A New Report Puts VPNs Back in the Spotlight

The UK government has published fresh research showing that a significant share of children are using VPNs to slip past the age verification checks introduced under the Online Safety Act. According to the findings, one in four children have used a VPN, and the Department for Science, Innovation and Technology (DSIT) has released an independent report titled 'Children's circumvention behaviours online' examining exactly how young people are getting around the safeguards designed to keep them away from adult content.

The Online Safety Act's child safety duties came into force in July 2025, requiring platforms that host adult or otherwise restricted material to implement what the law calls 'highly effective age assurance.' In practice, this has meant a wave of new age verification tools, from facial age estimation to ID checks, rolled out across sites that previously relied on a simple checkbox. The government's own research now suggests a notable portion of children are simply routing around these controls entirely by using a VPN to mask their location or appear to browse from outside the UK.

Why a VPN Ban Is Being Floated as the 'Next Step'

The report's findings have prompted renewed discussion in Westminster about whether restricting VPN access for minors, or even VPNs more broadly, should be considered the next regulatory move. The logic is straightforward on paper: if age verification can be bypassed simply by connecting to a VPN and appearing to be located elsewhere, then the entire framework built around the Online Safety Act risks being undermined at the point of use.

This isn't a uniquely British dilemma. Lawmakers in several US states have floated comparable ideas, with proposed legislation in states like Wisconsin and Michigan aiming to restrict VPN use specifically to close the same loophole around sexual content and age-gated material. The parallel matters because it shows this isn't an isolated policy reflex. It's part of a broader pattern where regulators, having built age verification systems, are now confronting the reality that a VPN can render location-based checks largely meaningless.

The difficulty for any government considering this route is that VPNs are not niche tools. They're widely used by millions of people, including adults and businesses, for entirely legitimate reasons: protecting data on public Wi-Fi, accessing work networks remotely, or simply keeping browsing activity private from advertisers and internet service providers. A blanket restriction, or even a targeted one aimed at minors, raises immediate questions about enforceability, since verifying a user's age before they're allowed to install or use a VPN would itself require some form of age check, creating a circular problem.

The Privacy Trade-Off Nobody Is Fully Addressing

What tends to get lost in these debates is the privacy dimension. VPNs exist, in large part, because people want a layer of protection against being tracked, profiled, or geographically identified online. Age verification systems, by contrast, often require handing over sensitive personal data, whether that's a photo ID, a credit card, or biometric information used for facial age estimation. For many adults, a VPN is precisely the tool they'd use to avoid submitting that kind of data to a platform in the first place.

If the government's next step genuinely involves limiting VPN access, it would need to grapple with the fact that the same technology enabling a small number of children to bypass age checks is also protecting the privacy of a much larger population of legitimate, adult users. Any restriction broad enough to be effective against determined teenagers would likely also affect people using VPNs for entirely unrelated privacy and security reasons.

What This Means For You

If you're a parent, this report is a reminder that age verification tools are not a complete solution on their own. Technical checks can be circumvented, and conversations about what your children are accessing online remain just as important as any software-based safeguard. If you're an adult VPN user, it's worth paying attention to how this debate develops. Proposals framed around child safety can sometimes expand into broader restrictions that affect everyone, so it's reasonable to follow the policy discussion even if the immediate target is meant to be minors.

Key Takeaways

  • A new DSIT report found that around one in four UK children have used a VPN, in some cases to bypass age verification checks required under the Online Safety Act.
  • The findings have reopened discussion about whether limiting VPN access should be the government's next regulatory step.
  • Similar VPN restriction proposals tied to age verification have surfaced in parts of the United States, suggesting this is a wider regulatory trend rather than a one-off UK policy idea.
  • Any move to restrict VPNs raises real questions about enforceability and about the privacy trade-offs for the much larger population of adults who rely on VPNs for legitimate reasons.
  • Parents and privacy-conscious users alike should keep an eye on how this policy debate evolves, since the outcome could shape VPN access well beyond the original child safety concern.