Are the UK Banning VPNs? UK VPN Ban Explained (2026)
The current law, the rejected child-VPN ban, Parliament's new powers and what could change next
Are the UK banning VPNs? No—not at present. The UK has not introduced a blanket VPN ban, and VPN software remains legal to download, sell and use in the United Kingdom. There is no national rule requiring every VPN user to provide ID, and there is no law that makes ordinary VPN use by an adult—or by a child—a criminal offence.
The confusion comes from three separate developments. First, the House of Lords approved an amendment that would have required a prohibition on supplying VPN services to UK children. The Commons rejected that specific amendment. Second, the final Children's Wellbeing and Schools Act 2026 created a broader power allowing ministers to make future regulations that prevent or restrict children's access to specified internet services. Third, the government consulted on whether that power should be used for VPNs.
As of 14 June 2026, the consultation has closed, the government is analysing responses and no VPN-restriction regulations are in force.
VPNs are legal in the UK. A future child-access restriction is possible under newly enacted powers, but it has not yet been made.
VPN use remains legal
There is no blanket ban, licensing scheme or universal identity check for adults using a VPN in the UK.
No current child VPN ban
The law does not presently prohibit every child from downloading or using a VPN. Separate school, household, app-store or service rules may still apply.
The mandatory ban was rejected
Amendment 92 would have required a child VPN prohibition within 12 months, but the Commons voted against that specific clause.
Restrictions remain possible
Section 70 created a regulation-making power. Ministers could use it after considering the consultation, subject to the legal and parliamentary process.
Are VPNs Legal in the UK in 2026?
Yes. VPNs are legal in the United Kingdom. The government expressly stated after the Online Safety Act's child-safety duties took effect that VPNs have legitimate uses and remain lawful. Businesses use them for remote access, journalists and researchers use them to protect sensitive communications, and ordinary users rely on them for security on public Wi-Fi or to reduce exposure of their home IP address.
Legality does not remove every restriction. A workplace can limit unauthorised VPN software on company devices, a school can block it on its network, an online service can enforce terms about location or access, and using a VPN does not make fraud, hacking, copyright infringement or any other unlawful conduct legal.
| Question | Status on 14 June 2026 | What it means |
|---|---|---|
| Can adults use VPNs? | Legal | No national ban or routine VPN identity check applies to adult users. |
| Can children use VPNs? | Not generally prohibited | No UK-wide child VPN prohibition has been brought into force. |
| Did the Lords vote for a child VPN ban? | Yes, but the clause was rejected | The Commons disagreed with the mandatory prohibition and it did not become the final rule. |
| Can ministers introduce future restrictions? | Yes, through regulations | Section 70 inserted a broad child-access power into the Online Safety Act. |
| Are VPN age checks mandatory now? | No | Age assurance for VPN users is one policy option, not a current universal duty. |
| Has the 2026 consultation produced a final policy? | Not yet | The consultation closed on 26 May and the response is expected in summer 2026. |
Why Are People Saying the UK Is Banning VPNs?
The claim grew from a real parliamentary proposal, but it often leaves out what happened afterwards.
The House of Lords approved a specific child VPN prohibition
On 21 January 2026, peers agreed to Amendment 92 during the passage of the Children's Wellbeing and Schools Bill. It would have required the Secretary of State, within 12 months of the Act passing, to make regulations prohibiting the provision of a relevant VPN service to UK children. The proposed clause allowed highly effective age assurance and called for monitoring and enforcement.
That was a serious proposal, but an amendment passing in one House is not the same as a final law.
The Commons rejected that mandatory ban
On 9 March 2026, the House of Commons voted to disagree with the child VPN prohibition. The division was 321 votes to 106. The government argued that it did not want to pre-empt the evidence being collected through its wider online-safety consultation.
The final Act took a broader route
Instead of requiring an automatic VPN ban, Parliament enacted a general power that can be used to prevent or restrict children's access to specified internet services. This distinction matters:
- The rejected clause said the government must create a child VPN prohibition.
- The enacted power says the government may make regulations for specified services to address risks of harm.
- No service is restricted merely because the power exists; regulations must still be drafted, approved and brought into force.
Accurate headline: the UK has created a legal route that could support restrictions on children's VPN access, but it has not enacted a blanket VPN ban and has not yet made the implementing regulations.
What Section 70 of the Children's Wellbeing and Schools Act 2026 Does
Section 70 inserted a new section 214A into the Online Safety Act 2023. It permits the Secretary of State, for the purpose of protecting children from a risk of harm, to make regulations requiring providers of specified internet services to prevent or restrict access by children to a service, feature or functionality.
The power is deliberately broader than VPNs. Depending on how future regulations are written, it could be used for social-media services, AI chatbots, particular addictive features or VPN services. It can also support limits on how long or at what times children may access specified services.
