Hands off our VPNs, privacy groups tell UK ministers
Privacy campaigners, browser makers, and VPN providers have united to warn the UK government against restricting virtual private networks, saying age-gating the technology would weaken online security while doing little to stop kids dodging social media bans.
The Open Rights Group on Tuesday published an open letter signed by more than 20 organizations, including the Electronic Frontier Foundation, ExpressVPN, the Internet Society, Mozilla, Mullvad, Proton, and the Tor Project.
It urges ministers to rule out age verification and other restrictions on VPN services.
REG AD
The coalition argues that VPNs have become important infrastructure for a broad range of users, from businesses and journalists to abuse survivors and ordinary users trying to protect themselves on public Wi-Fi. Requiring users to prove their age would undermine the privacy VPNs are intended to provide.
REG AD
"Restricting VPNs would undercut the security and privacy of millions, without making children safer," the letter reads. "Age-gating VPNs would require everyone to surrender sensitive personal information simply to access tools designed to protect privacy."
It's hardly a new fight. Mozilla spent much of spring arguing that ministers were chasing the wrong target, warning that breaking VPNs would do little to fix Britain's age-check problem while making the internet less private and less secure for everyone else. The open letter suggests plenty of others have since reached the same conclusion.
The intervention comes as ministers prepare to introduce a ban on social media for under-16s, arguing that VPNs aren't the loophole many critics assume. The government's own research backs that up, showing that while about one in four 11 to 17-year-olds said they'd used a VPN, only 7 to 10 percent did so to bypass age checks. Most simply lied about their age instead.
The coalition highlights similar figures from Ofcom, which it says makes a poor case for tightening access to VPNs.
MORE CONTEXT
- Utah tells porn sites to take the P out of VPNs, and it's their fault that they can't
- Denmark takes a Viking swing at VPN-enabled piracy
- Firewalls and VPNs are so complex now, they can actually make you less secure
- End well, this won't: UK commissioner suggests govt stops kids from using VPNs
-
ai and ml Even banks and hyperscalers are now sounding the alarm about the AI bubble
-
software Court tosses Microsoft's appeal in pre-owned software licenses battle
-
Security GitHub AI agent leaks private repos when asked nicely
-
applications Microsoft to switch off OWA Light after nearly two decades
-
DEVOPS GitHub cuts short offer to burn repos on CD after mockery ensues - AI and ML OpenAI hides Codex agent instructions behind encryption, leaving developers in the dark Developers worry encrypted MultiAgentV2 messages will make debugging and auditing harder
- AI and ML If you want Claude to speak nicely to you, try Hindi or Arabic Anthropic finds Claude expresses different values across languages
- ai and ml New York becomes first state to halt datacenter buildouts 50 MW-plus bit barn builds on hold while Empire State hashes out rules to protect the environment and ratepayers
- on-prem IBM's mainframe sales get mugged by AI hardware panic, stock sheds more than a quarter of its value CEO Krishna: Customers blew their Z budgets on servers and storage before prices spike, Q2 financials 'disappointing'
- AI and ML Anthropic's extravagant tokenizer complicates AI pricing Token consumption doesn't tell the whole tale but it shouldn't be ignored
- Security Russians are posing as Signal support to launch phishing attacks PLUS: US takes down Iranian propaganda sites; Marketing company asks 'Why Do We Have Your Information?' And more!
- Security Microsoft patches failed to fix on-prem SharePoint, which is now under zero-day attack PLUS: China upgrades smartphone surveillance tools; Ring eases anti-snooping stance; and more
- Black Hat and DEF CON DEF CON Franklin project enlists hackers to harden critical infrastructure Voting village reports have been so successful, says Jeff Moss, that the whole of DEF CON will now be included
- Security EQT buys majority share in Swiss cybersecurity biz Acronis Went at equivalent of $3.5B+ valuation for entire firm, though portion sold not specified
- Malware Month Ten years since the first corp ransomware, Mikko Hyppönen sees no end in sight On the plus side, infosec's a good bet for a long, stable career
- Baddies caught exploiting extensions bugs with perfect 10 scores on vulnerable Joomla websites Flaws in iCagenda, Balbooa Forms extensions can impact open source CMS that powers a million sites worldwide
- Frame: A new X11 server – implemented directly in assembly Joins yserver, Phoenix, and of course XLibre – and outlier Arcan
- Cinnamon 6.8 will support Wayland – if you want it Next version of Linux Mint’s desktop has both kinds of display server
- KDE Plasma users face a dire omen of change: 6.6.6 arrives 6.7 is now current, and in 6.8 you're getting Wayland whether you like it or not
- Collabora releases CODE 26.04 as rivalry between FOSS cloudy office suites heats up Now with Markdown support and smarter formula error handling – plus integrated AI, though it's off by default
- Blast from the past as GIMP 0.54 is revived in Flatpak form Retro-computing fun for the nostalgic with first (and last) release to use Motif instead of GTK
"Ofcom's research found that only around 3 percent of children had used VPNs to access content meant for older audiences," the letter says. "Evidence from Australia shows children are much more likely to get around age checks by not being asked, giving false information, or even drawing on a mustache."
The signatories instead want ministers to tackle what they describe as the "root causes of online harms," rather than making people prove who they are before they can use privacy tools. The letter argues that strong enforcement of platform obligations, better parental controls, investment in digital literacy, and privacy-by-design requirements would do more to protect children than requiring VPNs to be behind age checks.
Whether the government is persuaded may depend on whether it views VPNs as a niche loophole used by a small minority of teenagers – as its own research suggests – or as the next obstacle to enforcing its online safety agenda. ®
[](https://www.facebook.com/sharer.php?u=https%3A%2F%2Fwww.theregister.com%2Fnetworks%2F2026%2F07%2F14%2Fhands-off-our-vpns-privacy-groups-tell-uk-ministers%2F5271070) [](https://twitter.com/intent/tweet?url=https%3A%2F%2Fwww.theregister.com%2Fnetworks%2F2026%2F07%2F14%2Fhands-off-our-vpns-privacy-groups-tell-uk-ministers%2F5271070) [](https://www.linkedin.com/sharing/share-offsite/?url=https%3A%2F%2Fwww.theregister.com%2Fnetworks%2F2026%2F07%2F14%2Fhands-off-our-vpns-privacy-groups-tell-uk-ministers%2F5271070) [](https://bsky.app/intent/compose?text=Hands%20off%20our%20VPNs%2C%20privacy%20groups%20tell%20UK%20ministers%0Ahttps%3A%2F%2Fwww.theregister.com%2Fnetworks%2F2026%2F07%2F14%2Fhands-off-our-vpns-privacy-groups-tell-uk-ministers%2F5271070) [](https://www.reddit.com/submit?url=https%3A%2F%2Fwww.theregister.com%2Fnetworks%2F2026%2F07%2F14%2Fhands-off-our-vpns-privacy-groups-tell-uk-ministers%2F5271070&title=Hands%20off%20our%20VPNs%2C%20privacy%20groups%20tell%20UK%20ministers) [](https://api.whatsapp.com/send?text=Hands%20off%20our%20VPNs%2C%20privacy%20groups%20tell%20UK%20ministers%0Ahttps%3A%2F%2Fwww.theregister.com%2Fnetworks%2F2026%2F07%2F14%2Fhands-off-our-vpns-privacy-groups-tell-uk-ministers%2F5271070)
REG AD