Children’s Commissioner urges action to stop children using VPNs

MPs have raised concerns over the role of VPNs in undermining internet safety laws

Children should be blocked from using virtual private networks (VPNs) to sidestep new age verification rules, according to a report published on Tuesday by the Children’s Commissioner.

The report warns that while the Online Safety Act has introduced stricter age checks for accessing adult content, VPNs remain a loophole that allow under-18s to bypass safeguards.

“There are ways children will be able to circumvent the new rules that are meant to address the myriad of problems identified in this report, for example by downloading a Virtual Private Network (VPN), which remain legal software in the UK,” the report said.

It recommends that the government explore measures to stop children using VPNs to get around protections, including requiring providers to introduce “highly effective age assurance” systems.

No plans to ban VPNs outright

Speaking on BBCNewsnight, Children’s Commissioner Dame Rachel de Souza described the use of VPNs to bypass age checks as a “loophole that needs closing”.

The government has said there are no plans to ban VPNs outright. A spokesperson told the BBC that while the technology remains legal, officials will continue to monitor its use.

Peter Kyle, secretary of state for Science, Innovation and Technology, made similar comments in July, stating that the UK would not prohibit VPNs but would look “very closely” at how they are being used.

Some MPs have previously raised concerns over the role of VPNs in undermining internet safety laws. In 2022, Labour MP Sarah Champion proposed giving Ofcom powers to investigate their use, and earlier this year she expressed frustration at reports of a surge in VPN adoption.

Under the Online Safety Act, any site promoting VPNs as a way to sidestep age verification checks risks fines of up to 10% of global revenue or £18 million, whichever is higher.

While campaigners see tougher rules on VPN providers as a likely next step, privacy advocates warn that restricting VPN use would contradict their core purpose and could undermine online privacy protections.