Does section 70 itself ban anything?
No. It creates authority to make later regulations. The Act does not name every VPN service and automatically switch off access.
Who would future duties target?
The power is framed around requirements on providers of specified internet services. It is not written as a criminal offence committed by a child for using an app.
Could VPNs be specified?
Potentially. The government's consultation expressly asked about age-restricting or limiting children's VPN use, so VPN services are within the policy discussion.
Would Parliament be involved?
Regulations under section 214A are subject to the affirmative procedure, meaning a draft must be approved by both Houses before it becomes law.
What the 2026 UK Consultation Asked About VPNs
The government's Growing Up in the Online World consultation ran from 2 March to 26 May 2026. Its VPN chapter examined whether children should face age restrictions or limits where VPN use undermines online-safety protections.
It did not present a finished VPN ban. Instead, it asked questions including:
- whether children's access to VPN services should be restricted;
- which age or ages any restriction should cover;
- whether VPN providers would need highly effective age assurance;
- how a rule could be enforced without blocking legitimate adult use;
- how businesses, privacy, cybersecurity and vulnerable users could be affected;
- whether restrictions would simply push users towards unsafe or unregulated tools.
The government recognises legitimate VPN use
The consultation explicitly says that any approach should avoid inadvertently restricting lawful adult access. It identifies legitimate uses such as secure remote working, sensitive communications, privacy protection and safer access on public Wi-Fi.
This makes a total nationwide ban on VPN technology unlikely. The live policy question is narrower: whether providers should have to identify or restrict children in defined circumstances, and whether doing so would be effective and proportionate.
Children do not use VPNs for only one reason
Evidence cited by the consultation found that 8% of children in one Internet Matters survey had used a VPN during the previous year, with 66% of those users saying they used it to protect personal data. Separate Childnet research found that 38% of surveyed child VPN users used one to stay safe online or protect privacy.
Ofcom's May 2026 research used a different survey and timeframe and found higher overall use: roughly a quarter of 8–17-year-olds reported some VPN use in the previous six months, including respondents who did not give a reason. The different figures are not necessarily contradictory; they measure different samples, periods and question wording.
Consultation status: closed. The government says it will publish its response in summer 2026. Until that response and any draft regulations appear, claims about the exact age limit, identity method, exemptions or enforcement model are speculation.
Will UK VPN Users Have to Verify Their Age or Show ID?
Not under the law currently in force. There is no general requirement for a person to upload a passport, driving licence or selfie before downloading or connecting to a VPN.
If ministers decide to restrict children's access, providers may need a way to distinguish children from adults. That could involve age assurance, but age assurance does not always mean handing identity documents directly to a VPN company. Existing systems can include facial-age estimation, bank or mobile-network checks, digital identity services, reusable age tokens and other privacy-preserving approaches.
Could adults still be affected?
Yes, indirectly. A rule designed for children can require adult users to demonstrate that they are above an age threshold. That is one reason the consultation asks about privacy, security, cost, accessibility and the risk of discouraging lawful VPN use.
No particular method has been selected for VPNs, and no provider is currently under a universal UK duty to age-check every customer. Any article claiming that all British VPN users must already submit ID is inaccurate.
Would business and corporate VPNs be included?
The final answer depends on the wording of future regulations. A sensible regime would need to distinguish consumer circumvention tools from corporate remote-access systems, private business gateways, university networks, security products and device-level VPN functions. The consultation acknowledges these legitimate uses but does not yet provide a final exemption list.
Privacy risk
Centralising identity or age data could create attractive targets for attackers. Data minimisation and independent age tokens may reduce that risk.
Cybersecurity risk
Overbroad restrictions could discourage secure remote access or push users towards less trustworthy free services and unofficial downloads.
Enforcement challenge
VPNs can be built into browsers, operating systems, routers and corporate tools, making a simple app-store ban incomplete.
Effectiveness question
Children may use other circumvention methods, such as shared accounts or devices, so a VPN-only policy may not solve the underlying problem.
Does the Online Safety Act Already Ban VPNs?
No. The Online Safety Act's existing child-safety regime primarily places duties on regulated online services. Since 25 July 2025, services within scope have had to assess risks and protect children from harmful content. Services carrying pornography, suicide, self-harm or eating-disorder content may need highly effective age assurance to prevent children from encountering it.
Ofcom's guidance also expects services to consider readily available ways that children could circumvent an age check. A regulated platform that deliberately promotes VPN use to help children evade its protections could face enforcement action. That is different from making VPN software illegal.
A VPN can change the IP location seen by a website, but it does not remove a platform's legal duties. Platforms may use several signals—not just IP address—to identify UK users, assess age and control access.
