocking or verifying VPN use.

Public and industry voices warn that age-restricting VPNs could diminish privacy and security for all users and may not meaningfully improve child safety, with many providers and organizations opposing restrictions.

Industry concerns are echoed by the VPN Trust Initiative (VTI), which warns that viewing VPNs as loopholes could worsen harm to children, while Surfshark cautions that age checks could drive providers toward problematic verification methods.

Statements from Mozilla and 19 organizations, including Proton VPN, Mullvad, ExpressVPN, and Tor, argue that restricting VPNs would undermine the open web and create new data vulnerabilities, especially for users over 18.