UK VPN Ban Timeline: From Age Checks to the 2026 Decision
Online Safety Act child-safety duties take effect
Regulated services begin operating under Ofcom's child-protection codes, including robust age assurance for certain high-risk content.
The government says VPNs remain legal
An official explainer distinguishes lawful VPN use from platform efforts to prevent children bypassing safety controls.
The Lords approves Amendment 92
The proposed clause would require a prohibition on supplying relevant VPN services to UK children within 12 months.
The national online-safety consultation opens
Ministers ask whether children's VPN use should be age-restricted or limited, alongside questions about social media, AI chatbots and digital consent.
The Commons rejects the mandatory child VPN ban
MPs vote 321 to 106 to disagree with the specific Lords amendment. The government proposes broader powers instead.
The Children's Wellbeing and Schools Act receives Royal Assent
Section 70 creates a power to make future regulations preventing or restricting children's access to specified internet services.
Ofcom publishes updated research
New datasets cover children's experiences of age assurance and VPN use after the child-safety duties came into force.
The consultation closes
The government begins analysing submissions and says its response will follow in summer 2026.
Ministers say an update is coming
In Parliament, the government confirms that responses are under review and an update will be provided in the coming weeks.
Ofcom's statutory age-assurance report is due
The report must assess how services have used age assurance, how effective it has been and whether privacy, cost or other factors have hindered it.
UK VPN Ban Latest Update: What Happens Next?
The next decisive document is the government's consultation response. It may recommend no VPN-specific rule, targeted restrictions for certain ages, age assurance for consumer VPN providers, safeguards at app-store or device level, or a broader package aimed at circumvention.
If ministers use section 214A, they must publish draft regulations explaining which services and children are covered, what providers must do, how compliance will be monitored and how rules will be enforced. The affirmative procedure means both Houses of Parliament would need to approve the regulations.
Section 71 of the 2026 Act also requires a progress statement on the first regulations and a proposed timeline within six months of Royal Assent. That makes late October 2026 another important checkpoint.
What UK VPN users should do now
- Continue using lawful VPN services normally; there is no current shutdown date or general requirement to uninstall a VPN.
- Do not assume a viral post or headline reflects the final enacted law.
- Check the government's summer response and any draft regulations before changing business or personal security arrangements.
- Expect reputable providers to explain any genuine UK compliance changes directly in their apps, policies or support pages.
Common Myths About a UK VPN Ban
Frequently Asked Questions
Are VPNs illegal in the UK?
No. VPN software and ordinary VPN use are legal. A VPN does not protect a user from laws governing what they do online, and private organisations can impose their own network or account rules.
Has the UK banned children from using VPNs?
No current UK-wide child VPN ban is in force. The Lords approved a mandatory prohibition during the Bill's passage, but the Commons rejected it. Parliament instead passed a broader power that may support future restrictions.
Can the government ban VPNs without another full Act of Parliament?
Section 214A gives ministers power to make child-access regulations for specified internet services. That avoids needing an entirely new Act for each measure, but draft regulations would still need approval from both Houses under the affirmative procedure.
Will adults need ID to use a VPN?
There is no such universal requirement today. Future child-access rules could require some form of age assurance, which may also affect adults, but the government has not announced a final method.
Does the Online Safety Act make it illegal to use a VPN to change location?
No general offence says that changing apparent IP location through a VPN is illegal. However, using a VPN may breach a particular service's terms, and it does not excuse unlawful conduct or fraud.
Could free VPN apps be removed from UK app stores?
That is one technically possible enforcement route, but it is not current UK policy. No final regulations specify app-store removal, provider blocking or a particular enforcement model.
When will there be a definite answer?
The government says its consultation response will be published in summer 2026. Ofcom's age-assurance report is due by late July, and the government must provide a progress statement on the first section 214A regulations within six months of the Act receiving Royal Assent.
Official Sources Used for This UK VPN Ban Explainer
This article distinguishes proposals, votes, enacted powers and regulations by relying on primary government, legislation, Parliament and Ofcom sources.
- GOV.UK: changes to the Online Safety Act explained, including the legal position of VPNs
- UK Parliament: Amendment 92 proposing a child VPN prohibition
- House of Commons Hansard, 9 March 2026: rejection of the specific Lords amendment and government amendments in lieu
- Children's Wellbeing and Schools Act 2026, section 70
- Online Safety Act 2023, section 214A as inserted in 2026
- Children's Wellbeing and Schools Act 2026, section 71 progress statement
- GOV.UK: Growing Up in the Online World consultation and current status
- GOV.UK: full consultation chapter on VPNs, age assurance and legitimate adult use
- Ofcom: May 2026 research on children's VPN use and age assurance
- Ofcom roadmap: statutory age-assurance report due by late July 2026
- House of Lords Hansard, 9 June 2026: consultation responses under review